$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json) Hash identifier: BxLSDNx0jeuy83lJ266eSl2Sidpk6qxVLpSE0zSd+cY= Subject key identifier: 37:51:F0:0B:58:71:76:69:53:BB:16:B3:FC:C5:44:68:AB:88:C7:7A Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Certificate serial: 34C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft Manifest number: 34C3 Signing time: Thu 18 Sep 2025 14:31:36 +0000 Manifest this update: Thu 18 Sep 2025 14:31:36 +0000 Manifest next update: Thu 25 Sep 2025 14:31:36 +0000 Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: kHIG6lE5Z3wGzwsx4NayE3E2/SlTbun4GBp0zSHIl64=) 2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: XN/k67X7bOiLw3XnM0VIfsm36LDpR4F96/be+9LgtSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13512 (0x34c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67 Validity Not Before: Sep 18 14:31:36 2025 GMT Not After : Sep 25 14:31:36 2025 GMT Subject: CN=68cc17c8-b311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:2b:ec:88:19:b1:26:bd:6e:a2:23:df:ea: 58:ea:62:ba:70:5e:f7:f0:3b:98:b0:95:67:85:76: 3b:e0:65:98:c6:18:a6:87:fb:5b:1c:54:a0:6e:6c: 68:b0:5a:7f:37:9d:70:c7:be:3a:a8:b8:a0:14:5f: 6d:d4:af:03:47:8e:9a:f3:8c:15:b7:a1:d8:c6:e4: 92:78:db:d3:55:13:65:2d:2a:21:21:0e:96:a5:9b: 36:b5:f0:76:b7:97:e7:c9:21:bf:5e:92:68:69:9a: 28:c2:b9:11:27:84:bb:ff:e3:76:4a:f7:6d:94:c8: 5f:a5:ca:be:a2:5f:31:58:9b:ce:52:6d:55:c7:38: 48:db:38:ef:d3:16:44:aa:0d:4d:3c:d0:62:45:de: e2:00:78:44:13:dd:ba:a7:2b:4f:4c:7e:cf:18:d2: cb:54:86:6d:03:e2:d7:2c:34:ed:0e:83:e4:a7:8c: a2:48:17:30:35:f1:b8:da:9a:60:c3:a7:74:5a:1e: cf:ee:27:02:87:6f:de:96:2a:05:ac:5d:07:3c:3f: 83:4b:99:9a:fc:10:3c:7d:c3:ce:51:60:41:f4:0f: 1d:e6:69:c3:55:29:4a:ee:5f:4e:22:1f:4e:54:ef: 90:ac:34:f2:a5:11:05:d9:2b:ef:a4:3a:f2:41:bd: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:51:F0:0B:58:71:76:69:53:BB:16:B3:FC:C5:44:68:AB:88:C7:7A X509v3 Authority Key Identifier: keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f1:8a:11:f3:1c:74:48:a3:cd:72:64:16:8c:60:5d:53:7e: 4b:24:2e:96:d2:a0:ba:fc:45:11:83:ed:de:68:9d:2c:23:f7: 18:85:39:67:4d:28:75:3c:f7:d4:6e:63:07:ac:da:a8:ba:77: 97:f1:8f:04:58:73:39:9a:0b:50:9a:a7:35:7f:c7:ac:12:33: 4e:f5:bf:1b:b6:6e:1b:fe:80:bb:b1:c5:a6:7d:e5:22:30:f8: 85:cb:7c:2f:91:d1:1d:73:ac:a4:57:cf:be:7d:f8:41:4a:83: af:61:a8:fa:02:7b:dd:2d:62:f9:a3:c3:42:41:8a:95:70:43: e6:b4:d6:f1:56:b8:a7:76:8f:e0:70:5d:d7:14:7a:c1:12:ee: 80:c5:74:90:38:58:c9:cd:af:b6:e5:b6:a4:dd:31:0c:5d:18: f7:09:13:41:82:90:81:03:a9:59:56:9d:7a:22:aa:a6:0f:21: e4:5b:1f:e4:b2:fd:6b:14:62:bf:cf:37:01:f7:9c:11:66:fd: e1:7b:98:7d:86:c5:7e:02:a7:0e:cb:b4:d0:c3:7a:67:fc:75: 72:e2:70:f4:e1:31:f7:5d:8b:c2:7a:c3:d2:f0:87:af:dc:d8: fd:28:eb:cb:a4:89:b2:ba:83:93:ef:2c:c2:61:8f:3b:18:2f: 67:c3:52:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4 N0MzOURDNjcwHhcNMjUwOTE4MTQzMTM2WhcNMjUwOTI1MTQzMTM2WjAYMRYwFAYD VQQDEw02OGNjMTdjOC1iMzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp38r7IgZsSa9bqIj3+pY6mK6cF738DuYsJVnhXY74GWYxhimh/tbHFSgbmxo sFp/N51wx746qLigFF9t1K8DR46a84wVt6HYxuSSeNvTVRNlLSohIQ6WpZs2tfB2 t5fnySG/XpJoaZoowrkRJ4S7/+N2SvdtlMhfpcq+ol8xWJvOUm1VxzhI2zjv0xZE qg1NPNBiRd7iAHhEE926pytPTH7PGNLLVIZtA+LXLDTtDoPkp4yiSBcwNfG42ppg w6d0Wh7P7icCh2/elioFrF0HPD+DS5ma/BA8fcPOUWBB9A8d5mnDVSlK7l9OIh9O VO+QrDTypREF2SvvpDryQb3KawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdR8AtY cXZpU7sWs/zFRGiriMd6MB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk OTJKYTl4eTdlVXVIdzUzR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR8YoR8xx0SKPNcmQWjGBdU35LJC6W0qC6/EURg+3eaJ0sI/cYhTln TSh1PPfUbmMHrNqouneX8Y8EWHM5mgtQmqc1f8esEjNO9b8btm4b/oC7scWmfeUi MPiFy3wvkdEdc6ykV8++ffhBSoOvYaj6AnvdLWL5o8NCQYqVcEPmtNbxVrindo/g cF3XFHrBEu6AxXSQOFjJza+25bak3TEMXRj3CRNBgpCBA6lZVp16IqqmDyHkWx/k sv1rFGK/zzcB95wRZv3he5h9hsV+AqcOy7TQw3pn/HVy4nD04TH3XYvCesPS8Iev 3Nj9KOvLpImyuoOT7yzCYY87GC9nw1KM -----END CERTIFICATE-----Generated at Fri Sep 19 07:51:42 2025 by rpki-client