$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: +1BS2JtpRkOTJEcK7w2S9wCM8E/6171yfPhwz95JOss= Subject key identifier: A9:42:42:47:FA:91:96:26:AF:9C:BC:78:E2:81:BF:B3:C7:32:B0:B9 Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 50C4 Signing time: Sat 10 May 2025 15:13:38 +0000 Manifest this update: Sat 10 May 2025 15:13:37 +0000 Manifest next update: Sat 17 May 2025 15:13:37 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: sH9zAtClF98tMYdyuq1QRpYNuzQZr/VqixZ4dIBGXH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7247 (0x1c4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: May 10 15:13:37 2025 GMT Not After : May 17 15:13:37 2025 GMT Subject: CN=681f6d21-4f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:cf:00:c4:7e:ab:36:61:cd:cd:39:56:3a: 2a:c0:f1:dc:8a:4e:0f:2a:35:4e:3a:4e:56:6f:17: 9a:65:90:c3:96:44:0f:9c:06:92:25:cf:a3:0f:6a: f7:88:f6:1a:ce:20:d9:0c:ec:4a:8b:3a:67:d7:bf: 05:03:97:46:ba:28:a1:bf:dc:f8:e7:39:ff:6d:3b: 29:d9:f2:9c:70:87:21:41:fe:1a:00:f0:d6:af:fb: 9d:f0:96:e1:46:74:19:8d:ca:e5:2f:ad:11:c5:f2: b7:be:1c:02:6f:32:2d:25:77:2b:2b:a3:9c:fd:fc: d8:f6:d7:22:58:59:ff:0b:db:4f:f2:c1:22:6b:f4: 19:f5:88:ea:6a:70:83:55:c5:cc:c3:5e:c1:e4:a0: b1:bb:97:2c:95:25:cd:91:ba:4b:0e:39:86:48:cc: c9:7b:3d:26:b6:73:80:73:f9:0e:d9:e7:0d:86:d7: da:5b:49:98:fd:4e:31:59:f8:92:3b:1d:7a:70:5f: 07:7c:36:62:80:ff:3a:f2:fb:63:e6:66:b3:f4:91: a1:9a:d1:60:7b:5a:1a:19:c3:25:a0:e5:7f:62:b9: 63:2b:51:90:bc:80:4c:8e:fa:f0:6c:5d:49:10:22: da:53:38:bb:b5:c5:3c:94:a0:ac:af:73:c0:3a:fa: ea:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:42:42:47:FA:91:96:26:AF:9C:BC:78:E2:81:BF:B3:C7:32:B0:B9 X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:05:02:1b:98:cf:2f:70:19:ce:9e:87:ee:8e:63:d0:1c:1d: b9:57:ed:54:12:9b:09:10:e4:eb:78:d1:c7:12:01:a3:ec:0b: 6d:e9:e8:84:dd:02:ef:cd:03:18:b5:b5:28:54:97:cd:ca:cf: 46:7a:f6:26:33:57:21:71:57:44:54:e8:f4:bc:a8:0d:80:81: ae:a0:77:15:fd:7d:19:1a:dd:d0:e0:44:dd:36:a9:05:26:cf: 67:4e:3a:38:cb:da:3a:a7:ec:5f:fb:9a:27:03:e5:cf:d4:37: e9:85:30:e8:8a:9e:f1:2f:87:d5:43:1f:c1:e4:22:8d:50:80: ec:0d:ad:34:a8:9e:f8:a2:64:04:b6:ae:71:a5:c0:a6:6d:aa: 6e:44:d2:93:2f:ca:16:47:de:58:81:91:ae:4f:58:bc:41:ef: d1:f7:3e:07:32:1c:3b:d3:52:f5:d3:13:9b:7d:9d:d8:d8:1f: b9:93:e0:5e:da:b4:3f:a7:45:63:f2:0e:4d:3b:8e:0b:cd:ed: 93:c7:48:a1:b9:e9:ff:59:c1:b8:2f:27:90:a0:0f:f3:75:9c: 18:6f:54:27:80:cc:f7:68:36:77:12:1f:4c:ad:e1:bd:85:b5: f3:e5:e6:1a:49:63:e5:ab:5d:df:2d:0a:dd:7d:ab:50:3b:7a: 41:6a:dc:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUwNTEwMTUxMzM3WhcNMjUwNTE3MTUxMzM3WjAYMRYwFAYD VQQDEw02ODFmNmQyMS00ZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm3PAMR+qzZhzc05VjoqwPHcik4PKjVOOk5WbxeaZZDDlkQPnAaSJc+jD2r3 iPYaziDZDOxKizpn178FA5dGuiihv9z45zn/bTsp2fKccIchQf4aAPDWr/ud8Jbh RnQZjcrlL60RxfK3vhwCbzItJXcrK6Oc/fzY9tciWFn/C9tP8sEia/QZ9YjqanCD VcXMw17B5KCxu5cslSXNkbpLDjmGSMzJez0mtnOAc/kO2ecNhtfaW0mY/U4xWfiS Ox16cF8HfDZigP868vtj5maz9JGhmtFge1oaGcMloOV/YrljK1GQvIBMjvrwbF1J ECLaUzi7tcU8lKCsr3PAOvrq4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlCQkf6 kZYmr5y8eOKBv7PHMrC5MB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKBQIbmM8vcBnOnofujmPQHB25V+1UEpsJEOTreNHHEgGj7Att6eiE 3QLvzQMYtbUoVJfNys9GevYmM1chcVdEVOj0vKgNgIGuoHcV/X0ZGt3Q4ETdNqkF Js9nTjo4y9o6p+xf+5onA+XP1DfphTDoip7xL4fVQx/B5CKNUIDsDa00qJ74omQE tq5xpcCmbapuRNKTL8oWR95YgZGuT1i8Qe/R9z4HMhw701L10xObfZ3Y2B+5k+Be 2rQ/p0Vj8g5NO44Lze2Tx0ihuen/WcG4LyeQoA/zdZwYb1QngMz3aDZ3Eh9MreG9 hbXz5eYaSWPlq13fLQrdfatQO3pBatyu -----END CERTIFICATE-----Generated at Sun May 11 12:28:17 2025 by rpki-client