$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json) Hash identifier: xF4XEr+a9j83tt0EhxvwrAN17EkAOBGp4E3bwl56a18= Subject key identifier: AA:2F:DB:E1:F3:49:0A:49:3D:B1:95:88:21:8A:FC:B8:DA:C7:F7:3F Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft Manifest number: 34B5 Signing time: Fri 22 Aug 2025 14:31:24 +0000 Manifest this update: Fri 22 Aug 2025 14:31:24 +0000 Manifest next update: Fri 29 Aug 2025 14:31:24 +0000 Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: Z7eADDsW0udKy4zE1RQv3XGcqVcQF6TtVJZ6tAcm3so=) 2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: XN/k67X7bOiLw3XnM0VIfsm36LDpR4F96/be+9LgtSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Validity Not Before: Aug 22 14:31:24 2025 GMT Not After : Aug 29 14:31:24 2025 GMT Subject: CN=68a87f3c-6d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:41:d2:18:b8:d9:8f:1e:b4:ad:e2:b4:f0: 59:92:d4:1d:f5:11:8b:d2:44:f4:1e:8a:dd:4f:63: f2:9b:4c:d2:21:96:8b:ca:74:a4:40:91:93:7c:d9: 1d:9b:c9:3c:fa:7a:21:3a:ba:fb:7c:2d:32:90:9c: 06:5a:e4:89:ac:6e:ff:10:b8:db:ff:9a:95:f5:6d: 8d:85:02:21:39:58:33:1a:90:01:dd:b4:35:13:66: b1:0a:b8:8a:a3:c5:d6:ba:a5:ec:7e:61:10:0b:b9: 95:a7:c3:e7:83:9a:9b:1e:6e:c6:44:fd:4e:b8:0c: 5a:d6:ff:e9:7e:2b:52:f4:1d:68:f2:c6:93:4f:21: 32:bc:3f:0d:c8:24:c4:d1:ae:81:49:c0:c7:3b:b0: 52:48:4b:c8:c3:20:86:4e:b8:8b:9e:72:c1:f4:85: 64:93:3b:25:3a:3e:f7:ca:97:b8:29:94:73:7d:91: be:1d:f0:28:22:8c:95:8e:a6:40:2b:ee:59:eb:b5: c5:b6:10:cd:c2:0e:97:d9:0f:f4:61:ae:72:c9:d0: 48:92:cc:9f:06:f6:8c:c3:d3:80:90:b3:de:3d:13: 79:96:df:a8:36:5e:fb:c7:29:3e:3e:c9:6d:57:60: 52:16:f7:2a:82:cc:1e:ff:15:10:d7:83:11:39:5b: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2F:DB:E1:F3:49:0A:49:3D:B1:95:88:21:8A:FC:B8:DA:C7:F7:3F X509v3 Authority Key Identifier: keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:54:3a:71:f3:e8:2d:b4:e5:e1:5e:8b:a3:29:d9:40:82:2f: 59:c8:90:5d:8e:52:5f:81:ee:6d:c1:a0:4b:12:97:3c:d1:ed: 2c:4b:67:60:54:23:94:13:55:59:4b:72:0a:5d:f0:c6:8a:bf: 43:07:24:aa:48:ad:e1:e7:96:44:3f:70:b7:d6:50:43:5f:b9: d5:22:1c:98:6c:d7:da:4a:7f:34:4b:a5:b9:e0:58:12:59:c8: 1f:a5:82:ad:ba:87:54:ad:ac:65:bd:9d:87:99:be:c4:48:a1: 10:a1:ec:8f:3c:3d:41:26:ee:d2:72:50:6a:ff:d6:a3:61:6d: fc:17:b1:d8:54:34:0a:b1:8c:5f:f6:8b:66:a4:0c:72:ce:39: 5a:8f:57:7a:6c:64:eb:29:0b:9b:43:39:06:da:19:83:46:67: a9:59:cf:c9:21:cb:83:bd:6a:69:36:eb:bc:7d:54:2e:e4:44: 25:ce:ce:b5:c6:d1:a3:83:1d:f7:ab:ff:17:4e:e4:df:66:e2: ad:ed:35:20:06:41:4e:19:ad:ef:45:69:6b:9f:ad:4e:c2:d7: f6:1c:6f:13:8f:f1:c4:d3:03:4d:84:46:47:cd:4a:a0:c2:f0: 61:33:89:3f:8e:88:02:05:05:12:1f:4d:63:bc:e6:37:47:9c: 1c:44:47:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4 N0MzOURDNjcwHhcNMjUwODIyMTQzMTI0WhcNMjUwODI5MTQzMTI0WjAYMRYwFAYD VQQDEw02OGE4N2YzYy02ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IFB0hi42Y8etK3itPBZktQd9RGL0kT0HordT2Pym0zSIZaLynSkQJGTfNkd m8k8+nohOrr7fC0ykJwGWuSJrG7/ELjb/5qV9W2NhQIhOVgzGpAB3bQ1E2axCriK o8XWuqXsfmEQC7mVp8Png5qbHm7GRP1OuAxa1v/pfitS9B1o8saTTyEyvD8NyCTE 0a6BScDHO7BSSEvIwyCGTriLnnLB9IVkkzslOj73ype4KZRzfZG+HfAoIoyVjqZA K+5Z67XFthDNwg6X2Q/0Ya5yydBIksyfBvaMw9OAkLPePRN5lt+oNl77xyk+Pslt V2BSFvcqgswe/xUQ14MROVu3ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKov2+Hz SQpJPbGViCGK/Ljax/c/MB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk OTJKYTl4eTdlVXVIdzUzR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgVDpx8+gttOXhXoujKdlAgi9ZyJBdjlJfge5twaBLEpc80e0sS2dg VCOUE1VZS3IKXfDGir9DBySqSK3h55ZEP3C31lBDX7nVIhyYbNfaSn80S6W54FgS WcgfpYKtuodUraxlvZ2Hmb7ESKEQoeyPPD1BJu7SclBq/9ajYW38F7HYVDQKsYxf 9otmpAxyzjlaj1d6bGTrKQubQzkG2hmDRmepWc/JIcuDvWppNuu8fVQu5EQlzs61 xtGjgx33q/8XTuTfZuKt7TUgBkFOGa3vRWlrn61Owtf2HG8Tj/HE0wNNhEZHzUqg wvBhM4k/jogCBQUSH01jvOY3R5wcREcT -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:41 2025 by rpki-client