$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: jYMO+qOhDXp9OnRyZq4reL3oRGZDqzhklELZ46PF6+g= Subject key identifier: DF:4E:7E:69:C3:7A:45:B5:29:5B:73:79:F9:20:90:AF:0B:F5:45:6C Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1C72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 510A Signing time: Fri 18 Jul 2025 15:18:28 +0000 Manifest this update: Fri 18 Jul 2025 15:18:28 +0000 Manifest next update: Fri 25 Jul 2025 15:18:28 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: 7wiKdeaP5+PDsEhLVpDcdZokThdrY3Rj5PMGwbzNyEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7282 (0x1c72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Jul 18 15:18:28 2025 GMT Not After : Jul 25 15:18:28 2025 GMT Subject: CN=687a65c4-8367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:8b:4f:72:9a:2e:bf:92:70:a0:04:12:d4: bd:ba:fb:51:b4:e0:d9:2b:95:06:2d:27:be:e2:af: 6c:fe:7b:b5:3f:e0:54:4c:60:57:a1:d9:39:d0:b7: cd:f6:a1:8d:f4:77:7b:46:38:f4:08:7e:30:89:ea: ae:bc:f1:48:06:79:7f:dd:ac:c9:2c:16:a5:9b:b8: 64:fe:26:9b:c0:85:07:af:a2:b8:df:6d:0c:e3:e4: 62:fb:ad:91:bc:af:21:0d:75:87:fc:21:6d:5b:cc: 23:dc:ea:20:ee:81:db:7d:f9:e8:1c:b6:5a:2e:c2: ad:04:e0:06:d1:b2:7b:00:8e:6b:6f:95:f1:3a:3c: 62:22:6f:a8:89:90:e9:13:a8:5a:7c:9d:0d:1e:78: b7:8e:ac:21:7e:52:8e:43:7e:a5:4e:1b:dc:6b:59: 00:fe:99:d5:8b:90:c6:43:b8:c8:6d:f8:e5:b3:76: b3:84:de:ed:8d:40:00:14:fc:05:8f:54:c4:4e:1a: 24:4f:8c:2f:5f:ce:d9:5b:17:c4:53:61:5b:2a:be: d0:2b:b3:f1:c7:59:52:cb:59:d8:df:cc:46:b0:02: 45:2c:92:ff:20:3e:de:f2:15:44:10:b8:34:23:16: aa:f8:fb:3e:b2:97:c5:80:c5:4c:70:99:63:ab:26: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4E:7E:69:C3:7A:45:B5:29:5B:73:79:F9:20:90:AF:0B:F5:45:6C X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:46:50:0c:e7:9f:4d:7d:1f:f3:39:73:fe:14:09:63:98:ec: ae:69:44:df:0a:e4:9b:01:b0:15:a1:a0:33:20:03:b7:86:1e: 83:a4:d4:27:a3:a0:df:d0:da:49:99:ba:71:c9:e2:ae:13:b6: e2:b2:bd:e6:72:40:07:d1:35:1d:48:a8:60:f6:9b:fe:4e:77: 26:d5:5e:8e:10:c4:e7:d1:9c:06:28:d2:d9:af:fb:2c:3c:15: 3e:cd:d6:83:14:3b:e6:86:be:39:89:43:d4:70:88:92:33:ba: 86:1d:79:8c:9f:00:b7:a0:6f:d7:a4:8f:5d:2d:a6:3b:5d:a4: 8b:47:97:df:ff:98:5c:ca:39:fe:73:1f:98:f1:b0:d8:1d:b9: fd:27:1c:a9:f6:d9:48:c2:cb:e7:7f:7d:b9:83:96:1a:4a:85: d8:42:d2:1a:54:2b:4a:bd:b5:aa:bb:bb:48:4d:94:75:11:0a: 3b:a3:db:ac:e3:a8:1a:56:63:c2:90:c4:d0:d1:5b:10:2f:cc: 36:ca:52:87:e7:7b:81:c0:2a:e4:e1:27:74:55:80:78:b9:60: 26:59:6d:52:14:44:d4:1e:56:b8:f8:71:f4:5d:0a:72:01:3b: 02:5a:a3:14:a1:7a:58:6d:b2:80:8a:a0:11:6b:71:fd:26:a5: 07:b9:fe:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUwNzE4MTUxODI4WhcNMjUwNzI1MTUxODI4WjAYMRYwFAYD VQQDEw02ODdhNjVjNC04MzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpCLT3KaLr+ScKAEEtS9uvtRtODZK5UGLSe+4q9s/nu1P+BUTGBXodk50LfN 9qGN9Hd7Rjj0CH4wiequvPFIBnl/3azJLBalm7hk/iabwIUHr6K4320M4+Ri+62R vK8hDXWH/CFtW8wj3Oog7oHbffnoHLZaLsKtBOAG0bJ7AI5rb5XxOjxiIm+oiZDp E6hafJ0NHni3jqwhflKOQ36lThvca1kA/pnVi5DGQ7jIbfjls3azhN7tjUAAFPwF j1TEThokT4wvX87ZWxfEU2FbKr7QK7Pxx1lSy1nY38xGsAJFLJL/ID7e8hVEELg0 Ixaq+Ps+spfFgMVMcJljqyYZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9OfmnD ekW1KVtzefkgkK8L9UVsMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgRlAM559NfR/zOXP+FAljmOyuaUTfCuSbAbAVoaAzIAO3hh6DpNQn o6Df0NpJmbpxyeKuE7bisr3mckAH0TUdSKhg9pv+Tncm1V6OEMTn0ZwGKNLZr/ss PBU+zdaDFDvmhr45iUPUcIiSM7qGHXmMnwC3oG/XpI9dLaY7XaSLR5ff/5hcyjn+ cx+Y8bDYHbn9Jxyp9tlIwsvnf325g5YaSoXYQtIaVCtKvbWqu7tITZR1EQo7o9us 46gaVmPCkMTQ0VsQL8w2ylKH53uBwCrk4Sd0VYB4uWAmWW1SFETUHla4+HH0XQpy ATsCWqMUoXpYbbKAiqARa3H9JqUHuf4k -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:37 2025 by rpki-client