$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json) Hash identifier: uyEZx7Si7Hm9DKdebUlblg9hLufGHJhVuChtmAxmxv0= Subject key identifier: 9F:CF:8B:B0:63:43:9F:6B:9E:56:51:92:44:F6:0B:54:D3:F0:FC:C3 Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft Manifest number: 34A4 Signing time: Sun 20 Jul 2025 14:31:30 +0000 Manifest this update: Sun 20 Jul 2025 14:31:29 +0000 Manifest next update: Sun 27 Jul 2025 14:31:29 +0000 Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: jLUBdJ10K92ALxFp5wDed47v30f4uOM5kY5L5dTmRJY=) 2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: XN/k67X7bOiLw3XnM0VIfsm36LDpR4F96/be+9LgtSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Validity Not Before: Jul 20 14:31:29 2025 GMT Not After : Jul 27 14:31:29 2025 GMT Subject: CN=687cfdc1-c50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:12:a5:7b:8a:ff:5e:1d:58:2d:93:ba:26: 80:f0:77:83:e6:b3:75:ed:69:13:70:34:19:d5:b5: 5a:b2:cb:0e:5c:f6:d1:41:dc:59:61:3c:a7:dd:de: 5c:a7:09:cd:c7:a4:22:82:13:11:c0:58:34:e7:85: cd:17:37:06:59:89:c2:b1:3e:28:bd:32:ea:69:91: 98:ac:80:9b:eb:ef:ec:47:3f:c6:39:fe:b7:40:e8: e1:0c:9a:0a:d6:ee:45:2a:5d:f8:e6:59:53:a4:1a: 56:6b:d6:b4:8a:26:d6:3f:a9:07:b7:cf:84:43:ef: 0f:30:02:87:9b:2a:19:28:cb:b7:7b:22:55:1f:99: 38:e0:cc:fe:fd:13:48:e7:bd:c8:23:91:30:a8:c1: 66:36:c5:bc:87:68:14:f3:25:1d:12:fe:6d:b4:fb: 01:96:09:c7:ac:ad:bd:68:ae:4a:7d:01:b9:ea:1e: 03:98:b9:83:d4:ed:1d:45:c8:d3:77:65:64:e5:16: e3:b4:00:7d:08:33:2a:93:4c:0e:76:27:10:4c:65: ac:c7:8c:7b:54:aa:bd:71:e9:ab:89:d8:be:d2:3c: e1:be:93:7c:33:8a:78:70:c1:06:47:15:6c:ca:86: 64:c0:20:37:37:dd:d2:62:ea:eb:34:33:fb:d3:5e: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CF:8B:B0:63:43:9F:6B:9E:56:51:92:44:F6:0B:54:D3:F0:FC:C3 X509v3 Authority Key Identifier: keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:c0:54:04:ee:61:e1:92:d9:24:20:0f:be:51:b8:d2:4d:56: 96:9e:7d:da:d1:78:6c:74:68:c8:84:12:48:fd:bf:86:79:88: e2:42:0b:cf:fa:3d:64:75:51:2e:a8:17:71:73:5a:e3:b5:10: ed:f6:d9:25:94:ca:e7:32:09:63:54:b9:d2:50:b5:97:ba:c5: c7:67:d4:7d:2b:79:eb:35:5d:45:61:38:31:fc:2f:42:06:be: 8e:61:46:4c:18:4e:37:32:23:2f:51:df:35:cd:05:ca:8e:9f: cd:3c:7c:4d:d6:68:21:50:d3:66:da:22:17:6f:58:53:1c:fe: 4f:af:c4:1d:5f:dc:01:e0:43:b9:c1:28:ac:6d:f6:02:44:f2: 05:db:2d:55:52:ce:5a:c0:2c:dd:ec:b5:d0:f0:36:cc:13:d5: 74:44:55:12:78:cc:4c:89:a5:a3:e8:2b:38:d5:ce:74:75:33: 59:c1:9a:13:15:5c:0b:92:86:c6:d6:40:60:00:ff:0b:4d:74: c6:a6:81:ca:3d:7b:8e:83:09:0e:a4:b5:36:b1:fd:85:3b:14: cb:38:fb:59:30:33:17:9c:cb:b1:95:8b:a2:a5:39:22:32:96: dd:df:6c:38:8c:f8:8e:44:41:28:65:bc:7d:13:27:03:a5:55: 78:ca:09:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4 N0MzOURDNjcwHhcNMjUwNzIwMTQzMTI5WhcNMjUwNzI3MTQzMTI5WjAYMRYwFAYD VQQDEw02ODdjZmRjMS1jNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ0SpXuK/14dWC2TuiaA8HeD5rN17WkTcDQZ1bVasssOXPbRQdxZYTyn3d5c pwnNx6QighMRwFg054XNFzcGWYnCsT4ovTLqaZGYrICb6+/sRz/GOf63QOjhDJoK 1u5FKl345llTpBpWa9a0iibWP6kHt8+EQ+8PMAKHmyoZKMu3eyJVH5k44Mz+/RNI 573II5EwqMFmNsW8h2gU8yUdEv5ttPsBlgnHrK29aK5KfQG56h4DmLmD1O0dRcjT d2Vk5RbjtAB9CDMqk0wOdicQTGWsx4x7VKq9cemridi+0jzhvpN8M4p4cMEGRxVs yoZkwCA3N93SYurrNDP7015ceQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/Pi7Bj Q59rnlZRkkT2C1TT8PzDMB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk OTJKYTl4eTdlVXVIdzUzR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCswFQE7mHhktkkIA++UbjSTVaWnn3a0XhsdGjIhBJI/b+GeYjiQgvP +j1kdVEuqBdxc1rjtRDt9tkllMrnMgljVLnSULWXusXHZ9R9K3nrNV1FYTgx/C9C Br6OYUZMGE43MiMvUd81zQXKjp/NPHxN1mghUNNm2iIXb1hTHP5Pr8QdX9wB4EO5 wSisbfYCRPIF2y1VUs5awCzd7LXQ8DbME9V0RFUSeMxMiaWj6Cs41c50dTNZwZoT FVwLkobG1kBgAP8LTXTGpoHKPXuOgwkOpLU2sf2FOxTLOPtZMDMXnMuxlYuipTki Mpbd32w4jPiOREEoZbx9EycDpVV4ygmK -----END CERTIFICATE-----Generated at Mon Jul 21 08:11:37 2025 by rpki-client