$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: Ch/OPa7Az9/PdMXGFtAuwdn1P3hClele/K5eV69gDzo= Subject key identifier: 64:E9:0A:C3:4C:67:B8:1B:76:7F:85:5E:AC:F8:92:1F:EC:B6:A0:C0 Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 512E Signing time: Fri 22 Aug 2025 15:17:25 +0000 Manifest this update: Fri 22 Aug 2025 15:17:25 +0000 Manifest next update: Fri 29 Aug 2025 15:17:25 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: 7j/Bh/D7Js4b9ld/FKNXJtjU0jP6Aeedwyd2+x6k0gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7300 (0x1c84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Aug 22 15:17:25 2025 GMT Not After : Aug 29 15:17:25 2025 GMT Subject: CN=68a88a05-f7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:d3:1b:68:9f:e0:b4:f1:9a:16:59:88:90: a5:d7:22:fa:c7:58:56:cb:4d:04:a3:ee:ff:34:d1: 8c:66:41:1d:61:06:49:b9:bc:2c:25:66:e9:e7:fb: dd:69:4f:cc:bb:9c:fa:13:94:9b:87:bb:29:bb:bf: 94:ee:39:0d:27:50:5c:e2:34:45:95:81:32:47:d1: 7b:8b:40:b0:34:78:67:88:3e:41:dc:4f:fe:47:d4: da:e3:f0:18:f2:21:2f:4a:d7:c7:49:b6:3c:1e:bb: b7:54:06:48:16:86:8a:be:ab:10:de:76:86:48:46: ff:c5:1f:3d:89:b4:3b:49:63:1b:1f:ad:1a:61:44: c2:58:71:84:1c:12:d9:87:95:3a:1f:6d:dd:89:89: 7c:2b:76:df:92:66:07:41:23:37:25:d1:02:c3:31: e2:ef:6d:11:3f:58:0a:e4:b4:d4:23:e5:9b:bb:8f: 12:c6:d3:ff:44:76:bc:40:3e:14:3b:87:ff:30:69: ca:da:70:43:41:1b:c4:41:bc:c1:de:8f:fe:ec:00: fb:47:6b:85:e4:0c:2d:02:3c:be:76:1c:6b:8f:ca: 59:44:c5:ad:1b:0f:a0:c5:58:be:a6:45:ea:28:de: 5d:1b:a3:74:07:3a:fe:5a:87:20:63:38:b1:93:29: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E9:0A:C3:4C:67:B8:1B:76:7F:85:5E:AC:F8:92:1F:EC:B6:A0:C0 X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:10:65:a4:39:4e:92:1d:a1:72:d8:0a:0a:4d:7e:b5:e5:40: 48:a4:2e:8f:cf:11:52:e0:75:af:d5:dd:44:d6:12:37:aa:3d: d3:c8:3a:86:a1:ef:6e:52:cb:b4:62:91:27:5c:67:cb:39:b1: 46:1d:de:2c:d7:4e:65:40:b5:d3:1f:4c:9e:09:d8:4f:87:ce: c3:ba:eb:4c:fa:b0:12:52:92:ee:07:9b:f6:db:7d:b8:aa:9a: d7:45:1f:a3:e4:91:63:0b:9e:70:38:34:73:c5:bc:7b:a8:48: 3e:1f:a7:3d:4f:58:a6:f2:03:80:8c:29:cd:dd:01:ec:74:56: 7f:8c:4e:b5:12:39:4b:fd:88:d8:7c:5e:69:b2:da:32:57:44: a7:ac:95:fa:94:fb:48:75:72:20:95:e6:06:8c:82:70:8c:aa: 30:b9:d1:46:cc:59:ce:c5:0a:2a:3e:4e:0f:67:c5:21:96:f5: 3d:ae:9d:14:bf:e2:07:34:59:1e:3b:ac:7d:21:b0:7a:0e:7d: 6e:c3:23:10:60:4b:03:29:c9:ff:d1:1f:de:1f:7f:08:06:cd: 94:16:db:43:66:6f:f0:c2:c5:97:87:65:7f:00:57:43:a3:00: e3:e3:43:53:23:7a:18:ea:7e:97:f4:c3:f6:e7:1e:da:75:b4: fe:c6:49:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUwODIyMTUxNzI1WhcNMjUwODI5MTUxNzI1WjAYMRYwFAYD VQQDEw02OGE4OGEwNS1mN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFHTG2if4LTxmhZZiJCl1yL6x1hWy00Eo+7/NNGMZkEdYQZJubwsJWbp5/vd aU/Mu5z6E5Sbh7spu7+U7jkNJ1Bc4jRFlYEyR9F7i0CwNHhniD5B3E/+R9Ta4/AY 8iEvStfHSbY8Hru3VAZIFoaKvqsQ3naGSEb/xR89ibQ7SWMbH60aYUTCWHGEHBLZ h5U6H23diYl8K3bfkmYHQSM3JdECwzHi720RP1gK5LTUI+Wbu48SxtP/RHa8QD4U O4f/MGnK2nBDQRvEQbzB3o/+7AD7R2uF5AwtAjy+dhxrj8pZRMWtGw+gxVi+pkXq KN5dG6N0Bzr+WocgYzixkylynQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTpCsNM Z7gbdn+FXqz4kh/stqDAMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoEGWkOU6SHaFy2AoKTX615UBIpC6PzxFS4HWv1d1E1hI3qj3TyDqG oe9uUsu0YpEnXGfLObFGHd4s105lQLXTH0yeCdhPh87DuutM+rASUpLuB5v22324 qprXRR+j5JFjC55wODRzxbx7qEg+H6c9T1im8gOAjCnN3QHsdFZ/jE61EjlL/YjY fF5pstoyV0SnrJX6lPtIdXIgleYGjIJwjKowudFGzFnOxQoqPk4PZ8UhlvU9rp0U v+IHNFkeO6x9IbB6Dn1uwyMQYEsDKcn/0R/eH38IBs2UFttDZm/wwsWXh2V/AFdD owDj40NTI3oY6n6X9MP25x7adbT+xknN -----END CERTIFICATE-----Generated at Sat Aug 23 14:29:11 2025 by rpki-client