$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json) Hash identifier: 2PynfNPn3YhcRwhH2GUA3AVgpIvVIyT5jwvzlnbq5Eg= Subject key identifier: AA:A3:7C:BC:73:90:3F:D3:9D:86:1D:9B:65:F1:57:80:55:24:B8:64 Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft Manifest number: 346D Signing time: Fri 04 Apr 2025 14:31:05 +0000 Manifest this update: Fri 04 Apr 2025 14:31:04 +0000 Manifest next update: Fri 11 Apr 2025 14:31:04 +0000 Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: 1PVdZCqFclzKweCPedp1cVItbbyA4X1XLbGQ8+EjrvU=) 2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: nsDloBmSb7WnZ4IIBV/7HLbvVNyY5PAJVB5LfyUu8BU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913387C Validity Not Before: Apr 4 14:31:04 2025 GMT Not After : Apr 11 14:31:04 2025 GMT Subject: CN=67efed29-f866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:54:ec:41:2f:24:0a:31:03:48:53:70:a6: 05:5d:91:cc:d5:ad:e6:4b:3b:5a:9d:68:64:08:9e: b2:10:6a:3a:7d:f9:71:44:1d:b8:67:c4:ef:2b:83: 9d:54:d7:df:cd:ba:92:1c:21:aa:2d:d9:41:27:f9: aa:b3:6d:85:76:6a:b5:23:8d:e1:d6:fc:c7:3d:04: 4d:35:1e:ff:c2:a0:50:92:ac:85:b2:22:a4:90:42: 23:3f:1f:b3:04:0b:e3:25:d0:9a:78:27:f6:a4:eb: 3d:18:7d:1e:ba:89:4a:19:fc:dd:fc:47:f1:ea:24: e1:cf:98:19:5f:8f:a9:3d:62:0d:dc:af:28:08:b8: 9e:55:00:4e:d9:3e:4d:f6:d3:99:07:12:b0:3a:9a: fe:5c:6b:03:a6:b7:a7:41:52:62:da:e1:52:95:51: ce:1c:74:7a:ca:dc:58:3d:7c:db:89:c1:66:fe:e0: 5a:70:f5:68:d5:45:c6:60:0a:d7:8c:eb:46:5e:ff: 9f:4a:f1:ac:ca:24:3e:6a:6b:59:4b:c3:54:3e:a3: 64:a6:67:ff:d6:07:ca:db:70:ef:ec:b3:b5:62:f3: a0:0c:ee:b8:d4:cd:e5:86:fe:66:50:2e:d7:6e:5e: a3:b6:c1:0c:06:17:de:78:0f:24:67:5d:76:7b:10: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A3:7C:BC:73:90:3F:D3:9D:86:1D:9B:65:F1:57:80:55:24:B8:64 X509v3 Authority Key Identifier: keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c9:fe:81:1f:a2:ab:23:54:9c:37:3f:45:bb:a6:f9:d8:2a: 4a:79:84:f1:c2:15:7c:f7:fe:ab:d4:aa:17:3f:e0:2d:83:59: 25:d8:ec:2c:36:93:ba:a7:3a:50:11:ed:6e:ce:c0:ff:c3:86: 48:af:4d:73:21:ec:29:f4:1f:50:11:3e:e4:82:83:39:9c:51: 83:3e:eb:6f:c5:f8:6b:75:7f:6b:b2:e4:16:64:4a:f8:4a:2c: 64:8a:44:22:bb:64:60:09:71:f2:55:6e:f0:88:06:46:be:47: ee:36:9d:8a:71:76:bd:87:24:39:db:4d:b4:f4:4d:84:b5:21: 1e:eb:85:99:14:0d:ac:f2:eb:ab:df:5f:50:10:79:90:7a:24: a9:17:a5:5a:24:a9:dc:8c:23:24:27:f0:10:d5:c1:87:fc:66: ce:4b:99:52:56:88:81:c1:d0:69:ba:52:be:32:a3:11:39:e5: 68:53:77:e8:3e:be:30:0e:5b:1d:7b:bc:23:12:e3:7e:15:e3: 3d:7a:f6:4e:15:4e:7c:9f:ad:24:fb:0b:ac:1c:b1:4e:c4:05: 6b:24:86:0e:7c:9c:7a:21:eb:89:60:8e:43:7a:16:7e:6d:79: 8a:aa:78:7e:7d:e5:d0:65:fc:1b:e2:fd:b1:77:15:db:8d:32: 7e:52:98:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4 N0MzOURDNjcwHhcNMjUwNDA0MTQzMTA0WhcNMjUwNDExMTQzMTA0WjAYMRYwFAYD VQQDEw02N2VmZWQyOS1mODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17NU7EEvJAoxA0hTcKYFXZHM1a3mSztanWhkCJ6yEGo6fflxRB24Z8TvK4Od VNffzbqSHCGqLdlBJ/mqs22Fdmq1I43h1vzHPQRNNR7/wqBQkqyFsiKkkEIjPx+z BAvjJdCaeCf2pOs9GH0euolKGfzd/Efx6iThz5gZX4+pPWIN3K8oCLieVQBO2T5N 9tOZBxKwOpr+XGsDprenQVJi2uFSlVHOHHR6ytxYPXzbicFm/uBacPVo1UXGYArX jOtGXv+fSvGsyiQ+amtZS8NUPqNkpmf/1gfK23Dv7LO1YvOgDO641M3lhv5mUC7X bl6jtsEMBhfeeA8kZ112exAXRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqjfLxz kD/TnYYdm2XxV4BVJLhkMB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk OTJKYTl4eTdlVXVIdzUzR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGyf6BH6KrI1ScNz9Fu6b52CpKeYTxwhV89/6r1KoXP+Atg1kl2Ows NpO6pzpQEe1uzsD/w4ZIr01zIewp9B9QET7kgoM5nFGDPutvxfhrdX9rsuQWZEr4 SixkikQiu2RgCXHyVW7wiAZGvkfuNp2KcXa9hyQ520209E2EtSEe64WZFA2s8uur 319QEHmQeiSpF6VaJKncjCMkJ/AQ1cGH/GbOS5lSVoiBwdBpulK+MqMROeVoU3fo Pr4wDlsde7wjEuN+FeM9evZOFU58n60k+wusHLFOxAVrJIYOfJx6IeuJYI5DehZ+ bXmKqnh+feXQZfwb4v2xdxXbjTJ+Upg0 -----END CERTIFICATE-----Generated at Sat Apr 5 08:27:20 2025 by rpki-client