$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json) Hash identifier: ESxyJaE2mq5j6dpmSvS7PaoexSwaY5SvG03eaS3HQ0I= Subject key identifier: 68:0C:93:92:40:B4:78:B4:57:0A:99:EA:00:E3:43:83:7A:9C:04:42 Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft Manifest number: 040B Signing time: Sat 31 May 2025 00:37:38 +0000 Manifest this update: Sat 31 May 2025 00:37:38 +0000 Manifest next update: Sat 07 Jun 2025 00:37:38 +0000 Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: Qwkt6ZrJzFUDrgpXr+bUAZdOV9Q8CyqnDcgXqLoik+8=) 2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: +VP5NY/+4Z/8NphSit3psl/B3s8Rh2QC3KRRxPvmIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Validity Not Before: May 31 00:37:38 2025 GMT Not After : Jun 7 00:37:38 2025 GMT Subject: CN=683a4f52-d95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:c0:15:c1:78:9e:19:ff:9a:d7:12:aa:b5: 85:bc:77:e5:55:9c:fa:15:5c:18:31:83:2c:21:15: 99:8d:c0:14:c7:b0:8d:d1:d6:89:99:8f:bc:4e:0e: bc:80:ae:af:d1:24:11:54:82:65:c1:22:af:eb:fb: 5c:f6:68:72:63:d6:f6:17:0a:db:0e:ee:1a:74:97: 98:b4:96:fd:df:f6:f0:4a:74:fc:7f:e9:75:a9:ca: d6:b6:44:b7:f6:fe:ea:e8:7d:85:c9:ab:d1:62:ea: d8:56:9e:c0:86:80:a6:92:cb:1b:34:d0:b4:74:1b: 0a:89:6f:a6:18:80:79:f7:41:95:74:27:62:30:19: 51:ab:47:88:6e:26:29:08:3d:61:54:0f:db:b7:59: 0a:04:3a:44:66:a2:14:4e:67:73:de:36:bb:40:23: 4d:7b:59:f8:20:2e:16:e2:a1:72:c2:4e:19:da:1c: 58:55:84:24:c2:95:ff:f8:cf:eb:c9:d5:8e:b4:41: 29:f3:d5:ca:aa:7f:2f:65:6a:d6:cf:f7:b7:7d:b9: 72:35:3a:8e:17:a8:a9:0e:de:68:ef:1c:61:57:28: b6:62:46:ab:ac:c1:3e:cc:6f:84:2d:e7:ac:59:b1: d9:0f:17:db:bc:55:55:26:14:b2:02:7b:5f:b9:03: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:93:92:40:B4:78:B4:57:0A:99:EA:00:E3:43:83:7A:9C:04:42 X509v3 Authority Key Identifier: keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:b9:7b:d7:5f:50:83:6b:e5:cd:39:74:8b:fc:b8:53:2a:82: 82:9f:c4:bb:99:27:a2:70:c1:bb:38:7d:b0:b5:6f:a8:ae:77: 64:fe:9f:04:57:93:29:ec:b5:cb:e9:d1:c5:23:77:f5:c1:e9: 49:4e:1b:da:6c:97:6e:22:0a:51:82:b8:57:dd:82:c1:5c:e7: 26:18:b2:f7:d9:c6:3e:97:44:32:f1:94:44:dc:23:ed:2e:d3: 05:be:ed:4c:71:a8:33:7a:66:d9:63:ba:fe:94:41:ed:db:01: 89:f2:58:91:20:47:e6:68:e2:6f:05:d9:84:b1:17:bf:8b:6e: 4c:8e:85:ee:f1:5a:56:a6:e5:37:8b:24:96:1e:10:64:f4:7d: c9:60:60:8b:5e:91:ef:0a:a3:48:b1:cf:6b:d4:59:ed:f7:4f: 14:08:d8:e3:37:c3:c7:30:1c:40:3e:87:8a:47:df:51:e4:88: ad:11:2b:da:34:f1:71:26:93:1e:67:bf:95:72:f3:bc:10:6c: 80:be:df:d0:24:be:10:7e:90:57:8f:04:a0:7e:33:dd:d3:98: 79:6c:b1:cb:97:20:a1:ef:91:01:3d:5c:0b:9a:62:1c:31:ad: 33:cc:a2:5e:2f:ca:9d:14:99:b1:4f:57:00:b8:be:ed:d7:d9: 9a:37:7a:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy NzIxQzk4Q0UwHhcNMjUwNTMxMDAzNzM4WhcNMjUwNjA3MDAzNzM4WjAYMRYwFAYD VQQDEw02ODNhNGY1Mi1kOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb3AFcF4nhn/mtcSqrWFvHflVZz6FVwYMYMsIRWZjcAUx7CN0daJmY+8Tg68 gK6v0SQRVIJlwSKv6/tc9mhyY9b2FwrbDu4adJeYtJb93/bwSnT8f+l1qcrWtkS3 9v7q6H2FyavRYurYVp7AhoCmkssbNNC0dBsKiW+mGIB590GVdCdiMBlRq0eIbiYp CD1hVA/bt1kKBDpEZqIUTmdz3ja7QCNNe1n4IC4W4qFywk4Z2hxYVYQkwpX/+M/r ydWOtEEp89XKqn8vZWrWz/e3fblyNTqOF6ipDt5o7xxhVyi2YkarrME+zG+ELees WbHZDxfbvFVVJhSyAntfuQPoGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgMk5JA tHi0VwqZ6gDjQ4N6nARCMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T NGt5RFJjbDd3MFluSWNtTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTuXvXX1CDa+XNOXSL/LhTKoKCn8S7mSeicMG7OH2wtW+orndk/p8E V5Mp7LXL6dHFI3f1welJThvabJduIgpRgrhX3YLBXOcmGLL32cY+l0Qy8ZRE3CPt LtMFvu1McagzembZY7r+lEHt2wGJ8liRIEfmaOJvBdmEsRe/i25MjoXu8VpWpuU3 iySWHhBk9H3JYGCLXpHvCqNIsc9r1Fnt908UCNjjN8PHMBxAPoeKR99R5IitESva NPFxJpMeZ7+VcvO8EGyAvt/QJL4QfpBXjwSgfjPd05h5bLHLlyCh75EBPVwLmmIc Ma0zzKJeL8qdFJmxT1cAuL7t19maN3qz -----END CERTIFICATE-----Generated at Sat May 31 17:53:08 2025 by rpki-client