$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json) Hash identifier: YHAGUPP4AW5u94TfShjgiizxrg3rlmFeqX3PbJDBU4U= Subject key identifier: 35:66:38:57:73:79:C0:A2:DB:E6:56:97:AA:86:BB:11:56:C8:87:84 Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Certificate serial: 0B05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft Manifest number: 0AFE Signing time: Sun 02 Nov 2025 19:20:27 +0000 Manifest this update: Sun 02 Nov 2025 19:20:26 +0000 Manifest next update: Sun 09 Nov 2025 19:20:26 +0000 Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: AdII6FXrpYMOAnSexwLpbLrHT/jq5MIOYxI+axtwQ44=) 2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: QRIDYBqtTuT5aBwWGaGhz+TBnDkutY1YQfqChJSa2+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Validity Not Before: Nov 2 19:20:26 2025 GMT Not After : Nov 9 19:20:26 2025 GMT Subject: CN=6907aefa-7801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:a9:ea:c6:b8:be:d1:94:85:0c:b8:4d:f2: b5:10:cf:66:fa:36:b3:e4:de:49:6a:66:2e:a5:13: 84:4d:5c:a7:50:d7:0e:2c:ec:a9:31:dd:ed:9a:9a: 20:df:30:61:16:f8:fb:40:3e:b9:74:4c:67:a8:b5: a5:df:63:69:e5:74:3b:f0:f8:89:1a:b4:9d:7f:c7: ec:c0:71:7d:8b:55:5e:73:83:64:c2:be:e0:d6:45: 39:eb:ba:03:20:bd:7e:30:50:84:fd:62:42:ea:61: 23:cf:02:86:f5:da:52:ab:40:21:3d:9d:b7:d1:4f: ea:ed:03:c6:18:a6:67:4a:76:03:03:6b:ae:02:32: ba:6a:6f:a4:be:3b:e9:6e:a0:79:a8:16:28:72:ea: 54:9a:0e:60:56:50:88:89:7a:d6:93:af:e6:41:b2: 10:72:8a:aa:4c:04:9d:ad:51:37:c8:12:ed:53:e4: 43:12:18:e7:b0:82:e9:c8:08:c7:5d:c7:94:52:bd: 8b:91:73:c5:91:5a:a7:bf:c6:72:23:aa:3f:96:22: 9b:8c:76:9f:64:dc:f1:ac:a5:69:d3:83:0b:7f:87: e9:18:d3:2e:4e:6e:df:ea:0d:7a:30:04:34:0d:47: a1:41:6d:e0:9b:51:82:a4:d7:82:5f:ec:0a:fd:3c: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:66:38:57:73:79:C0:A2:DB:E6:56:97:AA:86:BB:11:56:C8:87:84 X509v3 Authority Key Identifier: keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e2:59:3c:78:c2:df:15:fa:52:0c:8a:f3:c4:f9:5e:18:32: b6:05:47:a5:53:97:94:ea:79:19:84:5d:94:68:31:a6:94:9a: 5d:3d:06:32:22:34:cd:88:ac:f4:36:09:c7:37:bd:fa:a9:83: 93:b9:36:bd:bd:a0:8e:99:9c:e3:53:15:ab:9e:e5:75:92:69: 49:91:2d:ad:1d:e0:46:98:42:b4:dc:99:2e:c0:39:26:b3:8f: 0e:92:e4:35:e9:2c:69:08:43:3a:59:29:d7:15:64:b4:a7:93: b0:d0:53:bd:79:f3:bb:8d:f4:7b:f2:3e:5f:66:6f:32:b1:81: bc:e8:a3:49:e2:0a:79:a5:d9:37:e7:be:52:78:d1:06:9e:95: e0:a0:6e:50:e6:18:bf:e5:3b:58:a9:7a:36:8c:bf:3f:ee:39: 30:22:d4:f6:43:73:9b:60:20:dc:3a:91:80:8e:cd:e0:14:56: 08:e0:e3:16:c9:a0:c7:48:67:3d:42:8c:48:ce:d5:ba:7e:b4: 37:fd:82:6f:02:3a:75:72:71:5d:3c:d9:8d:7e:8e:16:1e:ad: 44:df:8c:2f:b5:be:d0:cc:eb:41:52:ba:71:cb:fc:a3:c6:21: b4:7c:8d:27:68:ed:3b:94:fa:8b:3a:24:ea:f8:cc:f4:d7:5e: ac:93:bf:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4MkYxMTAvBgNVBAUTKEJERUE4OEU1MzAwODhBMEVDNzdGOUUwRUNFRUEzM0U2 MDFFMTlDRjcwHhcNMjUxMTAyMTkyMDI2WhcNMjUxMTA5MTkyMDI2WjAYMRYwFAYD VQQDEw02OTA3YWVmYS03ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohup6sa4vtGUhQy4TfK1EM9m+jaz5N5JamYupROETVynUNcOLOypMd3tmpog 3zBhFvj7QD65dExnqLWl32Np5XQ78PiJGrSdf8fswHF9i1Vec4Nkwr7g1kU567oD IL1+MFCE/WJC6mEjzwKG9dpSq0AhPZ230U/q7QPGGKZnSnYDA2uuAjK6am+kvjvp bqB5qBYocupUmg5gVlCIiXrWk6/mQbIQcoqqTASdrVE3yBLtU+RDEhjnsILpyAjH XceUUr2LkXPFkVqnv8ZyI6o/liKbjHafZNzxrKVp04MLf4fpGNMuTm7f6g16MAQ0 DUehQW3gm1GCpNeCX+wK/Tz9rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVmOFdz ecCi2+ZWl6qGuxFWyIeEMB8GA1UdIwQYMBaAFL3qiOUwCIoOx3+eDs7qM+YB4Zz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzgyRi9EM0Q3NDRFQTUz Q0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWlnN0hmNTRPenVvejVnSGhu UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlcUk1VEFJaWc3SGY1NE96dW96NWdIaG5QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzgyRi9EM0Q3NDRFQTUzQ0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWln N0hmNTRPenVvejVnSGhuUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA64lk8eMLfFfpSDIrzxPleGDK2BUelU5eU6nkZhF2UaDGmlJpdPQYy IjTNiKz0NgnHN736qYOTuTa9vaCOmZzjUxWrnuV1kmlJkS2tHeBGmEK03JkuwDkm s48OkuQ16SxpCEM6WSnXFWS0p5Ow0FO9efO7jfR78j5fZm8ysYG86KNJ4gp5pdk3 575SeNEGnpXgoG5Q5hi/5TtYqXo2jL8/7jkwItT2Q3ObYCDcOpGAjs3gFFYI4OMW yaDHSGc9QoxIztW6frQ3/YJvAjp1cnFdPNmNfo4WHq1E34wvtb7QzOtBUrpxy/yj xiG0fI0naO07lPqLOiTq+Mz0116sk793 -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:36 2025 by rpki-client