$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: BwNtPP8lONy7pkLJ0m1aSnPWS0ZIxbSUnF0PLLY9/l4= Subject key identifier: 4A:91:99:DB:A3:F6:54:C6:F5:23:59:07:2A:28:71:B6:F5:8D:5E:A5 Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 50EA Signing time: Mon 16 Jun 2025 15:18:18 +0000 Manifest this update: Mon 16 Jun 2025 15:18:18 +0000 Manifest next update: Mon 23 Jun 2025 15:18:18 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: XcqUEYdFRzm6fTggts9uMGEGYD486AmNiTZZ0zb0b4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7266 (0x1c62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Jun 16 15:18:18 2025 GMT Not After : Jun 23 15:18:18 2025 GMT Subject: CN=685035ba-ae2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:9f:d8:22:f9:66:f0:70:5d:4a:ea:76:4e: f7:35:19:ce:7d:d2:25:ee:43:1a:fe:26:2e:b2:fb: b6:5c:99:f4:de:9a:fd:17:54:7e:98:c5:42:05:80: 08:52:f6:de:d8:ea:91:76:af:28:05:92:2f:e8:3a: c5:08:d8:89:ad:ff:a4:37:5c:3f:b2:ab:18:6d:bc: b6:f0:e5:88:94:a7:c5:a7:52:8d:24:93:f3:3a:34: b9:eb:ec:82:39:47:81:dc:52:62:b6:03:9e:79:81: e0:4a:21:3d:9b:35:4d:31:fe:8e:08:4c:bf:2e:4c: c5:3a:47:66:af:35:d8:f6:b1:78:3e:fe:78:12:c9: bf:88:e3:79:58:fc:38:95:e5:a3:a7:9c:36:a2:02: 18:9a:a4:40:d1:13:bb:27:0d:9a:47:a0:6b:00:c4: 76:09:81:b2:d2:03:d0:b3:85:fe:88:47:6c:6a:ce: 75:bf:b7:a8:83:c2:36:0c:a6:c5:36:7d:d6:c0:28: 4e:84:eb:9b:81:64:2c:80:ef:29:ef:81:4c:04:69: c3:fc:18:0c:34:39:2a:70:31:73:69:7e:68:1d:d8: 74:da:15:fc:c3:3d:7d:72:83:55:c0:24:96:f5:b9: 05:ff:b5:a7:68:65:36:0d:1d:06:8c:b8:0b:d2:cf: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:91:99:DB:A3:F6:54:C6:F5:23:59:07:2A:28:71:B6:F5:8D:5E:A5 X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:51:c2:81:fc:8a:e6:44:ee:69:ae:3d:5c:3a:9e:ab:97:4d: da:e5:c3:0a:d7:b0:6e:99:b1:e3:b3:33:15:50:d9:06:9d:26: 07:95:bc:f0:f8:88:15:16:51:07:bf:bb:71:75:4f:02:3a:fd: 23:20:65:aa:25:0f:30:e1:3b:0d:2f:8c:ac:fd:d0:30:49:46: 90:8a:45:a4:ba:05:9a:cc:e4:f4:56:fe:73:79:e2:44:50:65: 16:ac:59:c1:cd:32:a9:5c:7b:a7:36:f9:8b:b0:09:48:5e:cc: c4:f6:07:59:bc:b4:1d:08:75:1c:8f:7f:1b:6b:76:cd:11:26: ae:8f:e9:c0:a3:f3:f8:2b:e5:74:ba:13:13:9c:2d:f8:8b:88: 18:cc:d8:b3:55:c1:38:76:46:a5:0e:03:0e:48:99:0a:54:0d: 18:74:ac:8e:b8:06:bb:9b:c1:27:e8:8c:1b:f0:b4:43:db:6b: a9:30:36:77:a1:a3:f4:21:41:91:94:f1:f3:fc:4a:c3:e7:d9: 1f:df:97:b3:5c:e1:6c:9d:63:5e:bb:57:20:5e:d3:de:5f:0c: 77:be:f5:a3:44:53:85:c5:a1:23:d4:88:ab:30:33:25:6a:15: cf:96:8e:76:72:bd:86:dd:7d:1b:09:17:bf:04:b7:a9:45:e8: ce:61:23:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUwNjE2MTUxODE4WhcNMjUwNjIzMTUxODE4WjAYMRYwFAYD VQQDEw02ODUwMzViYS1hZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WKf2CL5ZvBwXUrqdk73NRnOfdIl7kMa/iYusvu2XJn03pr9F1R+mMVCBYAI Uvbe2OqRdq8oBZIv6DrFCNiJrf+kN1w/sqsYbby28OWIlKfFp1KNJJPzOjS56+yC OUeB3FJitgOeeYHgSiE9mzVNMf6OCEy/LkzFOkdmrzXY9rF4Pv54Esm/iON5WPw4 leWjp5w2ogIYmqRA0RO7Jw2aR6BrAMR2CYGy0gPQs4X+iEdsas51v7eog8I2DKbF Nn3WwChOhOubgWQsgO8p74FMBGnD/BgMNDkqcDFzaX5oHdh02hX8wz19coNVwCSW 9bkF/7WnaGU2DR0GjLgL0s9HjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqRmduj 9lTG9SNZByoocbb1jV6lMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUcKB/IrmRO5prj1cOp6rl03a5cMK17BumbHjszMVUNkGnSYHlbzw +IgVFlEHv7txdU8COv0jIGWqJQ8w4TsNL4ys/dAwSUaQikWkugWazOT0Vv5zeeJE UGUWrFnBzTKpXHunNvmLsAlIXszE9gdZvLQdCHUcj38ba3bNESauj+nAo/P4K+V0 uhMTnC34i4gYzNizVcE4dkalDgMOSJkKVA0YdKyOuAa7m8En6Iwb8LRD22upMDZ3 oaP0IUGRlPHz/ErD59kf35ezXOFsnWNeu1cgXtPeXwx3vvWjRFOFxaEj1IirMDMl ahXPlo52cr2G3X0bCRe/BLepRejOYSN3 -----END CERTIFICATE-----Generated at Mon Jun 16 23:59:14 2025 by rpki-client