$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft File: veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json) Hash identifier: KXwlVtnfOPtyd8K32Dc7iHEoG2sQx6JK09xo85s5Tag= Subject key identifier: 27:B0:CE:00:3F:FD:9B:E7:8E:51:A2:13:1D:B5:F2:D4:8D:A6:80:52 Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 Certificate issuer: /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Certificate serial: 0AA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft Manifest number: 0A9B Signing time: Thu 24 Apr 2025 19:26:27 +0000 Manifest this update: Thu 24 Apr 2025 19:26:27 +0000 Manifest next update: Thu 01 May 2025 19:26:27 +0000 Files and hashes: 1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: irwqFdxSjeP44kvojns9QsgR3gNq1ke8nilFsCS9tJQ=) 2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: +5FC7zIIAi+tOq/0kiPN0dlteJZUS+cJEjJZZiGDU7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2721 (0xaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7 Validity Not Before: Apr 24 19:26:27 2025 GMT Not After : May 1 19:26:27 2025 GMT Subject: CN=680a9063-c21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:be:6e:0c:4f:e2:29:b5:09:8d:ac:99:89: b5:84:bc:13:a8:34:a0:36:74:3c:03:81:47:68:bc: 94:a4:13:4a:16:d4:b2:18:d2:23:2e:07:30:32:2e: 15:4f:71:fd:66:35:fe:7b:38:aa:40:de:f3:3c:9f: 5c:24:44:53:ec:d6:09:04:44:d5:e8:2b:71:a9:75: 19:bc:12:1d:ce:fe:f1:eb:38:18:bb:d4:90:2f:37: 04:8d:dc:ed:33:23:fb:69:6e:d9:5a:78:42:3b:24: 8d:4d:91:25:3c:eb:c9:72:25:40:10:18:e3:d0:c9: e1:c2:54:87:6a:92:ac:0f:ba:ce:cc:46:bd:0d:81: 1f:c2:a1:53:41:1e:d6:4e:0d:95:e8:f3:33:5e:ea: 3b:42:4d:6c:26:01:d8:ca:d6:cd:39:fc:ac:bc:74: 0f:25:b6:20:9c:cb:81:45:7d:bd:37:fd:ae:49:9b: 7e:73:f0:f4:63:d6:de:a3:0b:16:6e:e8:43:91:97: ec:3b:5d:f2:d6:7b:c6:71:c3:e5:16:32:08:ac:c5: 54:d8:1f:e0:19:f9:aa:82:4a:0d:35:c2:a4:26:4f: 9a:ba:3f:3d:cd:d4:0d:2f:17:f9:e3:31:af:b0:64: 37:5f:0a:e1:62:9b:28:10:60:91:82:a8:41:a0:25: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B0:CE:00:3F:FD:9B:E7:8E:51:A2:13:1D:B5:F2:D4:8D:A6:80:52 X509v3 Authority Key Identifier: keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:06:12:69:4c:9f:15:bd:ea:88:30:8e:4d:18:06:70:d9:0a: 79:49:e0:da:3b:01:e8:9d:0b:eb:5c:f1:c0:e5:f3:cb:6c:55: bb:35:22:c4:eb:a1:74:36:03:d6:68:02:11:34:cd:97:1c:6d: 36:92:fe:a0:a1:be:c6:83:36:e1:af:e1:c9:b4:dd:56:70:14: a8:76:de:34:48:e0:ac:fd:7f:c5:d4:bd:fd:1a:9b:65:b2:24: 52:a5:bc:d6:90:00:f9:e6:c0:e7:a5:93:01:8e:7e:52:6b:00: 0c:34:f7:2b:47:a6:30:14:0b:7c:73:48:f3:71:1b:20:82:54: d2:67:9d:7b:84:a3:f1:3f:20:a5:92:eb:d1:b6:16:c1:78:34: 6f:c6:57:6b:27:9a:7d:d2:76:26:9e:bb:05:f6:73:93:bc:23: 78:72:1a:a5:50:72:2b:ff:8a:fc:3f:e5:a7:81:93:bc:76:86: 68:35:f2:a2:09:f0:20:ec:1f:91:3b:2b:6c:8e:64:5d:25:16: e0:0a:78:c9:5d:54:f2:e2:ed:2d:81:92:06:ce:bb:b5:f2:53: cf:1e:37:65:ba:ae:51:a8:38:0e:d3:8e:79:dd:ec:65:65:4a: 5d:9c:6c:66:40:92:ac:e8:15:d4:23:89:d8:22:5e:c9:a9:b2: 2c:c3:af:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4MkYxMTAvBgNVBAUTKEJERUE4OEU1MzAwODhBMEVDNzdGOUUwRUNFRUEzM0U2 MDFFMTlDRjcwHhcNMjUwNDI0MTkyNjI3WhcNMjUwNTAxMTkyNjI3WjAYMRYwFAYD VQQDEw02ODBhOTA2My1jMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE6+bgxP4im1CY2smYm1hLwTqDSgNnQ8A4FHaLyUpBNKFtSyGNIjLgcwMi4V T3H9ZjX+eziqQN7zPJ9cJERT7NYJBETV6CtxqXUZvBIdzv7x6zgYu9SQLzcEjdzt MyP7aW7ZWnhCOySNTZElPOvJciVAEBjj0MnhwlSHapKsD7rOzEa9DYEfwqFTQR7W Tg2V6PMzXuo7Qk1sJgHYytbNOfysvHQPJbYgnMuBRX29N/2uSZt+c/D0Y9beowsW buhDkZfsO13y1nvGccPlFjIIrMVU2B/gGfmqgkoNNcKkJk+auj89zdQNLxf54zGv sGQ3XwrhYpsoEGCRgqhBoCVdOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCewzgA/ /ZvnjlGiEx218tSNpoBSMB8GA1UdIwQYMBaAFL3qiOUwCIoOx3+eDs7qM+YB4Zz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzgyRi9EM0Q3NDRFQTUz Q0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWlnN0hmNTRPenVvejVnSGhu UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZlcUk1VEFJaWc3SGY1NE96dW96NWdIaG5QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzgyRi9EM0Q3NDRFQTUzQ0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWln N0hmNTRPenVvejVnSGhuUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsBhJpTJ8VveqIMI5NGAZw2Qp5SeDaOwHonQvrXPHA5fPLbFW7NSLE 66F0NgPWaAIRNM2XHG02kv6gob7Ggzbhr+HJtN1WcBSodt40SOCs/X/F1L39Gptl siRSpbzWkAD55sDnpZMBjn5SawAMNPcrR6YwFAt8c0jzcRsgglTSZ517hKPxPyCl kuvRthbBeDRvxldrJ5p90nYmnrsF9nOTvCN4chqlUHIr/4r8P+WngZO8doZoNfKi CfAg7B+ROytsjmRdJRbgCnjJXVTy4u0tgZIGzru18lPPHjdluq5RqDgO04553exl ZUpdnGxmQJKs6BXUI4nYIl7JqbIsw6/M -----END CERTIFICATE-----Generated at Sat Apr 26 05:30:07 2025 by rpki-client