$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json) Hash identifier: ujhQbCdpWHsm6CijMj5uXgrw1BHOuMMfgh/ELPZBPUs= Subject key identifier: 88:E5:EA:A2:A3:88:BF:AE:67:D6:CF:70:FF:4E:16:95:31:0E:3A:A6 Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Certificate serial: 0AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft Manifest number: 0AAC Signing time: Fri 30 May 2025 19:42:46 +0000 Manifest this update: Fri 30 May 2025 19:42:46 +0000 Manifest next update: Fri 06 Jun 2025 19:42:46 +0000 Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: PAT9VPGQvAPjnMQ+EXtvOk2n3IMfpnSBtU4iWuduXdY=) 2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: +5FC7zIIAi+tOq/0kiPN0dlteJZUS+cJEjJZZiGDU7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Validity Not Before: May 30 19:42:46 2025 GMT Not After : Jun 6 19:42:46 2025 GMT Subject: CN=683a0a36-510c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:53:d3:e9:7c:9c:e8:e3:57:dc:3a:48:1a: ee:c9:ba:67:08:ef:38:31:ce:1f:7b:88:7c:01:45: 47:73:6c:ca:57:e8:7e:71:10:4f:dc:6f:7a:1a:aa: 2a:ca:14:04:0e:06:be:0b:b7:62:7f:01:cb:08:7e: db:7f:28:20:43:00:d2:11:01:03:2d:e3:a7:44:b0: 62:65:dd:a4:cb:ed:64:de:44:61:c7:9e:4e:d2:bf: 80:60:19:6e:2d:cc:a4:9f:9e:90:9b:93:c7:d9:3a: 14:7e:00:15:df:90:85:e4:10:f5:96:c4:5b:a8:04: d4:38:c3:97:d0:d1:c6:ca:37:d8:f5:6e:39:7b:e1: 2d:be:be:ea:88:55:57:a3:f3:51:57:00:e2:eb:8e: 35:62:0c:37:42:6b:6e:11:f1:38:e5:7f:de:b4:42: 79:fe:6c:aa:62:da:c6:9c:01:94:fb:b4:3d:04:52: 4c:bc:e7:87:1d:f0:b1:7d:04:90:f2:0e:2a:2a:73: 43:ed:f7:1c:44:e8:fe:25:f5:20:0e:be:74:71:1a: 13:12:3a:f8:d9:78:59:ad:52:94:c5:ef:1f:19:b5: a9:45:db:7e:c3:49:f5:b4:1f:85:99:d3:44:94:41: 9b:49:95:97:32:54:26:32:38:a3:a3:5a:b3:27:d3: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E5:EA:A2:A3:88:BF:AE:67:D6:CF:70:FF:4E:16:95:31:0E:3A:A6 X509v3 Authority Key Identifier: keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:73:3b:6e:77:3d:db:82:6d:83:6a:0c:7d:e4:16:b2:36:9b: 84:33:38:7e:8f:79:6f:0a:3b:8b:e6:e8:ef:60:56:0c:cf:92: f7:82:3b:cb:cf:f6:ce:f9:15:ef:99:7e:47:c6:8e:16:7d:f7: 1e:76:1a:70:73:4e:ce:db:bb:c0:bf:17:7e:8d:d0:86:76:8a: 05:99:1f:09:e8:32:2a:b3:6a:b4:74:d2:57:4e:2d:a6:23:3e: 54:d8:2b:03:1a:95:71:f6:31:bc:e7:a2:46:b8:62:cb:4e:43: b6:ef:37:ce:cd:b5:63:cd:1b:18:b9:39:7c:f9:35:c8:b2:a5: fa:b3:47:ad:62:8b:d1:ff:93:13:ed:83:fc:84:2d:27:5a:e6: 60:bb:81:27:29:74:b4:6a:d0:ef:97:c4:a2:a3:ef:24:6f:86: 2c:2b:94:41:cc:68:56:fd:12:78:6d:58:17:3a:2d:36:3b:4d: 29:0a:d5:6a:1a:c6:9b:4f:7c:58:e5:68:39:96:cb:31:65:ba: 13:23:e6:12:27:cb:9c:e4:0a:e7:a5:20:34:31:cd:ca:01:01: 49:c2:88:62:19:e4:8e:66:19:a7:a4:d0:20:c9:bc:31:cd:7e: bc:65:6b:9d:ac:1c:a7:f6:e9:45:c4:3e:07:b7:f3:8a:bc:ac: c8:9e:0f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4MkYxMTAvBgNVBAUTKEJERUE4OEU1MzAwODhBMEVDNzdGOUUwRUNFRUEzM0U2 MDFFMTlDRjcwHhcNMjUwNTMwMTk0MjQ2WhcNMjUwNjA2MTk0MjQ2WjAYMRYwFAYD VQQDEw02ODNhMGEzNi01MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteRT0+l8nOjjV9w6SBruybpnCO84Mc4fe4h8AUVHc2zKV+h+cRBP3G96Gqoq yhQEDga+C7difwHLCH7bfyggQwDSEQEDLeOnRLBiZd2ky+1k3kRhx55O0r+AYBlu Lcykn56Qm5PH2ToUfgAV35CF5BD1lsRbqATUOMOX0NHGyjfY9W45e+Etvr7qiFVX o/NRVwDi6441Ygw3QmtuEfE45X/etEJ5/myqYtrGnAGU+7Q9BFJMvOeHHfCxfQSQ 8g4qKnND7fccROj+JfUgDr50cRoTEjr42XhZrVKUxe8fGbWpRdt+w0n1tB+FmdNE lEGbSZWXMlQmMjijo1qzJ9NXwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjl6qKj iL+uZ9bPcP9OFpUxDjqmMB8GA1UdIwQYMBaAFL3qiOUwCIoOx3+eDs7qM+YB4Zz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzgyRi9EM0Q3NDRFQTUz Q0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWlnN0hmNTRPenVvejVnSGhu UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlcUk1VEFJaWc3SGY1NE96dW96NWdIaG5QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzgyRi9EM0Q3NDRFQTUzQ0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWln N0hmNTRPenVvejVnSGhuUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANcztudz3bgm2Dagx95BayNpuEMzh+j3lvCjuL5ujvYFYMz5L3gjvL z/bO+RXvmX5Hxo4Wffcedhpwc07O27vAvxd+jdCGdooFmR8J6DIqs2q0dNJXTi2m Iz5U2CsDGpVx9jG856JGuGLLTkO27zfOzbVjzRsYuTl8+TXIsqX6s0etYovR/5MT 7YP8hC0nWuZgu4EnKXS0atDvl8Sio+8kb4YsK5RBzGhW/RJ4bVgXOi02O00pCtVq GsabT3xY5Wg5lssxZboTI+YSJ8uc5ArnpSA0Mc3KAQFJwohiGeSOZhmnpNAgybwx zX68ZWudrByn9ulFxD4Ht/OKvKzIng+R -----END CERTIFICATE-----Generated at Sat May 31 17:50:43 2025 by rpki-client