$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft File: veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json) Hash identifier: TQEMT1GVYmZuOoYTzWbDB3qXjDZ8N+LdOhkpWQlpeGY= Subject key identifier: 84:AB:7B:F0:77:56:58:32:F0:FC:F7:BA:82:89:C8:02:19:5E:AA:B9 Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B Certificate issuer: /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft Manifest number: 0489 Signing time: Sat 09 Aug 2025 00:31:23 +0000 Manifest this update: Sat 09 Aug 2025 00:31:22 +0000 Manifest next update: Sat 16 Aug 2025 00:31:22 +0000 Files and hashes: 1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: Y5TdSMwejZvUXnpEM065v/TwKNMkoPOSdU6ek3AZQvM=) 2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: roBiUviMC5AgiQf3XHVJjv6BNW8BJ8gqBvPnuJuZKp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B Validity Not Before: Aug 9 00:31:22 2025 GMT Not After : Aug 16 00:31:22 2025 GMT Subject: CN=689696db-ce99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:54:c7:99:ca:f7:95:56:fa:cf:d8:79:d9: 30:c9:8d:5a:a3:71:cd:f9:9d:a5:93:91:d4:af:c9: 20:25:e9:cf:b8:10:54:ee:04:17:eb:05:1e:f0:0f: 1e:a5:53:c9:26:c9:4c:4c:67:6e:9b:e7:a4:1d:4c: 29:96:92:17:60:90:80:21:60:9f:6b:49:ce:d1:f5: 57:65:69:fe:b3:b0:63:67:84:40:fd:60:71:b2:bb: f8:b4:02:cf:e2:fd:00:18:bb:c2:1e:42:99:69:ab: de:54:8e:87:ae:0c:4e:7a:f3:16:37:f9:fe:81:da: 6d:9f:89:be:01:69:2f:ef:af:b8:80:cc:d4:ab:5d: d7:e9:ce:57:4d:1c:14:0e:4a:69:68:bc:4b:02:3f: 71:0c:8e:94:51:52:c1:77:72:78:d1:01:6b:4b:0b: ef:d6:00:4a:17:d6:8d:78:7f:a5:e8:1c:e1:82:77: 4e:f6:7c:d6:10:0d:ac:99:bd:d2:2e:d5:a8:67:c6: 70:43:a1:b1:cb:96:5e:74:9d:cc:b8:8f:bb:76:e0: 04:65:ab:1d:bf:79:13:b0:3a:cc:e4:a1:e4:f3:69: 86:25:f5:67:3a:b4:12:9c:fb:1c:76:ea:08:5a:ac: f8:a1:36:27:fb:a7:2e:18:54:6b:67:a9:d1:4d:c3: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:7B:F0:77:56:58:32:F0:FC:F7:BA:82:89:C8:02:19:5E:AA:B9 X509v3 Authority Key Identifier: keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f6:5f:c7:5a:13:77:8a:6b:ec:06:42:3a:96:cb:53:17:ff: 6c:0b:9f:31:58:dd:97:51:df:ff:0b:b8:b6:3b:30:0b:8c:43: 4f:95:4e:57:16:16:e7:57:ad:ec:85:d7:03:02:58:47:e0:c7: a9:b4:ca:b7:a0:3c:48:8d:3d:70:ea:18:00:cd:7f:9f:49:9e: a6:40:cc:d2:2b:c0:5c:bf:fc:eb:cb:37:8a:46:50:9d:8e:45: 5c:96:00:78:18:16:89:1e:a2:c9:98:51:5a:ff:b1:bb:48:16: 4d:7f:c3:07:b6:6e:b6:27:24:f2:77:8c:ad:41:f1:db:fb:1b: c2:b1:b1:e7:9e:4e:cf:d6:82:5b:6c:5b:cb:e3:e6:2c:1f:a8: 79:0d:f0:71:34:c8:5b:2b:fc:42:6d:e8:d2:1e:dd:9d:12:53: 13:13:d8:8e:32:36:c4:9f:af:3d:f2:34:e2:24:2e:92:48:28: ef:7a:d3:bd:4e:cd:74:51:12:d8:26:d4:3f:3c:8a:31:ef:67: 69:d5:4d:ef:de:b3:5f:15:72:7f:3a:67:3f:93:1b:85:b3:57: 2b:be:ea:ad:a3:2a:c9:d4:42:c5:1e:23:79:a7:b6:5a:32:7a: ae:40:f6:9c:25:10:59:79:4d:9d:dc:5b:54:fd:03:eb:a1:62: 47:28:fc:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD NjcyOTUwOUIwHhcNMjUwODA5MDAzMTIyWhcNMjUwODE2MDAzMTIyWjAYMRYwFAYD VQQDEw02ODk2OTZkYi1jZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WBUx5nK95VW+s/YedkwyY1ao3HN+Z2lk5HUr8kgJenPuBBU7gQX6wUe8A8e pVPJJslMTGdum+ekHUwplpIXYJCAIWCfa0nO0fVXZWn+s7BjZ4RA/WBxsrv4tALP 4v0AGLvCHkKZaaveVI6HrgxOevMWN/n+gdptn4m+AWkv76+4gMzUq13X6c5XTRwU DkppaLxLAj9xDI6UUVLBd3J40QFrSwvv1gBKF9aNeH+l6BzhgndO9nzWEA2smb3S LtWoZ8ZwQ6Gxy5ZedJ3MuI+7duAEZasdv3kTsDrM5KHk82mGJfVnOrQSnPscduoI Wqz4oTYn+6cuGFRrZ6nRTcPgFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISre/B3 Vlgy8Pz3uoKJyAIZXqq5MB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1 aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf9l/HWhN3imvsBkI6lstTF/9sC58xWN2XUd//C7i2OzALjENPlU5X FhbnV63shdcDAlhH4MeptMq3oDxIjT1w6hgAzX+fSZ6mQMzSK8Bcv/zryzeKRlCd jkVclgB4GBaJHqLJmFFa/7G7SBZNf8MHtm62JyTyd4ytQfHb+xvCsbHnnk7P1oJb bFvL4+YsH6h5DfBxNMhbK/xCbejSHt2dElMTE9iOMjbEn6898jTiJC6SSCjvetO9 Ts10URLYJtQ/PIox72dp1U3v3rNfFXJ/Omc/kxuFs1crvuqtoyrJ1ELFHiN5p7Za MnquQPacJRBZeU2d3FtU/QProWJHKPz6 -----END CERTIFICATE-----Generated at Sat Aug 9 23:20:39 2025 by rpki-client