$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json) Hash identifier: Ms0LD8sVxTJoBAR26Jl4vTGSAQLjqzyKfF7iTubYPPM= Subject key identifier: 55:44:FE:73:88:E0:3E:C0:EF:A5:58:55:22:5A:6F:EA:E5:CD:99:6C Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft Manifest number: 045D Signing time: Mon 12 May 2025 23:57:37 +0000 Manifest this update: Mon 12 May 2025 23:57:36 +0000 Manifest next update: Mon 19 May 2025 23:57:36 +0000 Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: jOFpZS2dlTO60mQazMvMB2UL7ziYBEU8QqpvlDWhxW0=) 2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: roBiUviMC5AgiQf3XHVJjv6BNW8BJ8gqBvPnuJuZKp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Validity Not Before: May 12 23:57:36 2025 GMT Not After : May 19 23:57:36 2025 GMT Subject: CN=68228af1-e84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:c9:ae:2b:6c:77:2b:3f:4e:2d:68:fc:af: 22:44:5e:8f:3a:90:ff:ed:46:c8:dc:c2:2f:e7:3f: ae:2e:1e:97:25:23:93:24:63:3c:e0:bf:0b:bc:74: f9:18:ff:87:65:0e:89:c4:d4:2f:4b:00:6f:7a:c3: 47:d3:ed:52:27:c1:be:f6:d2:af:b1:44:16:a0:2e: f3:bf:31:16:a5:3a:9c:fb:2d:3f:06:99:fa:ee:60: 4b:cf:a8:93:89:d8:b1:d1:57:7b:04:10:98:00:49: f0:79:93:01:d7:fc:32:c8:bb:6a:47:54:ae:2a:48: fb:e7:ee:09:42:7b:b9:b8:eb:1d:ea:bd:fc:ca:ff: 38:5e:31:5f:ba:33:6c:90:da:75:65:fa:3d:3f:88: 23:6a:20:7b:2d:ce:91:dd:49:55:bf:a9:87:f9:66: d1:f5:7a:23:9a:39:0d:4e:23:ed:3b:b7:6e:c0:29: 18:5d:ab:77:43:06:c9:9a:50:19:25:41:8a:66:36: ae:d2:b6:c1:2c:ad:3b:db:5e:e5:0c:fe:77:eb:40: 0b:ca:3e:43:bd:b2:da:55:8d:bc:02:e3:91:23:c9: dd:f0:48:33:8c:41:76:7f:64:3e:84:f0:22:ef:c3: 24:cd:5b:1f:b3:08:69:f6:b0:00:70:82:50:f6:b5: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:44:FE:73:88:E0:3E:C0:EF:A5:58:55:22:5A:6F:EA:E5:CD:99:6C X509v3 Authority Key Identifier: keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8f:e1:c4:80:2e:a0:1f:b9:87:61:06:7d:37:eb:05:b8:2b: 87:98:36:d6:23:6d:7a:6a:8f:10:d0:47:ad:1e:25:32:b4:b0: a2:94:e9:97:5d:d8:cb:20:a3:f9:fb:8f:17:04:08:e2:14:4d: 90:01:94:94:3e:73:1e:28:f8:cf:04:52:08:23:61:d2:ac:45: 2c:c3:0c:b2:27:f4:1d:de:dc:06:56:cb:60:44:f2:fa:80:76: 5d:d8:41:64:98:94:b6:6c:b9:01:65:35:38:e1:96:a6:79:37: 3f:00:b1:95:73:9b:d2:11:f9:b0:c0:e4:d2:16:5e:81:14:44: 8e:3f:54:4d:0b:d3:f5:b3:fb:09:1b:51:ae:22:47:07:ff:ac: 29:cb:30:a3:a4:ca:b1:34:2c:0c:36:20:35:e3:5e:1a:b5:94: dd:69:a8:29:f0:02:97:ee:5a:1f:67:6e:88:58:11:15:35:e9: 74:6c:6a:88:a5:af:6c:fa:67:e4:17:0e:c4:2e:33:8f:8f:c3: 5e:69:ad:bf:96:7e:e1:92:4d:fe:e5:3a:d2:e5:3f:b7:15:3f: ca:e1:c8:4c:a0:c4:fc:df:29:d8:4f:e1:06:e8:02:b9:e3:ce: f8:0e:fc:99:0f:3e:a8:53:d0:11:e0:e8:4e:f7:6c:fe:5c:48: b6:b4:45:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD NjcyOTUwOUIwHhcNMjUwNTEyMjM1NzM2WhcNMjUwNTE5MjM1NzM2WjAYMRYwFAYD VQQDEw02ODIyOGFmMS1lODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwnJritsdys/Ti1o/K8iRF6POpD/7UbI3MIv5z+uLh6XJSOTJGM84L8LvHT5 GP+HZQ6JxNQvSwBvesNH0+1SJ8G+9tKvsUQWoC7zvzEWpTqc+y0/Bpn67mBLz6iT idix0Vd7BBCYAEnweZMB1/wyyLtqR1SuKkj75+4JQnu5uOsd6r38yv84XjFfujNs kNp1Zfo9P4gjaiB7Lc6R3UlVv6mH+WbR9XojmjkNTiPtO7duwCkYXat3QwbJmlAZ JUGKZjau0rbBLK07217lDP5360ALyj5DvbLaVY28AuORI8nd8EgzjEF2f2Q+hPAi 78MkzVsfswhp9rAAcIJQ9rUUFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVE/nOI 4D7A76VYVSJab+rlzZlsMB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1 aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbj+HEgC6gH7mHYQZ9N+sFuCuHmDbWI216ao8Q0EetHiUytLCilOmX XdjLIKP5+48XBAjiFE2QAZSUPnMeKPjPBFIII2HSrEUswwyyJ/Qd3twGVstgRPL6 gHZd2EFkmJS2bLkBZTU44ZameTc/ALGVc5vSEfmwwOTSFl6BFESOP1RNC9P1s/sJ G1GuIkcH/6wpyzCjpMqxNCwMNiA1414atZTdaagp8AKX7lofZ26IWBEVNel0bGqI pa9s+mfkFw7ELjOPj8Neaa2/ln7hkk3+5TrS5T+3FT/K4chMoMT83ynYT+EG6AK5 4874DvyZDz6oU9AR4OhO92z+XEi2tEUK -----END CERTIFICATE-----Generated at Wed May 14 09:33:31 2025 by rpki-client