$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft File: vejnZNDzasWboDNpTTo883QGugk.mft (raw, json) Hash identifier: 6lxo6KPHJbjbOg+fDIWwBQ6ACyNPyG+kTD5KkhX6FNE= Subject key identifier: A8:E9:63:BB:44:B3:17:5B:C8:F2:FD:6C:C0:6B:04:6C:3F:28:D7:5E Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 Certificate issuer: /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft Manifest number: 0522 Signing time: Fri 22 Aug 2025 23:45:37 +0000 Manifest this update: Fri 22 Aug 2025 23:45:36 +0000 Manifest next update: Fri 29 Aug 2025 23:45:36 +0000 Files and hashes: 1: vejnZNDzasWboDNpTTo883QGugk.crl (hash: cduVSmA8qo/RtSb+QT/NT3ieqp0/1yLMd5SGQEsWzXo=) 2: 361EE54811E211ECAF7EDA48C4F9AE02.roa (hash: 44VaCFbAQVHdRM4CKlF3uIYCMt3E3qGIG27GIv1hkNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A192, serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Validity Not Before: Aug 22 23:45:36 2025 GMT Not After : Aug 29 23:45:36 2025 GMT Subject: CN=68a90120-2cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:3b:19:64:32:f4:90:cd:fd:53:a8:94:df: c2:59:a1:4d:5d:2f:e5:86:bd:32:7a:07:8a:ee:dd: 8a:e5:54:6e:8c:55:e4:79:de:c2:67:ed:14:e2:47: aa:2c:ca:cc:4f:6a:3c:93:da:bf:25:02:26:8b:6c: 3b:4b:f0:98:50:34:89:d2:81:3c:3e:b7:c6:5d:06: c6:c6:71:a8:06:f8:cd:d4:85:4e:1a:d1:a1:05:2c: 27:da:73:20:00:f7:e3:2b:c2:97:19:31:bf:d7:6f: da:f6:42:eb:4d:f5:30:30:44:b2:ee:d7:0e:7e:4d: 9b:3c:7c:d9:5a:b4:9a:f1:f9:4e:74:32:1a:83:bd: 54:2d:ed:db:83:2d:53:50:1f:d5:24:e5:b5:56:5b: d1:1e:e8:c7:91:93:d5:fb:c0:84:25:a7:84:34:17: f1:1e:78:9a:f9:70:cc:aa:fc:3d:ed:24:0f:f9:7e: b6:87:df:c5:84:8a:fd:b9:3a:42:45:e9:50:76:cf: 67:12:a8:ce:98:6a:8e:8a:a6:c2:bb:38:b5:72:fd: 97:74:55:f3:19:3b:c8:84:d8:8f:9b:ab:81:28:32: bd:ba:ee:7f:7d:04:ad:c7:1f:c1:77:2c:26:b9:b2: e0:a4:62:e5:b7:f1:e0:0f:80:fa:bf:2a:20:67:cc: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E9:63:BB:44:B3:17:5B:C8:F2:FD:6C:C0:6B:04:6C:3F:28:D7:5E X509v3 Authority Key Identifier: keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:57:a2:2f:29:bb:75:c4:a1:d7:9d:6f:7e:36:b9:b5:06:cd: aa:0a:c9:c6:d0:05:dc:c7:24:bf:a8:2c:af:19:a3:12:3f:fe: 9a:54:cd:98:82:99:3d:22:58:6d:38:a5:c5:6e:c9:8b:48:4a: 7a:85:6e:33:ef:79:de:75:b1:4b:89:6c:35:a5:db:a4:a2:d8: 8e:9a:6c:37:21:5c:8b:46:a4:c1:41:c3:bf:39:ca:5c:6b:d5: ef:14:07:35:44:61:01:db:33:04:d1:b9:3f:58:1f:58:67:00: 9c:7e:b5:b1:17:08:86:74:75:e3:31:3a:d5:a3:a8:7d:32:eb: ab:b4:d1:b6:16:98:3c:49:e5:2d:03:26:6f:ca:b3:32:a5:94: 05:3c:ee:56:69:e1:69:06:8d:22:6b:95:48:45:13:f5:da:af: 80:9d:3d:46:87:02:c3:a7:e8:b6:40:08:29:5c:e2:40:d8:38: 04:22:4b:93:dc:b4:62:b2:b2:8c:e1:e4:f0:da:4e:c9:0d:32: 9f:da:5a:de:9c:c2:bc:9e:42:a7:d0:2b:b0:d5:9a:73:59:66: 9a:25:69:53:66:7f:f4:6c:15:25:60:2a:d7:0f:58:ff:a7:6c: 05:28:73:f8:b9:c6:8a:54:24:98:e7:b3:93:2e:a0:04:f1:37: 72:cb:0a:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExOTIxMTAvBgNVBAUTKEJERThFNzY0RDBGMzZBQzU5QkEwMzM2OTREM0EzQ0Yz NzQwNkJBMDkwHhcNMjUwODIyMjM0NTM2WhcNMjUwODI5MjM0NTM2WjAYMRYwFAYD VQQDEw02OGE5MDEyMC0yY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZ87GWQy9JDN/VOolN/CWaFNXS/lhr0yegeK7t2K5VRujFXked7CZ+0U4keq LMrMT2o8k9q/JQImi2w7S/CYUDSJ0oE8PrfGXQbGxnGoBvjN1IVOGtGhBSwn2nMg APfjK8KXGTG/12/a9kLrTfUwMESy7tcOfk2bPHzZWrSa8flOdDIag71ULe3bgy1T UB/VJOW1VlvRHujHkZPV+8CEJaeENBfxHnia+XDMqvw97SQP+X62h9/FhIr9uTpC RelQds9nEqjOmGqOiqbCuzi1cv2XdFXzGTvIhNiPm6uBKDK9uu5/fQStxx/Bdywm ubLgpGLlt/HgD4D6vyogZ8yv5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjpY7tE sxdbyPL9bMBrBGw/KNdeMB8GA1UdIwQYMBaAFL3o52TQ82rFm6AzaU06PPN0BroJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE5Mi9CMjIzOTFBMDEx REYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFzV2JvRE5wVFRvODgzUUd1 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Zlam5aTkR6YXNXYm9ETnBUVG84ODNRR3Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE5Mi9CMjIzOTFBMDExREYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFz V2JvRE5wVFRvODgzUUd1Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6V6IvKbt1xKHXnW9+Nrm1Bs2qCsnG0AXcxyS/qCyvGaMSP/6aVM2Y gpk9IlhtOKXFbsmLSEp6hW4z73nedbFLiWw1pdukotiOmmw3IVyLRqTBQcO/Ocpc a9XvFAc1RGEB2zME0bk/WB9YZwCcfrWxFwiGdHXjMTrVo6h9MuurtNG2Fpg8SeUt AyZvyrMypZQFPO5WaeFpBo0ia5VIRRP12q+AnT1GhwLDp+i2QAgpXOJA2DgEIkuT 3LRisrKM4eTw2k7JDTKf2lrenMK8nkKn0Cuw1ZpzWWaaJWlTZn/0bBUlYCrXD1j/ p2wFKHP4ucaKVCSY57OTLqAE8Tdyywpe -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:59 2025 by rpki-client