$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json) Hash identifier: GgvX6C2GLzzsnzqpSYq0ep7EicpnS2/VeefnKRisl3o= Subject key identifier: 89:D5:75:6B:62:1E:68:D3:0B:06:3C:E2:31:F4:E5:4F:BB:C9:8C:02 Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Certificate serial: 0AE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft Manifest number: 0AD9 Signing time: Fri 22 Aug 2025 19:34:20 +0000 Manifest this update: Fri 22 Aug 2025 19:34:20 +0000 Manifest next update: Fri 29 Aug 2025 19:34:20 +0000 Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: 0EadHwEVSYwtcyfIB7LYz4ewVm4SRQxpXQwfrJtwQ+c=) 2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: QRIDYBqtTuT5aBwWGaGhz+TBnDkutY1YQfqChJSa2+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2784 (0xae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Validity Not Before: Aug 22 19:34:20 2025 GMT Not After : Aug 29 19:34:20 2025 GMT Subject: CN=68a8c63c-4fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:ff:eb:10:ad:7b:be:f9:78:2e:bb:47:eb: 2a:ba:12:37:99:76:ec:9d:7e:59:b4:95:df:b9:19: 80:b9:7d:3a:60:da:f5:14:e8:e2:7e:a2:f9:7d:c7: 2b:bd:ae:9b:5e:6c:e8:94:f6:9d:25:00:9c:b5:43: 27:1b:0d:b8:6e:42:c4:71:f4:2e:30:94:89:38:e1: 14:78:ee:f6:a9:09:a1:e8:f9:b0:e0:0b:e8:33:b4: 9d:50:08:1e:a0:94:61:af:4f:d5:1d:7f:02:2f:08: 7e:32:16:46:a8:33:50:0b:cf:9c:a8:51:8e:85:9b: d4:e9:62:5b:3d:3c:31:82:3d:d4:f8:86:0c:6e:4f: 75:36:7f:53:7e:88:48:a5:01:fe:2a:4a:b2:28:98: b5:14:9d:2a:90:53:95:52:ff:4f:96:5e:9c:85:f1: c4:40:fd:36:f6:14:46:9d:84:5b:84:97:ec:a3:e2: 56:8a:9b:92:de:db:58:88:5e:7f:46:8d:86:22:4a: b3:38:7b:8c:72:4f:93:9c:44:75:e5:67:61:78:75: 1f:7e:27:2b:28:cc:95:b0:f5:fc:39:39:a1:ac:19: 75:e9:72:4b:d9:a8:89:7d:0a:2e:cc:36:ff:38:a7: 59:21:bc:96:b3:bf:cd:00:e2:90:b3:88:dc:77:4b: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D5:75:6B:62:1E:68:D3:0B:06:3C:E2:31:F4:E5:4F:BB:C9:8C:02 X509v3 Authority Key Identifier: keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:77:58:cb:8f:d8:b8:19:b2:6f:0c:75:f6:c1:50:7f:24:59: 33:74:09:d0:a4:fb:72:34:de:0c:4d:d5:64:cf:17:1c:f7:61: e1:6b:d4:a0:5a:0c:17:f9:57:5f:c7:9d:f2:b5:01:4d:7a:48: 3c:33:4f:ce:e4:6d:81:45:02:f7:f3:20:dd:06:2d:5c:ac:4d: ab:c3:eb:67:01:b2:ce:b3:d9:41:cc:87:c3:0f:68:80:f1:4b: fd:a9:d9:ca:07:06:00:70:1f:d3:40:39:48:e6:b3:49:c9:fd: 94:c0:88:91:9f:51:3f:ae:b3:86:d1:48:5d:8d:8a:3f:ab:80: 0b:c5:75:66:89:21:31:e6:9c:87:c7:ec:2d:7e:87:da:bd:4e: d6:5a:70:04:63:f6:a8:f0:f6:8e:c4:82:be:3b:51:63:6a:e6: d4:b0:b6:3b:fc:2e:a4:f4:54:cb:53:11:36:11:ef:29:96:76: 7c:0e:6c:46:f8:37:39:f2:d8:4f:a8:9e:b9:47:52:7f:ef:ae: 67:48:38:85:0a:2c:ed:56:7d:79:f9:0a:7c:c4:51:75:9d:c6: 56:68:c1:02:47:c1:31:f9:b9:c5:21:c4:58:03:92:87:3f:9f: d7:b7:c3:fe:6f:32:44:71:7a:1c:9b:e2:c7:f2:45:0a:1e:4d: e9:4e:39:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4MkYxMTAvBgNVBAUTKEJERUE4OEU1MzAwODhBMEVDNzdGOUUwRUNFRUEzM0U2 MDFFMTlDRjcwHhcNMjUwODIyMTkzNDIwWhcNMjUwODI5MTkzNDIwWjAYMRYwFAYD VQQDEw02OGE4YzYzYy00ZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfz/6xCte775eC67R+squhI3mXbsnX5ZtJXfuRmAuX06YNr1FOjifqL5fccr va6bXmzolPadJQCctUMnGw24bkLEcfQuMJSJOOEUeO72qQmh6Pmw4AvoM7SdUAge oJRhr0/VHX8CLwh+MhZGqDNQC8+cqFGOhZvU6WJbPTwxgj3U+IYMbk91Nn9TfohI pQH+KkqyKJi1FJ0qkFOVUv9Pll6chfHEQP029hRGnYRbhJfso+JWipuS3ttYiF5/ Ro2GIkqzOHuMck+TnER15WdheHUfficrKMyVsPX8OTmhrBl16XJL2aiJfQouzDb/ OKdZIbyWs7/NAOKQs4jcd0toEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInVdWti HmjTCwY84jH05U+7yYwCMB8GA1UdIwQYMBaAFL3qiOUwCIoOx3+eDs7qM+YB4Zz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzgyRi9EM0Q3NDRFQTUz Q0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWlnN0hmNTRPenVvejVnSGhu UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlcUk1VEFJaWc3SGY1NE96dW96NWdIaG5QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzgyRi9EM0Q3NDRFQTUzQ0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWln N0hmNTRPenVvejVnSGhuUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbd1jLj9i4GbJvDHX2wVB/JFkzdAnQpPtyNN4MTdVkzxcc92Hha9Sg WgwX+Vdfx53ytQFNekg8M0/O5G2BRQL38yDdBi1crE2rw+tnAbLOs9lBzIfDD2iA 8Uv9qdnKBwYAcB/TQDlI5rNJyf2UwIiRn1E/rrOG0UhdjYo/q4ALxXVmiSEx5pyH x+wtfofavU7WWnAEY/ao8PaOxIK+O1FjaubUsLY7/C6k9FTLUxE2Ee8plnZ8DmxG +Dc58thPqJ65R1J/765nSDiFCiztVn15+Qp8xFF1ncZWaMECR8Ex+bnFIcRYA5KH P5/Xt8P+bzJEcXocm+LH8kUKHk3pTjlW -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:33 2025 by rpki-client