$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: c8ghtRjWp28NCZoHaX8tWSB61J9rIp3am1z9JMbasjo= Subject key identifier: 99:43:BC:E8:B3:6E:A2:60:AF:53:17:56:11:3F:97:70:56:B5:4E:2E Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 50B4 Signing time: Thu 24 Apr 2025 15:15:53 +0000 Manifest this update: Thu 24 Apr 2025 15:15:52 +0000 Manifest next update: Thu 01 May 2025 15:15:52 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: hsiwOTpPrdIjJyJSIrJqUoIDsi/S5VxkU4/JusuSOx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7239 (0x1c47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Apr 24 15:15:52 2025 GMT Not After : May 1 15:15:52 2025 GMT Subject: CN=680a55a8-1fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:9f:e6:5c:56:8e:99:50:4b:72:54:3f:74: 14:ff:a3:3f:b2:f6:0a:b7:75:27:aa:4b:24:0d:00: 72:60:81:44:6d:9e:b7:1f:e6:31:8b:aa:f9:5e:79: 56:e7:c3:f8:bc:96:ef:4f:3d:bc:51:7e:20:f9:4c: af:5e:a5:69:68:37:76:4d:1d:3d:4b:51:f9:0d:c9: 2c:4d:5c:e5:8c:f7:fe:72:16:01:ec:c1:c2:52:16: d6:d7:4c:58:b2:32:8c:f1:94:3f:d9:63:c9:a1:73: 36:4c:51:0e:1b:fe:65:cd:3c:80:d9:0f:ef:81:e8: cf:f7:12:94:d7:b4:c9:dd:8e:c5:56:ef:59:3d:f7: 9b:f4:0f:8e:f6:17:de:ad:d4:e6:9c:a6:5f:e0:26: ab:25:ed:b5:f9:c0:3f:f4:88:6a:2b:cf:4c:36:b0: 67:ee:21:e7:ab:5a:fb:8e:72:a7:2f:1c:28:e7:0f: a4:00:10:63:cc:ae:d4:18:0e:68:6d:47:5a:c4:ff: c4:b9:56:6c:bb:54:92:d5:a0:4b:9f:56:dd:00:14: 7c:2e:c2:09:7c:6c:69:0b:a3:0e:a8:4c:d8:ef:ce: 73:65:40:c9:78:35:1a:d8:ac:78:28:a5:4c:4e:55: a7:a3:fd:5d:1b:e5:d8:a9:34:2a:c1:6a:f3:2b:93: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:43:BC:E8:B3:6E:A2:60:AF:53:17:56:11:3F:97:70:56:B5:4E:2E X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:18:3f:36:3f:60:ef:f3:ed:fa:5a:b0:d6:79:eb:8e:9b:49: 92:71:a5:35:e3:47:d7:30:a9:81:f6:28:a7:f6:d8:c4:2d:b7: dc:d4:32:61:e4:35:f9:93:5b:d9:b2:fa:bd:cc:23:d9:64:d7: 43:c0:5e:91:08:07:fb:7e:92:4b:33:f9:26:61:81:a9:3b:86: cf:ff:97:65:b0:ce:06:ff:b0:34:89:e3:b5:48:b7:a3:7f:31: 41:db:d4:24:19:3f:5b:ac:53:cf:18:57:84:25:a8:5c:c0:b7: 9c:45:67:14:55:d9:1f:36:d7:12:bb:1c:94:aa:91:38:18:62: b7:ae:3d:f0:18:94:e7:6d:fd:7f:75:2a:ce:82:20:65:6b:74: a0:8a:92:41:ce:c3:cf:06:ce:6f:f9:dd:99:1a:d0:11:4f:86: f9:65:4c:db:d0:8a:d8:bd:fd:cd:16:7a:61:4d:b1:48:e2:93: 85:6d:bd:09:8d:25:3c:f9:be:d4:9e:fb:e2:16:fe:9e:af:0a: 1f:27:d5:c7:c9:14:d3:f2:95:1f:f7:d6:45:40:86:34:f2:26: cb:5a:00:50:a7:67:b1:07:ca:ed:18:af:ef:10:29:8e:e6:e8: 0d:fd:1a:45:7d:e7:a8:b9:4c:b3:8f:78:3d:46:ae:98:75:3c: 4e:fc:a7:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUwNDI0MTUxNTUyWhcNMjUwNTAxMTUxNTUyWjAYMRYwFAYD VQQDEw02ODBhNTVhOC0xZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNSf5lxWjplQS3JUP3QU/6M/svYKt3UnqkskDQByYIFEbZ63H+Yxi6r5XnlW 58P4vJbvTz28UX4g+UyvXqVpaDd2TR09S1H5DcksTVzljPf+chYB7MHCUhbW10xY sjKM8ZQ/2WPJoXM2TFEOG/5lzTyA2Q/vgejP9xKU17TJ3Y7FVu9ZPfeb9A+O9hfe rdTmnKZf4CarJe21+cA/9IhqK89MNrBn7iHnq1r7jnKnLxwo5w+kABBjzK7UGA5o bUdaxP/EuVZsu1SS1aBLn1bdABR8LsIJfGxpC6MOqEzY785zZUDJeDUa2Kx4KKVM TlWno/1dG+XYqTQqwWrzK5Mj7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlDvOiz bqJgr1MXVhE/l3BWtU4uMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5GD82P2Dv8+36WrDWeeuOm0mScaU140fXMKmB9iin9tjELbfc1DJh 5DX5k1vZsvq9zCPZZNdDwF6RCAf7fpJLM/kmYYGpO4bP/5dlsM4G/7A0ieO1SLej fzFB29QkGT9brFPPGFeEJahcwLecRWcUVdkfNtcSuxyUqpE4GGK3rj3wGJTnbf1/ dSrOgiBla3SgipJBzsPPBs5v+d2ZGtART4b5ZUzb0IrYvf3NFnphTbFI4pOFbb0J jSU8+b7UnvviFv6erwofJ9XHyRTT8pUf99ZFQIY08ibLWgBQp2exB8rtGK/vECmO 5ugN/RpFfeeouUyzj3g9Rq6YdTxO/KdJ -----END CERTIFICATE-----Generated at Sat Apr 26 08:00:22 2025 by rpki-client