$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: FqY2rZOpnjyERHZW+3QaMKZLg0uEZlsl7PdjU9yLdYY= Subject key identifier: 6D:2E:24:02:F1:E0:52:00:32:CD:16:5A:BC:D8:A3:71:7A:A9:1D:B2 Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 517A Signing time: Sun 02 Nov 2025 15:16:15 +0000 Manifest this update: Sun 02 Nov 2025 15:16:15 +0000 Manifest next update: Sun 09 Nov 2025 15:16:15 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: XpF+UZ2S6w/gyd1ZdBsg96x504ElkDFVNYp4nFCdnD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7338 (0x1caa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Nov 2 15:16:15 2025 GMT Not After : Nov 9 15:16:15 2025 GMT Subject: CN=690775bf-7112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:ed:ea:48:90:e6:1a:1a:55:3b:a3:a2:9f: fb:ae:43:e6:8d:16:6f:82:0c:89:9e:ee:43:63:39: 0f:d2:29:c4:00:96:63:97:e4:4b:53:9d:43:3e:b3: 6c:b2:46:c4:14:c5:53:10:19:d2:87:f9:4f:d8:75: b7:13:08:37:c8:a0:89:44:63:0e:9b:a3:a4:5f:55: 3c:58:68:29:22:5e:e3:6a:6b:67:91:08:46:5a:f3: f7:26:41:25:39:9f:d3:d6:89:a1:cc:54:ae:03:a6: 11:0e:d3:2c:9f:34:ce:d5:e9:98:ac:0c:a8:90:ff: 87:e4:5a:8c:ff:1c:65:77:d9:31:c5:1b:ab:bc:8c: 67:46:31:b7:0f:32:05:8d:02:83:94:e1:2d:fd:d1: 7f:bc:17:78:c3:c1:d8:70:c7:70:bc:4a:ce:85:fc: b8:48:1a:a1:d7:be:c2:d5:59:b5:83:68:1e:80:c2: c7:87:b4:ef:37:40:19:81:63:ed:ae:fe:af:d3:ea: 7d:74:fc:b4:d1:9e:ed:f7:15:6a:cd:46:51:4d:99: 7d:ac:30:6f:44:cd:14:fe:d9:12:71:df:09:8c:e9: 15:4b:cd:7b:b4:23:9f:ee:1d:2c:5c:d3:05:ac:08: 7b:cb:7e:91:d2:e0:eb:37:c7:6e:1c:fa:14:14:df: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2E:24:02:F1:E0:52:00:32:CD:16:5A:BC:D8:A3:71:7A:A9:1D:B2 X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d9:02:4b:e8:fa:5a:22:af:a8:6a:26:5e:61:8c:7e:52:18: db:65:ff:f1:39:86:14:fd:ce:71:0e:21:e1:dd:40:7c:c1:73: 9a:3d:b3:7f:21:cb:a7:36:bc:a9:9e:b8:6c:19:81:6b:6a:d3: 50:3e:19:b7:72:fd:18:b4:cd:f2:88:33:10:7b:e0:02:34:88: 4a:68:24:d5:05:1b:25:49:6c:f6:9e:9d:9a:d2:14:ef:76:df: f9:d7:9b:e3:72:0a:5d:43:d3:ad:9c:a7:9b:89:07:f1:51:e2: 00:a0:13:8d:8d:5e:94:14:cf:7e:d8:68:1b:46:c0:ff:b7:e0: 16:6f:99:a9:d3:0a:1e:f1:55:a5:e4:26:7b:05:ec:e0:0e:e1: 20:f6:ee:ca:d2:ce:52:f2:5c:95:fd:94:e1:05:69:34:dd:51: dd:0e:71:e6:57:6e:c0:78:3f:1b:dd:10:b4:d5:15:f7:fb:31: 5f:59:9c:f2:c0:78:bd:43:da:83:1e:16:a6:f2:8c:2f:0b:35: 95:ac:4a:e5:87:31:18:5e:2c:a7:1c:f6:1b:04:46:4c:dc:a9: 5e:50:7b:fe:e8:e5:2a:e4:f1:81:be:0f:47:50:28:1e:ea:b1: f7:ba:07:9c:12:55:55:bb:92:07:86:04:d7:69:dd:d8:b2:56: 18:b6:23:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUxMTAyMTUxNjE1WhcNMjUxMTA5MTUxNjE1WjAYMRYwFAYD VQQDEw02OTA3NzViZi03MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Krt6kiQ5hoaVTujop/7rkPmjRZvggyJnu5DYzkP0inEAJZjl+RLU51DPrNs skbEFMVTEBnSh/lP2HW3Ewg3yKCJRGMOm6OkX1U8WGgpIl7jamtnkQhGWvP3JkEl OZ/T1omhzFSuA6YRDtMsnzTO1emYrAyokP+H5FqM/xxld9kxxRurvIxnRjG3DzIF jQKDlOEt/dF/vBd4w8HYcMdwvErOhfy4SBqh177C1Vm1g2gegMLHh7TvN0AZgWPt rv6v0+p9dPy00Z7t9xVqzUZRTZl9rDBvRM0U/tkScd8JjOkVS817tCOf7h0sXNMF rAh7y36R0uDrN8duHPoUFN9gXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0uJALx 4FIAMs0WWrzYo3F6qR2yMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF2QJL6PpaIq+oaiZeYYx+UhjbZf/xOYYU/c5xDiHh3UB8wXOaPbN/ IcunNrypnrhsGYFratNQPhm3cv0YtM3yiDMQe+ACNIhKaCTVBRslSWz2np2a0hTv dt/515vjcgpdQ9OtnKebiQfxUeIAoBONjV6UFM9+2GgbRsD/t+AWb5mp0woe8VWl 5CZ7BezgDuEg9u7K0s5S8lyV/ZThBWk03VHdDnHmV27AeD8b3RC01RX3+zFfWZzy wHi9Q9qDHham8owvCzWVrErlhzEYXiynHPYbBEZM3KleUHv+6OUq5PGBvg9HUCge 6rH3ugecElVVu5IHhgTXad3YslYYtiOj -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:17 2025 by rpki-client