$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json) Hash identifier: +vMdUy/mYNRejqn/JRmwl9pJ3qPa0KCpgN4P6v+pwl0= Subject key identifier: 90:BC:16:42:7D:62:26:62:06:2E:61:5B:24:AC:49:6C:CD:F3:1F:DC Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft Manifest number: 8D Signing time: Sun 15 Jun 2025 05:36:39 +0000 Manifest this update: Sun 15 Jun 2025 05:36:39 +0000 Manifest next update: Sun 22 Jun 2025 05:36:39 +0000 Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: JtTcstSHfL/nLwokqwJXn6JP2g0YbMq1bdA93Sl56q4=) 2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: P0ja5yGMmuugrOF5BJ+3udMpfSg7jsGxtmTDuFAzbtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Jun 15 05:36:39 2025 GMT Not After : Jun 22 05:36:39 2025 GMT Subject: CN=684e5be7-fe54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:8f:52:d3:e9:55:7f:92:c3:3c:c8:f1:02: 10:0e:e5:f7:5e:12:66:ff:66:4d:6c:e5:84:68:1d: 75:0c:d7:6b:44:29:9d:7b:2f:e6:ea:fb:a3:a8:7e: a0:d0:35:25:d7:cb:cc:16:87:d5:6d:6e:31:2f:3d: 12:43:c9:86:2e:37:d9:77:a9:07:e8:2f:cf:4e:be: f2:54:90:ef:90:26:0c:66:8a:96:ec:5b:fc:e2:7c: 5b:cf:7b:a8:ea:ad:b0:27:83:94:c1:4e:a3:20:f6: d4:29:19:09:ac:21:af:e9:ce:12:62:b7:7f:1e:97: 66:fe:30:15:0e:4b:be:65:62:ca:3a:dd:97:6d:d0: 43:fb:84:db:20:44:27:89:40:26:ff:d4:ae:88:6c: 2a:88:e1:68:59:9e:23:f9:05:ed:2f:52:f4:43:c9: 09:3c:35:4c:b0:27:bc:8f:45:ac:51:e7:62:8a:d2: 33:da:03:b5:a4:de:50:6c:ed:2d:bd:b5:8f:5d:43: f1:4a:ea:e4:6b:42:15:ea:21:39:4b:2e:35:af:e4: 85:3b:c7:f6:3a:91:41:33:43:4d:8e:e0:cd:19:1a: ef:fe:89:dd:0c:31:ce:df:8c:2d:27:51:2b:e0:c0: 04:70:49:96:7b:17:17:54:42:28:a3:a5:a3:a4:ce: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BC:16:42:7D:62:26:62:06:2E:61:5B:24:AC:49:6C:CD:F3:1F:DC X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:66:9b:d4:0b:33:de:f4:e6:3a:a7:b2:d2:ab:f6:64:cc:57: c7:18:14:eb:c4:22:31:d7:d3:43:3f:32:7e:e0:d4:7f:76:05: db:a1:24:cd:83:89:c4:26:d8:20:5a:d9:f6:b0:74:c0:5b:f7: 30:5b:68:6a:e1:41:a0:68:55:3e:47:e9:93:43:fd:9f:de:3f: f2:2a:8f:df:60:65:18:69:33:15:5a:40:71:26:84:92:e3:39: 51:77:bd:fa:5a:a1:91:59:11:52:ac:6c:03:51:c1:01:ce:ea: be:87:1e:39:63:af:9a:64:71:31:66:3a:42:7d:6d:2b:df:81: 21:69:78:47:3e:48:bb:39:14:a3:b9:95:c6:36:e7:bd:d8:56: aa:e5:01:5f:c1:f6:da:84:a0:0d:75:94:16:d9:c1:fc:73:fb: 4a:c0:91:27:6d:cc:ae:d6:ed:13:c4:e9:6f:7d:28:b6:d0:4d: a3:0d:c2:a3:6a:f5:84:10:49:e7:c9:00:7c:7a:5d:81:df:1f: c8:53:78:c1:f0:a5:87:34:02:e1:c1:8a:03:41:0f:f6:ea:45: b6:5b:49:ad:f3:ca:b5:a5:33:6f:65:09:16:cb:cd:62:43:a5: b2:02:d4:ee:3f:9e:a4:47:0b:55:3a:99:de:93:5c:b3:93:8a: 09:68:4c:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB OTFGRDhBODkwHhcNMjUwNjE1MDUzNjM5WhcNMjUwNjIyMDUzNjM5WjAYMRYwFAYD VQQDEw02ODRlNWJlNy1mZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcaPUtPpVX+SwzzI8QIQDuX3XhJm/2ZNbOWEaB11DNdrRCmdey/m6vujqH6g 0DUl18vMFofVbW4xLz0SQ8mGLjfZd6kH6C/PTr7yVJDvkCYMZoqW7Fv84nxbz3uo 6q2wJ4OUwU6jIPbUKRkJrCGv6c4SYrd/Hpdm/jAVDku+ZWLKOt2XbdBD+4TbIEQn iUAm/9SuiGwqiOFoWZ4j+QXtL1L0Q8kJPDVMsCe8j0WsUediitIz2gO1pN5QbO0t vbWPXUPxSurka0IV6iE5Sy41r+SFO8f2OpFBM0NNjuDNGRrv/ondDDHO34wtJ1Er 4MAEcEmWexcXVEIoo6WjpM6gOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC8FkJ9 YiZiBi5hWySsSWzN8x/cMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0 QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QxNC9DREIzQjlBQTc0QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0Ju YXluOWVyeWZnYlNwSDlpb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqZpvUCzPe9OY6p7LSq/ZkzFfHGBTrxCIx19NDPzJ+4NR/dgXboSTN g4nEJtggWtn2sHTAW/cwW2hq4UGgaFU+R+mTQ/2f3j/yKo/fYGUYaTMVWkBxJoSS 4zlRd736WqGRWRFSrGwDUcEBzuq+hx45Y6+aZHExZjpCfW0r34EhaXhHPki7ORSj uZXGNue92Faq5QFfwfbahKANdZQW2cH8c/tKwJEnbcyu1u0TxOlvfSi20E2jDcKj avWEEEnnyQB8el2B3x/IU3jB8KWHNALhwYoDQQ/26kW2W0mt88q1pTNvZQkWy81i Q6WyAtTuP56kRwtVOpnek1yzk4oJaEyR -----END CERTIFICATE-----Generated at Sun Jun 15 08:06:10 2025 by rpki-client