$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json) Hash identifier: Z9n/H1+9kjpwEbYhLWC9db5UCRVLVBKx7H5VlM3pk48= Subject key identifier: AD:C2:5F:76:2B:AA:9B:29:81:5C:E7:CA:2E:42:D4:E3:FE:E5:A0:94 Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Certificate serial: 0456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft Manifest number: 0452 Signing time: Sun 20 Apr 2025 23:49:45 +0000 Manifest this update: Sun 20 Apr 2025 23:49:45 +0000 Manifest next update: Sun 27 Apr 2025 23:49:45 +0000 Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: r89sVVmF2hO2z1uQ8Ls2vSiTUHm/HBEpjnKunj3pn44=) 2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: roBiUviMC5AgiQf3XHVJjv6BNW8BJ8gqBvPnuJuZKp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1110 (0x456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Validity Not Before: Apr 20 23:49:45 2025 GMT Not After : Apr 27 23:49:45 2025 GMT Subject: CN=68058819-2ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:d4:dc:22:ea:88:56:d9:6f:c2:69:16:4c: 16:34:4c:c1:6c:f7:8d:d6:69:73:56:83:27:85:a6: 7d:c2:3e:f3:21:70:c3:91:3f:0c:91:df:b1:d9:c6: 2e:7c:53:bd:10:e1:ff:af:e8:df:44:38:2f:b9:b8: fb:58:13:a0:53:40:0f:e8:59:2b:97:76:9d:ad:05: 29:58:9b:1b:9c:e2:73:39:33:34:10:a9:6f:93:77: bd:32:3e:70:47:84:87:8f:be:d6:ab:c5:01:72:0f: f5:2e:c7:5d:91:ea:be:30:32:38:40:d5:ea:79:bf: 97:3e:a8:d7:b8:eb:64:68:30:20:b6:99:94:21:db: ce:6e:c4:f2:6d:92:83:8d:16:e5:fb:31:7b:d8:63: f8:32:08:3d:56:60:c5:9f:16:e5:3e:e7:87:ea:13: 37:f3:cd:e2:da:73:bb:8a:86:12:7c:c4:56:e4:b0: 9b:7b:3d:5a:9d:f2:88:0c:7d:98:d4:3b:73:c3:75: 94:22:2a:74:1c:47:c3:e3:51:ac:99:f9:ed:0e:de: 7e:a4:d5:4b:34:c4:cd:d6:39:78:b6:92:87:be:34: 8a:03:9d:88:ff:aa:5a:f9:9f:13:fd:25:76:a0:80: 6d:4d:7e:72:ca:49:bd:e8:00:83:d1:27:04:de:26: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C2:5F:76:2B:AA:9B:29:81:5C:E7:CA:2E:42:D4:E3:FE:E5:A0:94 X509v3 Authority Key Identifier: keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c7:65:1b:80:24:28:f1:99:45:d6:02:98:65:46:50:79:9b: e5:b6:7e:45:48:9c:05:b6:cb:8d:d8:1b:db:01:9f:79:91:30: e2:39:1e:81:6b:bf:75:cc:19:84:06:3e:dc:5b:f4:20:d5:dc: b6:40:7c:bd:96:67:8d:75:a8:79:87:c3:ec:b5:4f:d8:9b:91: ae:25:60:5a:23:9b:0e:03:bd:98:2b:86:8f:b6:7e:58:49:a5: 2a:76:18:2f:28:c8:05:46:7b:f9:f6:0b:86:4c:49:2c:51:c0: 4c:1b:d0:09:ab:3f:24:18:be:95:e8:ea:8d:f6:da:30:c7:6c: 5d:33:66:67:95:22:89:8b:07:63:9a:cd:9c:01:0e:de:ec:ab: 74:08:67:03:dd:a7:8a:e1:9f:42:37:da:28:ff:8a:8d:72:ed: b2:c6:c0:c2:8a:c5:0d:56:b4:5c:8b:7a:92:b4:db:f7:b1:8a: d1:d0:a7:92:02:13:91:ff:8d:de:1f:11:56:7b:20:53:a1:a6: 5b:9d:41:2b:26:a7:fb:1d:97:38:29:88:4c:c0:2b:f3:fe:96: 52:98:02:0e:03:be:f2:0d:65:ae:1b:ea:87:38:ba:81:25:4a: 9e:58:69:83:1c:ec:da:2c:cf:2c:6e:cf:71:38:0a:a3:6d:c7: f1:2b:ba:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD NjcyOTUwOUIwHhcNMjUwNDIwMjM0OTQ1WhcNMjUwNDI3MjM0OTQ1WjAYMRYwFAYD VQQDEw02ODA1ODgxOS0yZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ebU3CLqiFbZb8JpFkwWNEzBbPeN1mlzVoMnhaZ9wj7zIXDDkT8Mkd+x2cYu fFO9EOH/r+jfRDgvubj7WBOgU0AP6Fkrl3adrQUpWJsbnOJzOTM0EKlvk3e9Mj5w R4SHj77Wq8UBcg/1Lsddkeq+MDI4QNXqeb+XPqjXuOtkaDAgtpmUIdvObsTybZKD jRbl+zF72GP4Mgg9VmDFnxblPueH6hM3883i2nO7ioYSfMRW5LCbez1anfKIDH2Y 1Dtzw3WUIip0HEfD41GsmfntDt5+pNVLNMTN1jl4tpKHvjSKA52I/6pa+Z8T/SV2 oIBtTX5yykm96ACD0ScE3ibCPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3CX3Yr qpspgVznyi5C1OP+5aCUMB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1 aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbx2UbgCQo8ZlF1gKYZUZQeZvltn5FSJwFtsuN2BvbAZ95kTDiOR6B a791zBmEBj7cW/Qg1dy2QHy9lmeNdah5h8PstU/Ym5GuJWBaI5sOA72YK4aPtn5Y SaUqdhgvKMgFRnv59guGTEksUcBMG9AJqz8kGL6V6OqN9towx2xdM2ZnlSKJiwdj ms2cAQ7e7Kt0CGcD3aeK4Z9CN9oo/4qNcu2yxsDCisUNVrRci3qStNv3sYrR0KeS AhOR/43eHxFWeyBToaZbnUErJqf7HZc4KYhMwCvz/pZSmAIOA77yDWWuG+qHOLqB JUqeWGmDHOzaLM8sbs9xOAqjbcfxK7p3 -----END CERTIFICATE-----Generated at Tue Apr 22 01:52:21 2025 by rpki-client