$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json) Hash identifier: Pdb0QJXCBvjKnat4Cpp94PdrQboXGcoFnIEjRJRajz0= Subject key identifier: C6:2D:75:23:58:47:13:7D:C1:4F:19:F3:57:65:38:E2:3B:D5:08:E3 Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft Manifest number: 0490 Signing time: Sat 23 Aug 2025 00:13:33 +0000 Manifest this update: Sat 23 Aug 2025 00:13:33 +0000 Manifest next update: Sat 30 Aug 2025 00:13:33 +0000 Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: 4Tb2vSV5YzGYNZmdR1zgQ3+a3DPBv/+SWWL2VgH5RvY=) 2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: roBiUviMC5AgiQf3XHVJjv6BNW8BJ8gqBvPnuJuZKp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Validity Not Before: Aug 23 00:13:33 2025 GMT Not After : Aug 30 00:13:33 2025 GMT Subject: CN=68a907ad-18ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:b5:87:c5:d1:96:63:33:00:b1:24:94:c0: a0:3e:1c:16:94:5f:43:7a:9e:d2:0a:c5:93:ad:ef: 31:56:01:f0:9c:24:1f:91:9b:5a:70:37:8e:7a:70: be:1a:7b:3e:3b:b2:72:1a:14:26:ae:3d:30:06:8c: 63:cb:37:18:55:e2:56:b6:a3:6c:fc:da:d2:8c:8e: 5c:f5:63:ce:89:b4:aa:40:22:d2:aa:f4:1c:6d:11: 0c:2f:be:30:49:48:34:a2:36:35:ea:fa:20:fc:18: ef:6c:fe:cb:fb:93:6b:33:c1:ce:be:5a:1e:5e:d7: e3:b7:00:29:be:7e:ba:39:a8:43:0a:6b:88:17:c2: fb:ab:5b:6e:44:08:b4:24:8e:b6:6c:68:c3:96:27: b9:f3:1f:cc:98:6d:69:9e:37:a2:54:ce:b9:94:3c: 92:33:64:54:55:b4:ed:28:a7:08:bb:71:02:a9:23: 01:b2:88:d9:a0:3c:f4:a2:54:ad:d3:a4:56:5e:3f: 3d:43:26:6d:ca:23:51:74:66:a1:39:b1:15:35:ac: 84:6e:24:ce:9c:96:14:58:4e:e5:1e:68:3c:0d:4d: ff:c2:b6:f6:48:53:6d:4c:91:8c:33:ca:ae:f9:df: f8:b5:1d:75:b7:a5:cc:45:67:a6:17:e4:2f:1f:e7: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2D:75:23:58:47:13:7D:C1:4F:19:F3:57:65:38:E2:3B:D5:08:E3 X509v3 Authority Key Identifier: keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:0a:a9:8b:27:ec:a8:72:d5:7f:ad:54:37:c7:86:af:32:30: cb:35:f8:5e:ee:c9:0f:91:94:cb:bc:b7:e0:22:40:c2:01:eb: fd:0b:71:79:4c:29:f8:19:e2:38:33:78:34:b6:2b:c3:29:a3: 01:51:85:8a:f9:1e:50:3b:49:e2:c6:31:67:1d:16:3d:49:d9: 0a:b2:d3:25:a8:ec:92:92:4b:cc:e7:f3:7c:8c:88:bb:04:72: c3:8d:fd:3a:de:d0:68:2d:ef:97:fc:79:76:a9:dd:5c:0b:5e: 03:d4:47:63:aa:f7:7d:ae:d9:e8:12:47:0e:e5:d6:57:cf:49: 96:f4:be:12:b8:c2:af:db:b7:ee:33:ff:32:1f:8e:11:c7:d4: 89:a7:3a:ce:f5:da:26:a3:9f:a1:61:74:d7:6a:76:05:4a:07: 32:8d:f7:8f:58:73:1d:d6:d0:9f:e9:e8:d1:31:b1:0f:f5:3c: 82:fd:c4:e2:64:80:f2:cf:56:e6:55:e7:b4:c7:41:76:9b:1b: 2f:2c:66:e1:58:7d:1d:19:02:eb:68:d1:95:e2:9f:fd:0c:28: 1e:08:37:09:81:ba:73:0a:93:9f:6f:7a:85:99:02:9f:90:04: d3:f7:e2:6d:84:60:c3:e0:ed:50:78:7b:7c:35:89:ee:7f:39: 34:ce:51:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD NjcyOTUwOUIwHhcNMjUwODIzMDAxMzMzWhcNMjUwODMwMDAxMzMzWjAYMRYwFAYD VQQDEw02OGE5MDdhZC0xOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu021h8XRlmMzALEklMCgPhwWlF9Dep7SCsWTre8xVgHwnCQfkZtacDeOenC+ Gns+O7JyGhQmrj0wBoxjyzcYVeJWtqNs/NrSjI5c9WPOibSqQCLSqvQcbREML74w SUg0ojY16vog/BjvbP7L+5NrM8HOvloeXtfjtwApvn66OahDCmuIF8L7q1tuRAi0 JI62bGjDlie58x/MmG1pnjeiVM65lDySM2RUVbTtKKcIu3ECqSMBsojZoDz0olSt 06RWXj89QyZtyiNRdGahObEVNayEbiTOnJYUWE7lHmg8DU3/wrb2SFNtTJGMM8qu +d/4tR11t6XMRWemF+QvH+eDMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYtdSNY RxN9wU8Z81dlOOI71QjjMB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1 aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCICqmLJ+yoctV/rVQ3x4avMjDLNfhe7skPkZTLvLfgIkDCAev9C3F5 TCn4GeI4M3g0tivDKaMBUYWK+R5QO0nixjFnHRY9SdkKstMlqOySkkvM5/N8jIi7 BHLDjf063tBoLe+X/Hl2qd1cC14D1Edjqvd9rtnoEkcO5dZXz0mW9L4SuMKv27fu M/8yH44Rx9SJpzrO9domo5+hYXTXanYFSgcyjfePWHMd1tCf6ejRMbEP9TyC/cTi ZIDyz1bmVee0x0F2mxsvLGbhWH0dGQLraNGV4p/9DCgeCDcJgbpzCpOfb3qFmQKf kATT9+JthGDD4O1QeHt8NYnufzk0zlGW -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:30 2025 by rpki-client