$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json) Hash identifier: ZCSsjATMt6IjPu6E7CH0kVnR066ZxM5oHkAGErJgW2Q= Subject key identifier: E2:4F:0B:E9:05:E4:1B:CE:B1:81:1D:B4:59:0F:DA:C3:3D:2F:B1:F0 Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft Manifest number: 0AD3 Signing time: Sun 10 Aug 2025 19:28:25 +0000 Manifest this update: Sun 10 Aug 2025 19:28:25 +0000 Manifest next update: Sun 17 Aug 2025 19:28:25 +0000 Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: i3xz1eC2YOk1FX0wV2EsQ0bdmh+7CD1X0BbAhJKekEI=) 2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: QRIDYBqtTuT5aBwWGaGhz+TBnDkutY1YQfqChJSa2+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Validity Not Before: Aug 10 19:28:25 2025 GMT Not After : Aug 17 19:28:25 2025 GMT Subject: CN=6898f2d9-888e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:03:71:e3:2f:c2:cd:a3:06:95:31:ce:4e: 5d:69:30:22:60:52:ad:42:03:cd:12:4c:29:89:17: 13:a3:e2:55:81:84:da:ff:21:53:c3:e5:4b:87:73: 11:ba:77:05:fa:79:1c:2d:f4:92:1b:63:e5:1f:59: b4:73:de:ae:2c:73:02:b3:49:6f:23:54:37:e7:99: c7:c3:b1:3d:83:85:90:d2:31:63:1c:da:f0:d1:89: 32:90:ec:01:e9:5a:44:c7:91:d9:08:df:16:78:7b: bc:e5:da:ef:8f:be:e1:2f:04:2a:69:65:73:6c:d6: 7d:c1:b8:16:7e:6c:00:d1:7a:64:0b:76:f5:8e:a1: 95:e0:71:e9:e5:b8:4e:d7:07:a8:af:e4:4e:1f:4b: d1:b0:08:61:83:80:bd:25:6f:63:66:eb:4d:d6:86: a4:f1:44:ae:dd:01:ad:30:6a:ad:40:6a:77:a3:de: 41:48:ad:c5:ac:53:90:d7:f7:b1:af:0f:22:43:f3: d3:60:4e:8a:2b:7d:a6:11:c6:67:7a:73:54:cf:12: da:17:f2:08:52:9f:97:b0:b9:18:ab:f3:09:69:0a: 6a:b3:a8:7b:a7:62:03:0e:1a:25:d7:b3:cd:50:43: 35:c6:df:fe:b5:19:3f:27:83:b9:71:83:f4:cc:0d: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4F:0B:E9:05:E4:1B:CE:B1:81:1D:B4:59:0F:DA:C3:3D:2F:B1:F0 X509v3 Authority Key Identifier: keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:4e:fe:be:8b:6f:57:2e:0b:1a:69:39:97:79:08:e7:4c:95: 87:e3:e5:19:3f:a7:a2:9a:ec:2b:27:84:f3:a6:1c:e3:30:80: 81:12:67:5a:1e:b9:f3:26:bf:a1:5c:38:d3:ac:a1:b8:b9:33: c8:44:c2:7d:ea:74:0c:10:a5:e8:a9:34:ad:bd:53:ee:ef:ce: 41:2a:3f:08:15:3f:f0:86:07:73:7a:4f:d2:ff:88:ba:c1:aa: b6:75:6f:25:1a:76:a5:53:af:d7:5f:a1:4a:dc:e6:2b:e0:8b: 2a:5e:1f:36:7f:d2:78:cd:a8:fb:ce:19:81:11:13:b8:d6:dc: 12:c4:37:ee:8d:64:30:c6:d1:fd:86:88:80:05:1e:88:f2:e7: 26:97:d1:35:99:68:b5:bc:e1:f6:da:3a:60:dd:93:54:d1:1e: 5d:cc:d6:6c:85:12:c4:49:1c:07:8d:69:8d:96:45:7f:a2:83: 01:de:b7:99:97:46:de:49:d3:17:96:e0:14:5c:de:10:f4:2d: c5:2a:c3:7d:34:f3:67:cd:d8:ac:e4:3f:ca:8c:e6:86:d8:c4: b9:44:43:36:90:c1:65:70:d6:66:37:74:b5:43:a8:3e:f2:69: bb:61:94:24:7a:18:8f:a1:0d:10:d6:62:2c:71:78:6d:3b:19: e2:de:21:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4MkYxMTAvBgNVBAUTKEJERUE4OEU1MzAwODhBMEVDNzdGOUUwRUNFRUEzM0U2 MDFFMTlDRjcwHhcNMjUwODEwMTkyODI1WhcNMjUwODE3MTkyODI1WjAYMRYwFAYD VQQDEw02ODk4ZjJkOS04ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti4DceMvws2jBpUxzk5daTAiYFKtQgPNEkwpiRcTo+JVgYTa/yFTw+VLh3MR uncF+nkcLfSSG2PlH1m0c96uLHMCs0lvI1Q355nHw7E9g4WQ0jFjHNrw0YkykOwB 6VpEx5HZCN8WeHu85drvj77hLwQqaWVzbNZ9wbgWfmwA0XpkC3b1jqGV4HHp5bhO 1weor+ROH0vRsAhhg4C9JW9jZutN1oak8USu3QGtMGqtQGp3o95BSK3FrFOQ1/ex rw8iQ/PTYE6KK32mEcZnenNUzxLaF/IIUp+XsLkYq/MJaQpqs6h7p2IDDhol17PN UEM1xt/+tRk/J4O5cYP0zA2okQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJPC+kF 5BvOsYEdtFkP2sM9L7HwMB8GA1UdIwQYMBaAFL3qiOUwCIoOx3+eDs7qM+YB4Zz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzgyRi9EM0Q3NDRFQTUz Q0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWlnN0hmNTRPenVvejVnSGhu UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlcUk1VEFJaWc3SGY1NE96dW96NWdIaG5QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzgyRi9EM0Q3NDRFQTUzQ0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWln N0hmNTRPenVvejVnSGhuUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9Tv6+i29XLgsaaTmXeQjnTJWH4+UZP6eimuwrJ4TzphzjMICBEmda HrnzJr+hXDjTrKG4uTPIRMJ96nQMEKXoqTStvVPu785BKj8IFT/whgdzek/S/4i6 waq2dW8lGnalU6/XX6FK3OYr4IsqXh82f9J4zaj7zhmBERO41twSxDfujWQwxtH9 hoiABR6I8ucml9E1mWi1vOH22jpg3ZNU0R5dzNZshRLESRwHjWmNlkV/ooMB3reZ l0beSdMXluAUXN4Q9C3FKsN9NPNnzdis5D/KjOaG2MS5REM2kMFlcNZmN3S1Q6g+ 8mm7YZQkehiPoQ0Q1mIscXhtOxni3iGl -----END CERTIFICATE-----Generated at Mon Aug 11 06:02:58 2025 by rpki-client