$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json) Hash identifier: 3HOa+UZ1LsHnXIG204avtTVxcT68BAjh249OE2UfNfc= Subject key identifier: 16:BF:20:7D:01:36:FD:AB:E3:4E:58:73:F1:F2:57:1C:69:D6:13:C9 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft Manifest number: 85 Signing time: Sat 31 May 2025 06:10:08 +0000 Manifest this update: Sat 31 May 2025 06:10:08 +0000 Manifest next update: Sat 07 Jun 2025 06:10:07 +0000 Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: ZfjLydfr5kx3AOcsveelkNNSvDhHTrRd1RkHLvvxMWg=) 2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: P0ja5yGMmuugrOF5BJ+3udMpfSg7jsGxtmTDuFAzbtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: May 31 06:10:08 2025 GMT Not After : Jun 7 06:10:07 2025 GMT Subject: CN=683a9d40-fe80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:6e:14:4f:8c:8b:22:19:5c:58:0e:dc:38: 59:37:ec:ea:b7:5a:1a:7a:ba:57:90:0e:3d:22:8e: 1b:de:3f:6d:29:d5:ff:29:29:7c:7c:9c:40:e7:69: ba:77:c8:29:d8:41:c6:d9:49:c0:0d:cc:32:6c:7a: 6b:f5:35:4a:05:68:a5:a6:28:e4:16:5d:01:3f:91: 5a:92:8e:1b:17:e9:3f:3a:d7:69:da:6c:2a:95:bb: 78:b4:a8:46:ba:20:60:5c:d2:e4:8b:84:3f:d5:7e: 37:ed:7f:55:68:29:58:98:b2:f8:49:ee:9c:8a:4e: 87:2f:c6:3c:d3:44:ea:56:86:0c:03:49:7a:c3:81: f4:d5:31:78:d1:49:76:b7:f6:4e:09:a9:f0:4d:b4: 55:44:60:3f:c1:6b:44:3d:e6:cc:49:c7:86:6e:b2: 8a:d6:92:ef:82:02:84:b0:7a:02:2c:10:53:d1:8b: 14:3d:cb:b5:3d:94:ad:d9:4a:cc:72:19:6d:84:6f: ce:af:3b:c8:46:25:83:72:84:43:0a:60:6c:6e:c2: 2f:87:e8:4f:0a:d0:a6:05:06:d0:c2:42:0a:cb:84: 22:cb:0c:b6:2e:0e:e9:87:f8:00:10:b3:d7:16:68: 68:0b:7e:42:06:ce:f6:ea:74:d8:3e:9e:b4:b3:76: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BF:20:7D:01:36:FD:AB:E3:4E:58:73:F1:F2:57:1C:69:D6:13:C9 X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9d:18:df:0f:1d:ee:06:55:1e:f8:4f:3b:35:42:ec:b7:65: 62:4b:f6:27:27:07:8d:21:57:e1:5a:ea:be:b6:40:b3:20:5e: 20:e0:7e:80:4a:ca:33:ec:e5:3e:80:47:91:1e:4c:19:36:b7: d8:78:4e:2c:1c:13:61:b6:2c:27:1b:ca:ad:f9:bc:2a:e9:68: 53:0f:0a:65:94:39:77:c3:29:3c:95:ef:4d:31:a2:df:92:71: f4:26:b2:f7:1c:07:69:b4:ff:28:c9:92:d8:8b:d9:58:8c:ff: 40:f3:3d:5e:00:15:8a:d1:63:93:27:ea:a5:0a:bf:63:61:ff: ac:0d:7a:5d:9d:f3:4e:7e:c4:ba:6a:fe:bf:3c:89:dd:76:c5: a1:f7:01:35:2d:3a:0d:37:da:9c:28:db:c2:bb:dc:b8:23:79: 6c:22:f3:d4:cc:a7:8a:d1:89:e2:b5:2d:c6:12:9d:22:ad:b4: 39:2c:44:cc:04:d0:33:24:4c:5e:d7:ab:8f:a9:d7:a1:76:f3: f2:19:fd:a1:73:15:d1:98:3e:15:4f:67:0e:dd:1a:cd:9b:bf: 57:77:46:08:4d:6d:84:98:47:e2:b3:d9:76:64:62:e5:0d:7d: a8:ca:1a:a8:35:46:f7:2f:a4:f1:94:8a:e4:a4:6c:b7:05:c7: 01:9f:79:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB OTFGRDhBODkwHhcNMjUwNTMxMDYxMDA4WhcNMjUwNjA3MDYxMDA3WjAYMRYwFAYD VQQDEw02ODNhOWQ0MC1mZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWJuFE+MiyIZXFgO3DhZN+zqt1oaerpXkA49Io4b3j9tKdX/KSl8fJxA52m6 d8gp2EHG2UnADcwybHpr9TVKBWilpijkFl0BP5Fako4bF+k/Otdp2mwqlbt4tKhG uiBgXNLki4Q/1X437X9VaClYmLL4Se6cik6HL8Y800TqVoYMA0l6w4H01TF40Ul2 t/ZOCanwTbRVRGA/wWtEPebMSceGbrKK1pLvggKEsHoCLBBT0YsUPcu1PZSt2UrM chlthG/OrzvIRiWDcoRDCmBsbsIvh+hPCtCmBQbQwkIKy4Qiywy2Lg7ph/gAELPX FmhoC35CBs726nTYPp60s3YerQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBa/IH0B Nv2r405Yc/HyVxxp1hPJMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0 QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QxNC9DREIzQjlBQTc0QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0Ju YXluOWVyeWZnYlNwSDlpb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNnRjfDx3uBlUe+E87NULst2ViS/YnJweNIVfhWuq+tkCzIF4g4H6A Ssoz7OU+gEeRHkwZNrfYeE4sHBNhtiwnG8qt+bwq6WhTDwpllDl3wyk8le9NMaLf knH0JrL3HAdptP8oyZLYi9lYjP9A8z1eABWK0WOTJ+qlCr9jYf+sDXpdnfNOfsS6 av6/PInddsWh9wE1LToNN9qcKNvCu9y4I3lsIvPUzKeK0YnitS3GEp0irbQ5LETM BNAzJExe16uPqdehdvPyGf2hcxXRmD4VT2cO3RrNm79Xd0YITW2EmEfis9l2ZGLl DX2oyhqoNUb3L6TxlIrkpGy3BccBn3mS -----END CERTIFICATE-----Generated at Sat May 31 16:53:47 2025 by rpki-client