$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json) Hash identifier: T/HeXqYfUIG+o12kBnuNDVJQbKfmHVqWlLDQYn32Cio= Subject key identifier: F8:B4:C8:4A:96:65:CC:75:EF:27:FA:6C:0B:F2:E0:D8:CC:4E:6B:D7 Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Certificate serial: 045B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft Manifest number: 0457 Signing time: Wed 30 Apr 2025 23:44:50 +0000 Manifest this update: Wed 30 Apr 2025 23:44:50 +0000 Manifest next update: Wed 07 May 2025 23:44:50 +0000 Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: hLZ9DJBAUl3dTZOt4BHcnohOvxuI1dX9XjAwJQlmGWE=) 2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: roBiUviMC5AgiQf3XHVJjv6BNW8BJ8gqBvPnuJuZKp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Validity Not Before: Apr 30 23:44:50 2025 GMT Not After : May 7 23:44:50 2025 GMT Subject: CN=6812b5f2-a640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:7c:cb:fa:d9:da:b6:03:d6:ea:af:78:86: 2a:06:90:3e:67:e1:6b:c1:24:69:4e:7d:37:08:dc: ac:b4:87:cd:53:d0:29:04:54:dc:8f:bf:0c:67:a1: bd:de:e4:37:ed:4f:a1:95:2c:d8:03:78:76:ac:a6: af:10:aa:d6:2a:01:cf:07:42:9f:b5:ee:27:a1:d8: 7f:0c:2e:b4:ed:31:75:c4:5a:bb:f0:d4:4d:3d:9b: b6:7e:d4:ca:8d:02:2d:2e:c0:37:b1:a9:9c:bd:bb: 53:de:05:e4:5c:38:68:f9:09:81:c4:30:7f:65:13: b4:84:0e:72:cf:47:52:26:63:01:ec:14:cd:b3:dc: e0:d2:e9:7b:06:a0:a1:25:22:d0:60:83:d5:18:f6: 80:a8:30:d7:1d:b2:7c:be:c2:8a:f0:02:9c:58:68: 4f:84:81:c7:c2:e5:59:e9:3a:fd:21:99:b8:20:f5: 92:0f:df:54:a6:20:23:5d:82:03:3c:c6:70:74:0f: fa:ca:c1:10:eb:c7:d9:ca:11:82:4a:7b:30:b1:85: 81:b7:dd:75:eb:5c:da:91:1b:08:f6:08:47:e0:a1: d7:ec:62:15:02:7c:e9:ad:2c:41:17:b0:b1:91:43: 71:43:7a:77:e8:b9:1c:26:70:48:cd:38:39:ed:0b: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B4:C8:4A:96:65:CC:75:EF:27:FA:6C:0B:F2:E0:D8:CC:4E:6B:D7 X509v3 Authority Key Identifier: keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7f:d7:79:bf:22:f3:1e:6d:df:eb:cd:d9:49:d2:b9:0b:81: 77:30:80:83:8d:f5:89:39:33:6b:34:9f:2d:a7:07:8f:db:22: df:6b:fd:bd:6a:61:81:01:41:8e:3a:12:b9:bf:a5:51:39:e0: e9:95:12:31:0f:d6:54:46:4a:eb:f1:1a:5c:fa:db:7d:3e:34: 8e:1d:c0:e4:c0:0f:f9:eb:1e:f3:5d:95:72:f7:4e:16:a1:b6: e4:d7:53:7b:4a:4b:11:a7:d3:e3:ac:8e:13:f5:f1:42:08:13: 93:d2:91:72:b4:55:4e:ee:0f:86:43:37:1e:b4:11:41:2c:7a: 71:3f:47:79:5c:40:a3:90:5a:f1:5c:32:3a:e6:d7:97:c6:2b: 65:5c:98:bc:a2:55:5b:80:c4:e5:d0:8d:40:cb:1b:5a:f2:c2: df:4a:3d:01:0b:f1:27:b2:cd:9a:18:0e:42:cd:ef:27:32:e5: 41:c8:1d:dd:a2:34:c2:a0:67:e4:ad:df:6c:8c:e8:fb:39:fb: 9f:c2:63:17:df:a2:89:46:e9:c5:60:9d:0f:93:a1:60:c5:c7: 48:73:c3:e6:63:9f:4d:9a:86:31:48:c7:76:5c:4c:78:49:ee: 5e:b3:ac:f6:5d:76:e2:cd:d2:ac:c9:21:3e:d6:11:93:ce:58: 4d:a7:f2:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD NjcyOTUwOUIwHhcNMjUwNDMwMjM0NDUwWhcNMjUwNTA3MjM0NDUwWjAYMRYwFAYD VQQDEw02ODEyYjVmMi1hNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzV8y/rZ2rYD1uqveIYqBpA+Z+FrwSRpTn03CNystIfNU9ApBFTcj78MZ6G9 3uQ37U+hlSzYA3h2rKavEKrWKgHPB0Kfte4nodh/DC607TF1xFq78NRNPZu2ftTK jQItLsA3samcvbtT3gXkXDho+QmBxDB/ZRO0hA5yz0dSJmMB7BTNs9zg0ul7BqCh JSLQYIPVGPaAqDDXHbJ8vsKK8AKcWGhPhIHHwuVZ6Tr9IZm4IPWSD99UpiAjXYID PMZwdA/6ysEQ68fZyhGCSnswsYWBt91161zakRsI9ghH4KHX7GIVAnzprSxBF7Cx kUNxQ3p36LkcJnBIzTg57Qv1twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi0yEqW Zcx17yf6bAvy4NjMTmvXMB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1 aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKf9d5vyLzHm3f683ZSdK5C4F3MICDjfWJOTNrNJ8tpweP2yLfa/29 amGBAUGOOhK5v6VROeDplRIxD9ZURkrr8Rpc+tt9PjSOHcDkwA/56x7zXZVy904W obbk11N7SksRp9PjrI4T9fFCCBOT0pFytFVO7g+GQzcetBFBLHpxP0d5XECjkFrx XDI65teXxitlXJi8olVbgMTl0I1Ayxta8sLfSj0BC/Enss2aGA5Cze8nMuVByB3d ojTCoGfkrd9sjOj7OfufwmMX36KJRunFYJ0Pk6FgxcdIc8PmY59NmoYxSMd2XEx4 Se5es6z2XXbizdKsySE+1hGTzlhNp/JG -----END CERTIFICATE-----Generated at Fri May 2 08:34:14 2025 by rpki-client