$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json) Hash identifier: EbCem6saouNBJNWPA7rb3yk8Fo0p7vE1OkY5x+EpeVY= Subject key identifier: F1:DF:5D:EB:84:43:9B:56:DE:9C:FF:96:03:9D:9E:14:E3:53:5C:19 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft Manifest number: A8 Signing time: Thu 07 Aug 2025 06:45:06 +0000 Manifest this update: Thu 07 Aug 2025 06:45:05 +0000 Manifest next update: Thu 14 Aug 2025 06:45:05 +0000 Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: WYtfvYAAszvcHd9XeUZMJCOHS0bN8MJ+W7k/QshLay0=) 2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: P0ja5yGMmuugrOF5BJ+3udMpfSg7jsGxtmTDuFAzbtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Aug 7 06:45:05 2025 GMT Not After : Aug 14 06:45:05 2025 GMT Subject: CN=68944b72-e9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:fb:d7:3e:dc:4e:03:73:4c:2f:7f:f9:6b: 4b:ac:7b:a1:09:0a:b8:97:0e:5f:32:17:9e:69:63: a1:59:24:c7:2f:98:df:6c:2d:b9:8f:28:b3:16:a2: 9d:6d:76:af:c5:58:5e:64:aa:aa:f1:a4:78:e2:b1: 18:4c:ef:ee:27:40:d3:76:69:cf:78:08:42:f8:52: 84:8e:4d:bf:0a:c8:1a:05:a9:33:8d:b0:a9:ab:01: 83:ce:5a:4c:3a:eb:f3:f4:33:09:33:da:ed:1c:7c: c3:da:87:b1:dd:84:e2:b6:47:e4:66:d1:15:cc:9e: 69:1d:16:7e:4f:f1:71:f7:ef:70:4b:61:26:75:45: 8d:fc:67:9b:0d:63:e1:0a:8e:8c:06:a1:ea:c6:1a: 72:77:ff:63:b0:f8:f0:5f:5d:9f:da:36:ce:b5:bf: be:69:e2:f6:93:80:11:ba:29:3b:06:0a:51:4f:15: 58:7a:92:f4:27:a3:3a:cb:75:a6:c8:cb:dc:29:f4: 8d:49:10:76:5e:c6:0c:29:cc:f7:c8:cb:c8:1e:4d: 50:22:23:44:d4:8c:49:74:49:48:7b:2a:da:c6:39: 8c:6e:89:d5:95:76:01:10:2f:5b:2e:fd:c2:e6:d7: 6a:60:af:60:dd:09:44:c6:29:9b:0c:eb:f5:dd:9b: cd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:5D:EB:84:43:9B:56:DE:9C:FF:96:03:9D:9E:14:E3:53:5C:19 X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:39:18:28:69:49:01:c8:75:f3:f8:21:ed:e6:53:86:55:72: 22:0d:66:b5:13:06:8d:33:1e:b7:b0:be:7b:bb:59:08:a3:31: d8:0f:64:4d:3b:1d:bb:c8:a0:29:79:f6:01:fb:0f:0d:84:43: 1c:de:c5:e1:92:24:8e:5a:e6:64:98:a5:23:55:17:29:04:cf: 2c:2a:ed:4a:0b:8d:14:0f:10:48:63:d7:de:95:3a:4d:07:0e: f5:cc:6f:44:4b:cc:d5:f3:93:86:21:53:93:92:9b:7b:76:42: 4b:c5:70:cc:38:93:60:9b:42:5b:ee:cb:dc:25:1d:35:93:e7: 76:d3:b4:97:ae:d1:0d:e4:ab:72:6f:62:97:07:2d:b5:55:26: f7:09:00:b1:76:90:3f:2d:b1:f9:ec:ce:41:bc:fc:59:1a:cd: db:7f:80:b4:4c:ec:6a:25:2b:4a:14:b0:2a:fc:ff:cb:4d:76: 21:25:02:c2:61:a8:17:69:e0:1f:7f:cf:8a:07:63:0f:4b:15: eb:e6:b6:58:06:ac:6b:a4:7c:14:8b:47:87:35:db:27:b5:e0: ab:ab:d0:7c:c2:4e:0a:0f:f5:6c:a3:92:d5:c6:48:84:69:bc: ce:7a:2b:a6:d3:c6:c1:6e:0c:77:6e:f1:4d:6c:20:b9:68:ab: 26:54:a8:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB OTFGRDhBODkwHhcNMjUwODA3MDY0NTA1WhcNMjUwODE0MDY0NTA1WjAYMRYwFAYD VQQDEw02ODk0NGI3Mi1lOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBj71z7cTgNzTC9/+WtLrHuhCQq4lw5fMheeaWOhWSTHL5jfbC25jyizFqKd bXavxVheZKqq8aR44rEYTO/uJ0DTdmnPeAhC+FKEjk2/CsgaBakzjbCpqwGDzlpM Ouvz9DMJM9rtHHzD2oex3YTitkfkZtEVzJ5pHRZ+T/Fx9+9wS2EmdUWN/GebDWPh Co6MBqHqxhpyd/9jsPjwX12f2jbOtb++aeL2k4ARuik7BgpRTxVYepL0J6M6y3Wm yMvcKfSNSRB2XsYMKcz3yMvIHk1QIiNE1IxJdElIeyraxjmMbonVlXYBEC9bLv3C 5tdqYK9g3QlEximbDOv13ZvNCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHfXeuE Q5tW3pz/lgOdnhTjU1wZMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0 QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QxNC9DREIzQjlBQTc0QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0Ju YXluOWVyeWZnYlNwSDlpb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdORgoaUkByHXz+CHt5lOGVXIiDWa1EwaNMx63sL57u1kIozHYD2RN Ox27yKApefYB+w8NhEMc3sXhkiSOWuZkmKUjVRcpBM8sKu1KC40UDxBIY9felTpN Bw71zG9ES8zV85OGIVOTkpt7dkJLxXDMOJNgm0Jb7svcJR01k+d207SXrtEN5Kty b2KXBy21VSb3CQCxdpA/LbH57M5BvPxZGs3bf4C0TOxqJStKFLAq/P/LTXYhJQLC YagXaeAff8+KB2MPSxXr5rZYBqxrpHwUi0eHNdsnteCrq9B8wk4KD/Vso5LVxkiE abzOeium08bBbgx3bvFNbCC5aKsmVKjE -----END CERTIFICATE-----Generated at Sat Aug 9 02:47:19 2025 by rpki-client