$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft File: vejnZNDzasWboDNpTTo883QGugk.mft (raw, json) Hash identifier: +rlLfeC3PvkCe+v34MXJMRjGsIyRrATd+QmRUTe7ZE8= Subject key identifier: 92:9F:0E:A4:4D:30:0D:DA:0C:90:08:B9:64:02:76:5E:CE:F4:E6:7F Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 Certificate issuer: /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft Manifest number: 051B Signing time: Sat 09 Aug 2025 00:02:58 +0000 Manifest this update: Sat 09 Aug 2025 00:02:57 +0000 Manifest next update: Sat 16 Aug 2025 00:02:57 +0000 Files and hashes: 1: vejnZNDzasWboDNpTTo883QGugk.crl (hash: wEs8cRD+ZrmknOqI7V3Q6oLNawBMiq3+YISGS8MsPiE=) 2: 361EE54811E211ECAF7EDA48C4F9AE02.roa (hash: 44VaCFbAQVHdRM4CKlF3uIYCMt3E3qGIG27GIv1hkNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A192, serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09 Validity Not Before: Aug 9 00:02:57 2025 GMT Not After : Aug 16 00:02:57 2025 GMT Subject: CN=68969031-7d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:10:93:0d:77:dc:33:47:33:47:57:50:42: 51:4a:cb:7b:9c:78:b6:5d:4f:7c:a8:40:2b:e4:90: 77:88:ab:0f:5f:75:b7:bc:f4:2f:c0:1d:fd:7d:56: ba:38:a8:75:98:28:0d:07:4e:23:2c:72:50:6d:9a: bc:82:0b:a0:3f:e2:f1:ff:aa:bf:af:a5:fd:f0:a1: ef:51:e1:b2:e0:7f:97:b9:bb:5e:2c:3a:31:e6:1d: 3c:10:84:3a:eb:b0:e5:c1:be:54:df:3a:59:82:54: 27:54:b2:df:a1:8e:eb:a9:9b:88:45:c3:50:c0:88: 11:b8:c7:11:62:b8:3e:68:11:8e:ba:fe:0e:de:28: c0:84:95:84:ee:69:33:33:87:29:20:2b:23:b7:91: de:b1:a7:6c:b0:76:bc:85:ae:04:bd:e5:26:a7:c3: 1a:78:28:f3:29:b0:1c:9b:c9:7b:14:dd:f5:5c:b2: f6:5e:22:e0:2a:9e:35:41:42:c4:69:2f:ce:05:37: ec:27:82:62:a4:12:80:ad:56:4f:9c:97:7a:1f:22: 49:c3:2d:fa:1e:3c:21:ba:45:2c:86:d2:78:8c:78: a5:ea:8c:a5:02:b5:5d:ae:96:33:cd:08:7e:3c:17: 7b:0f:ba:41:6b:03:87:71:b8:c1:47:4c:42:8f:16: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:0E:A4:4D:30:0D:DA:0C:90:08:B9:64:02:76:5E:CE:F4:E6:7F X509v3 Authority Key Identifier: keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4d:8b:f9:db:3b:34:f1:20:36:25:66:da:e3:0a:eb:06:f1: 25:d4:2d:2b:68:28:89:7d:84:5c:73:f7:46:b4:e5:ff:84:09: e4:df:f0:70:a6:a5:77:9f:5b:79:2f:46:32:44:36:b8:c4:9f: 53:f4:7a:c4:82:31:b1:38:a9:86:25:80:de:6a:be:6a:85:7e: 0b:5a:bd:2f:79:24:6e:8d:2c:56:2a:12:09:5e:38:22:a9:5e: 34:17:3a:75:bf:17:2a:31:9f:ef:2e:69:ef:7f:39:be:9e:ef: 59:e0:ea:29:5d:92:bf:1b:81:26:82:35:cb:11:cc:0d:22:58: 6f:15:cf:2b:b6:14:56:0a:05:c7:3f:75:1c:db:86:1f:be:58: e1:bc:3b:81:71:96:39:30:39:51:cc:a9:b3:f9:7f:20:4c:ba: 93:90:31:f8:73:f2:e1:c1:e1:88:e4:83:14:d0:3a:3d:bb:8a: 99:1b:f7:f9:8c:9a:ea:81:00:14:06:47:54:76:dc:9b:8b:2c: f7:a8:6e:aa:3d:67:0f:84:2b:7e:d4:4c:c0:5d:5f:8f:1d:31: 52:2b:86:95:da:66:fe:80:18:a4:bc:2b:bd:bb:a9:cb:3e:8e: 66:83:d7:63:a5:d3:01:0f:89:b5:15:d9:83:25:2c:6d:d0:c1: b2:e8:b6:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExOTIxMTAvBgNVBAUTKEJERThFNzY0RDBGMzZBQzU5QkEwMzM2OTREM0EzQ0Yz NzQwNkJBMDkwHhcNMjUwODA5MDAwMjU3WhcNMjUwODE2MDAwMjU3WjAYMRYwFAYD VQQDEw02ODk2OTAzMS03ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnS8Qkw133DNHM0dXUEJRSst7nHi2XU98qEAr5JB3iKsPX3W3vPQvwB39fVa6 OKh1mCgNB04jLHJQbZq8ggugP+Lx/6q/r6X98KHvUeGy4H+XubteLDox5h08EIQ6 67Dlwb5U3zpZglQnVLLfoY7rqZuIRcNQwIgRuMcRYrg+aBGOuv4O3ijAhJWE7mkz M4cpICsjt5HesadssHa8ha4EveUmp8MaeCjzKbAcm8l7FN31XLL2XiLgKp41QULE aS/OBTfsJ4JipBKArVZPnJd6HyJJwy36HjwhukUshtJ4jHil6oylArVdrpYzzQh+ PBd7D7pBawOHcbjBR0xCjxa3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKfDqRN MA3aDJAIuWQCdl7O9OZ/MB8GA1UdIwQYMBaAFL3o52TQ82rFm6AzaU06PPN0BroJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE5Mi9CMjIzOTFBMDEx REYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFzV2JvRE5wVFRvODgzUUd1 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Zlam5aTkR6YXNXYm9ETnBUVG84ODNRR3Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE5Mi9CMjIzOTFBMDExREYxMUVDQTJFOUJFNDNDNEY5QUUwMi92ZWpuWk5EemFz V2JvRE5wVFRvODgzUUd1Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJTYv52zs08SA2JWba4wrrBvEl1C0raCiJfYRcc/dGtOX/hAnk3/Bw pqV3n1t5L0YyRDa4xJ9T9HrEgjGxOKmGJYDear5qhX4LWr0veSRujSxWKhIJXjgi qV40Fzp1vxcqMZ/vLmnvfzm+nu9Z4OopXZK/G4EmgjXLEcwNIlhvFc8rthRWCgXH P3Uc24YfvljhvDuBcZY5MDlRzKmz+X8gTLqTkDH4c/LhweGI5IMU0Do9u4qZG/f5 jJrqgQAUBkdUdtybiyz3qG6qPWcPhCt+1EzAXV+PHTFSK4aV2mb+gBikvCu9u6nL Po5mg9djpdMBD4m1FdmDJSxt0MGy6LZU -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:26 2025 by rpki-client