$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json) Hash identifier: fK/Xay1Oa7X0zDe0HXyJ+Nl7aBgRkTt6flG0XWlRoPs= Subject key identifier: D3:C7:6D:A2:90:66:69:1A:DB:D0:F1:5D:7A:81:8A:B5:7D:2D:9B:D3 Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft Manifest number: 34D2 Signing time: Sat 18 Oct 2025 14:33:53 +0000 Manifest this update: Sat 18 Oct 2025 14:33:53 +0000 Manifest next update: Sat 25 Oct 2025 14:33:53 +0000 Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: bgoJ2OvyPGM2d628lkIkctr5vPdk/cPT+3irBW2JLEM=) 2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: XN/k67X7bOiLw3XnM0VIfsm36LDpR4F96/be+9LgtSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Validity Not Before: Oct 18 14:33:53 2025 GMT Not After : Oct 25 14:33:53 2025 GMT Subject: CN=68f3a551-1b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:55:d4:a8:91:6c:70:10:d9:0c:88:76:53:a9: a9:e0:e4:cf:ff:59:c9:19:37:71:2f:ed:2d:6f:3c: a8:62:4a:56:98:04:8b:cf:e6:f1:22:0a:e6:b9:c1: 57:00:f4:d1:64:25:b2:16:ac:47:12:31:ea:63:d4: 53:d9:0e:67:9f:93:e8:99:0a:26:46:f3:15:8e:b6: dc:02:a7:da:78:44:6f:fe:be:f0:0f:24:e9:cb:23: 6f:8e:22:0f:84:32:a1:c8:4b:ac:6c:21:42:17:07: 06:af:7f:e1:14:16:6a:c9:02:42:8b:bd:aa:a5:af: 12:6d:d5:b3:04:4e:1f:d4:c1:86:de:1c:a2:b3:f0: 24:21:d1:92:7a:58:67:7e:d2:9b:34:b8:44:cc:b0: 27:2b:df:e2:50:23:f7:10:d7:a8:37:0b:bc:c2:d9: 9e:32:c9:2d:3b:11:a4:22:52:e8:be:d1:b6:80:89: d4:da:e1:53:53:a9:af:55:28:91:cd:20:b9:39:a3: 5e:39:34:6a:1b:08:27:ae:a8:7a:66:98:76:9d:04: f6:7e:f5:2b:c1:76:0a:75:d6:63:ad:61:b7:07:39: fc:58:9c:97:f0:57:1c:11:dc:45:dd:0f:f4:a7:5e: 96:04:5f:43:f8:2e:55:52:ef:db:24:cc:26:48:68: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C7:6D:A2:90:66:69:1A:DB:D0:F1:5D:7A:81:8A:B5:7D:2D:9B:D3 X509v3 Authority Key Identifier: keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:37:f6:56:86:c4:62:44:f4:b4:e2:fd:58:90:2b:41:50:4a: 36:95:d4:ee:6b:ec:5c:05:cd:fc:63:98:b8:67:f6:ba:91:c9: 7f:ce:c9:07:32:bd:5f:cc:52:f1:23:75:57:88:71:4c:d9:2d: a7:ca:d6:95:a6:29:77:5b:02:e2:51:2a:33:61:42:62:ba:20: cc:8e:93:27:5f:83:c8:4e:87:3c:2b:17:30:d3:05:29:3b:65: 96:0b:52:3b:6e:39:ef:90:60:80:fc:6b:8b:d9:dd:de:d7:42: 61:2c:f4:e9:e3:64:fd:5d:4b:67:38:3b:38:33:f2:97:60:90: d9:84:4a:15:71:31:84:b3:20:e5:ec:c6:4b:df:3b:cf:03:b7: 49:17:d1:12:12:9b:50:8a:75:a3:ac:02:06:f0:a6:39:4d:46: 52:3c:46:1b:ce:80:48:d4:24:c5:9a:cd:df:8b:b4:15:43:c7: ae:9d:9b:75:27:d5:53:43:7a:1e:48:a9:7f:81:8c:c3:df:c7: 4c:d8:ed:e4:c7:a4:7a:4d:04:55:91:98:3f:4b:81:84:34:71: 16:37:c5:25:11:01:b4:40:60:82:c4:9e:8d:04:e0:6f:4c:ba: fb:10:47:23:7d:d1:61:ec:9e:2e:22:13:69:63:cf:27:09:76: 29:16:07:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4 N0MzOURDNjcwHhcNMjUxMDE4MTQzMzUzWhcNMjUxMDI1MTQzMzUzWjAYMRYwFAYD VQQDEw02OGYzYTU1MS0xYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FXUqJFscBDZDIh2U6mp4OTP/1nJGTdxL+0tbzyoYkpWmASLz+bxIgrmucFX APTRZCWyFqxHEjHqY9RT2Q5nn5PomQomRvMVjrbcAqfaeERv/r7wDyTpyyNvjiIP hDKhyEusbCFCFwcGr3/hFBZqyQJCi72qpa8SbdWzBE4f1MGG3hyis/AkIdGSelhn ftKbNLhEzLAnK9/iUCP3ENeoNwu8wtmeMsktOxGkIlLovtG2gInU2uFTU6mvVSiR zSC5OaNeOTRqGwgnrqh6Zph2nQT2fvUrwXYKddZjrWG3Bzn8WJyX8FccEdxF3Q/0 p16WBF9D+C5VUu/bJMwmSGiVawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPHbaKQ Zmka29DxXXqBirV9LZvTMB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk OTJKYTl4eTdlVXVIdzUzR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmN/ZWhsRiRPS04v1YkCtBUEo2ldTua+xcBc38Y5i4Z/a6kcl/zskH Mr1fzFLxI3VXiHFM2S2nytaVpil3WwLiUSozYUJiuiDMjpMnX4PIToc8Kxcw0wUp O2WWC1I7bjnvkGCA/GuL2d3e10JhLPTp42T9XUtnODs4M/KXYJDZhEoVcTGEsyDl 7MZL3zvPA7dJF9ESEptQinWjrAIG8KY5TUZSPEYbzoBI1CTFms3fi7QVQ8eunZt1 J9VTQ3oeSKl/gYzD38dM2O3kx6R6TQRVkZg/S4GENHEWN8UlEQG0QGCCxJ6NBOBv TLr7EEcjfdFh7J4uIhNpY88nCXYpFgft -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:09 2025 by rpki-client