$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json) Hash identifier: EMbLyQpDP2satnfg2IhnHRwwo4CCc7mT0dxN7SNiSg8= Subject key identifier: A5:8D:6E:12:03:AF:FE:67:5B:FE:D2:8E:4C:E7:74:0C:19:8B:7B:C5 Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft Manifest number: 04B4 Signing time: Sun 02 Nov 2025 23:51:58 +0000 Manifest this update: Sun 02 Nov 2025 23:51:58 +0000 Manifest next update: Sun 09 Nov 2025 23:51:58 +0000 Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: r0+zf7L/sKPM4KkHkK5iebwfAhdBAeJCH+/zvLqecEE=) 2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: roBiUviMC5AgiQf3XHVJjv6BNW8BJ8gqBvPnuJuZKp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Validity Not Before: Nov 2 23:51:58 2025 GMT Not After : Nov 9 23:51:58 2025 GMT Subject: CN=6907ee9e-da7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:ac:27:ea:24:cd:8f:6b:bc:25:56:86:a5: e6:ac:a3:14:02:39:22:3f:0f:91:70:81:0f:8d:bf: f0:0f:fd:a3:43:bc:83:af:10:d8:8f:f8:00:cc:0d: ac:37:55:09:5b:ca:21:85:a1:85:0d:9d:a9:66:40: 00:52:14:4e:6a:f5:78:c1:f7:5f:22:83:e7:13:0b: d0:7f:94:dc:1f:9a:81:94:eb:d0:41:6b:b7:af:6b: e3:42:ce:0c:2f:2b:84:8a:ca:55:47:71:d1:4d:f2: 8e:61:49:d6:b6:19:58:e0:62:42:4c:dc:1c:e4:32: d2:1c:45:a4:19:5c:ad:dc:7d:20:d3:48:ca:98:1b: dd:04:b0:62:7c:38:e0:03:f7:15:ac:9c:4b:ff:db: 8a:6e:fa:dd:d6:f1:f7:47:1d:a9:83:0b:ca:3c:d4: af:5f:3e:b3:c1:66:2e:94:32:bb:77:28:0f:2a:68: 14:b8:1b:d5:92:0c:bc:9c:45:4c:96:df:e8:74:86: e8:13:de:54:c5:1c:db:75:70:e5:31:35:2c:e7:68: b3:7c:91:26:2b:33:45:15:e0:ba:a0:1f:4b:7a:b3: 5d:bc:a2:4b:c4:b8:db:38:24:58:0f:78:ef:41:94: bc:31:34:53:af:86:2c:3d:c5:52:57:c9:ee:62:5d: 64:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8D:6E:12:03:AF:FE:67:5B:FE:D2:8E:4C:E7:74:0C:19:8B:7B:C5 X509v3 Authority Key Identifier: keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:72:cc:7d:b5:8c:ba:65:a8:32:ed:c8:df:da:e0:5e:3e:37: a5:e1:74:77:04:73:03:3d:b6:71:aa:e1:03:1c:6c:ee:d4:77: 32:c8:5b:c9:aa:26:01:d2:a0:ce:48:da:b7:39:f2:2d:04:57: 0b:3a:3e:5b:6e:4e:fb:bb:4e:bf:9d:41:ce:4f:be:b2:2e:2c: 8b:ef:65:c8:f7:6c:a2:cb:b6:06:67:3c:e9:b9:7c:08:e1:92: 2c:97:c4:63:7a:89:1b:85:9b:61:85:6f:86:64:75:9e:05:70: 4c:17:00:64:f9:ff:37:af:f8:bf:d6:3e:a5:1e:78:29:0e:d0: 0c:f5:55:b7:25:10:e8:90:38:29:eb:35:8f:9e:90:82:bb:9b: 58:a7:6e:07:e7:ef:12:6d:74:8b:c4:40:76:90:0d:8e:f0:a0: 03:cb:98:40:65:25:73:0c:4c:c6:74:be:87:ac:37:10:c3:38: f2:b2:10:91:73:93:d1:2f:fb:9c:72:15:d6:12:e1:eb:ce:6e: 6c:9e:40:40:28:34:b3:50:dd:12:89:01:e3:8a:eb:7c:38:81: ca:dc:7d:7c:bb:19:08:7d:ed:cc:ba:bd:a0:53:55:1d:bd:54: 8f:dc:25:d0:03:ee:9b:61:46:1f:62:88:43:69:97:f3:4b:9a: 17:39:c3:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD NjcyOTUwOUIwHhcNMjUxMTAyMjM1MTU4WhcNMjUxMTA5MjM1MTU4WjAYMRYwFAYD VQQDEw02OTA3ZWU5ZS1kYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUKsJ+okzY9rvCVWhqXmrKMUAjkiPw+RcIEPjb/wD/2jQ7yDrxDYj/gAzA2s N1UJW8ohhaGFDZ2pZkAAUhROavV4wfdfIoPnEwvQf5TcH5qBlOvQQWu3r2vjQs4M LyuEispVR3HRTfKOYUnWthlY4GJCTNwc5DLSHEWkGVyt3H0g00jKmBvdBLBifDjg A/cVrJxL/9uKbvrd1vH3Rx2pgwvKPNSvXz6zwWYulDK7dygPKmgUuBvVkgy8nEVM lt/odIboE95UxRzbdXDlMTUs52izfJEmKzNFFeC6oB9LerNdvKJLxLjbOCRYD3jv QZS8MTRTr4YsPcVSV8nuYl1kcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWNbhID r/5nW/7SjkzndAwZi3vFMB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1 aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEcsx9tYy6Zagy7cjf2uBePjel4XR3BHMDPbZxquEDHGzu1HcyyFvJ qiYB0qDOSNq3OfItBFcLOj5bbk77u06/nUHOT76yLiyL72XI92yiy7YGZzzpuXwI 4ZIsl8RjeokbhZthhW+GZHWeBXBMFwBk+f83r/i/1j6lHngpDtAM9VW3JRDokDgp 6zWPnpCCu5tYp24H5+8SbXSLxEB2kA2O8KADy5hAZSVzDEzGdL6HrDcQwzjyshCR c5PRL/ucchXWEuHrzm5snkBAKDSzUN0SiQHjiut8OIHK3H18uxkIfe3Mur2gU1Ud vVSP3CXQA+6bYUYfYohDaZfzS5oXOcOl -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:25 2025 by rpki-client