$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json) Hash identifier: Rx8N7/FqFeRDnIBsqcaDzcVaIsV/GggIslYjg9Xsf4k= Subject key identifier: FB:36:9A:80:90:79:57:B6:87:FD:39:E0:8F:34:A9:4A:4E:CE:7D:10 Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft Manifest number: 0ABF Signing time: Wed 02 Jul 2025 19:43:00 +0000 Manifest this update: Wed 02 Jul 2025 19:42:59 +0000 Manifest next update: Wed 09 Jul 2025 19:42:59 +0000 Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: VzJNmKxDX7Vz6Yr11ZqTnoyVA1nIqpU28kMvyX64IxI=) 2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: QRIDYBqtTuT5aBwWGaGhz+TBnDkutY1YQfqChJSa2+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Validity Not Before: Jul 2 19:42:59 2025 GMT Not After : Jul 9 19:42:59 2025 GMT Subject: CN=68658bc4-199c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:2b:a5:64:8e:b5:09:c1:28:0e:07:92:31: 5f:67:d1:c6:2e:b2:fd:bb:d3:50:51:76:20:ac:4f: 36:73:5e:3c:1b:df:f8:dc:d4:5f:f7:05:dc:8b:57: d2:c5:b1:c9:2a:99:78:ed:49:04:5b:8d:d0:b8:d9: c3:f8:cd:af:d4:4c:0e:5e:30:ae:f3:ad:19:23:82: ad:b6:e9:61:ad:33:58:43:88:35:ac:c9:a0:ed:35: 1a:0f:70:31:2a:09:9b:2b:89:df:a0:ca:1a:4e:9c: ca:41:02:84:85:31:ca:1b:00:16:7a:de:79:3e:00: 7f:60:c9:db:be:bc:bb:fd:1d:86:7b:c2:58:3e:fd: 90:66:cc:ec:eb:85:ae:bb:0b:0e:ec:a6:a7:2d:4a: 86:28:2f:b0:ff:06:66:98:93:86:a6:3d:e1:04:70: e2:9f:c2:28:4a:89:06:ca:17:bc:55:be:dc:c8:f9: ef:d1:89:49:e1:4e:d8:1d:e2:f7:9b:0c:55:90:f8: 54:b9:89:0e:8f:a7:70:f2:79:a4:af:28:d5:55:9c: 6f:ab:43:91:e3:77:6f:32:bf:d6:23:d3:76:f8:ba: a1:00:f9:d7:2a:12:bb:95:32:50:0b:1b:04:c9:13: 00:59:78:7e:99:78:f3:1b:a1:f8:2f:7f:91:d7:35: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:36:9A:80:90:79:57:B6:87:FD:39:E0:8F:34:A9:4A:4E:CE:7D:10 X509v3 Authority Key Identifier: keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c5:d1:9c:51:c1:40:8d:ca:99:0c:4f:98:53:4d:95:7a:64: 65:0a:58:c9:99:9a:39:a8:be:c1:0c:f9:2b:fa:e1:74:10:71: 6f:c1:64:57:96:ac:ca:90:b5:4d:0b:7a:ef:8d:3a:a8:e1:06: 9c:0b:72:7e:4f:b4:51:cf:fa:00:4e:4a:80:dc:2f:0a:ad:f9: c0:7b:15:9e:c2:5e:a7:8a:48:12:0a:37:bf:21:a9:e6:cd:54: 06:3c:d7:ff:c0:8d:49:e2:41:de:84:75:03:59:fc:59:b6:c8: d7:5a:f8:8a:b8:20:3d:58:d8:46:e0:8a:28:39:20:a1:74:8a: 9e:e9:fa:43:9e:fb:00:97:7c:d9:a4:3b:b6:65:ce:b5:b4:f7: 50:6a:05:46:47:02:a5:a9:25:ba:87:08:9a:e2:34:93:93:5b: 09:23:bb:e4:79:31:3b:79:7b:a5:33:0d:d8:a9:68:ab:ed:17: 72:80:fe:f1:4e:92:67:18:c9:d3:a6:95:18:3f:52:73:48:1d: a1:f5:04:c0:2c:2d:a4:0c:0e:85:53:64:0b:d2:74:c9:c1:ac: 87:f5:e5:be:6b:b1:82:9e:58:2f:5d:21:1c:1b:9f:fc:54:da: a7:3d:60:de:e9:ec:74:c1:db:c3:30:27:06:c2:9e:a3:51:ac: 90:07:da:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4MkYxMTAvBgNVBAUTKEJERUE4OEU1MzAwODhBMEVDNzdGOUUwRUNFRUEzM0U2 MDFFMTlDRjcwHhcNMjUwNzAyMTk0MjU5WhcNMjUwNzA5MTk0MjU5WjAYMRYwFAYD VQQDEw02ODY1OGJjNC0xOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc0rpWSOtQnBKA4HkjFfZ9HGLrL9u9NQUXYgrE82c148G9/43NRf9wXci1fS xbHJKpl47UkEW43QuNnD+M2v1EwOXjCu860ZI4KttulhrTNYQ4g1rMmg7TUaD3Ax KgmbK4nfoMoaTpzKQQKEhTHKGwAWet55PgB/YMnbvry7/R2Ge8JYPv2QZszs64Wu uwsO7KanLUqGKC+w/wZmmJOGpj3hBHDin8IoSokGyhe8Vb7cyPnv0YlJ4U7YHeL3 mwxVkPhUuYkOj6dw8nmkryjVVZxvq0OR43dvMr/WI9N2+LqhAPnXKhK7lTJQCxsE yRMAWXh+mXjzG6H4L3+R1zXvfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPs2moCQ eVe2h/054I80qUpOzn0QMB8GA1UdIwQYMBaAFL3qiOUwCIoOx3+eDs7qM+YB4Zz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzgyRi9EM0Q3NDRFQTUz Q0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWlnN0hmNTRPenVvejVnSGhu UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlcUk1VEFJaWc3SGY1NE96dW96NWdIaG5QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzgyRi9EM0Q3NDRFQTUzQ0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWln N0hmNTRPenVvejVnSGhuUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArxdGcUcFAjcqZDE+YU02VemRlCljJmZo5qL7BDPkr+uF0EHFvwWRX lqzKkLVNC3rvjTqo4QacC3J+T7RRz/oATkqA3C8KrfnAexWewl6nikgSCje/Ianm zVQGPNf/wI1J4kHehHUDWfxZtsjXWviKuCA9WNhG4IooOSChdIqe6fpDnvsAl3zZ pDu2Zc61tPdQagVGRwKlqSW6hwia4jSTk1sJI7vkeTE7eXulMw3YqWir7RdygP7x TpJnGMnTppUYP1JzSB2h9QTALC2kDA6FU2QL0nTJwayH9eW+a7GCnlgvXSEcG5/8 VNqnPWDe6ex0wdvDMCcGwp6jUayQB9q6 -----END CERTIFICATE-----Generated at Thu Jul 3 11:27:59 2025 by rpki-client