$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: HJHmyqbNBNrSYRLTJpi2YgTMkMftEleXvdTDGIKHM2o= Subject key identifier: A4:ED:3A:58:31:D7:AE:68:98:F5:B8:76:D2:41:30:51:6C:35:1F:0C Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 50DA Signing time: Sat 31 May 2025 15:15:21 +0000 Manifest this update: Sat 31 May 2025 15:15:20 +0000 Manifest next update: Sat 07 Jun 2025 15:15:20 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: RWPLJJrYplc1jZs58NSYLztKZbPBCFcMWdOJDs8vnn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7258 (0x1c5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: May 31 15:15:20 2025 GMT Not After : Jun 7 15:15:20 2025 GMT Subject: CN=683b1d08-7e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:8e:f7:e9:47:74:dc:67:7b:71:c9:06:e4: 7c:2f:3f:06:0f:09:8b:8e:02:7f:8c:6d:7f:64:9b: ad:55:d7:83:7a:1a:c2:c1:10:eb:0b:02:e2:69:5e: 8e:32:f7:4b:f0:e7:b3:9e:c0:09:fb:3d:19:62:fd: 44:42:9f:36:21:6c:a2:94:a4:77:15:1a:05:07:5c: 93:7c:9b:d2:fd:a7:ca:0b:32:bd:fa:17:a5:76:2c: 68:35:30:51:cb:5a:78:65:47:24:40:16:27:f1:8e: f8:5f:31:5d:24:f7:cb:4b:dc:95:9b:40:1c:b5:17: b8:4a:08:bb:28:0b:60:ec:41:4d:62:d1:dc:f5:24: aa:a7:65:2a:4d:27:d9:45:18:e0:51:ef:25:14:00: f9:b6:3b:fc:f1:78:33:e8:81:78:56:ee:a1:d6:c0: ac:a8:60:45:45:ec:54:80:73:49:71:36:28:3d:55: 9b:67:78:7c:12:a1:de:49:ff:a5:6c:74:7d:4d:a8: d7:a9:17:c6:24:6c:7e:2c:6c:f4:c6:f8:3c:2c:0c: 52:68:43:3a:f2:e5:de:64:ec:14:61:e1:fa:c6:f2: bf:45:3b:86:c3:83:8e:30:bd:f3:65:40:6b:46:7e: b1:d0:4d:f1:16:b3:ad:ec:d8:3d:3f:48:b4:c4:50: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:3A:58:31:D7:AE:68:98:F5:B8:76:D2:41:30:51:6C:35:1F:0C X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7f:a2:be:3d:cb:8e:67:95:e4:ab:0c:b1:9b:bd:a9:10:b9: 8b:54:95:20:01:08:f0:b0:06:13:f5:d7:f2:19:93:ee:e0:06: 32:71:77:bb:a3:d5:f0:fb:d3:cb:33:8a:04:9c:93:fe:ca:29: 4b:65:85:55:a4:93:dd:bd:80:e7:60:5b:c8:fc:7d:34:6e:e2: cf:11:67:a0:e5:72:66:b4:83:9c:df:e1:f4:b9:59:7a:af:88: be:3d:d3:83:ec:b3:79:be:d6:91:6a:42:c4:ee:11:7a:f0:9d: dd:29:06:1b:fc:aa:36:7c:4e:1e:d4:8e:8f:9d:84:a2:b5:c5: 3a:0c:e9:c9:95:f9:72:44:9c:b2:4d:7e:84:31:6c:8d:5e:6a: a2:98:5a:a4:86:d8:c1:2d:0c:4d:e3:ad:29:c4:68:34:db:af: b8:30:b3:42:51:b2:0f:bb:6f:af:0b:5f:f1:56:09:be:16:06: b3:04:60:f7:fb:a6:76:56:f6:39:83:1f:ae:6e:c1:39:1b:16: a2:aa:3b:b5:34:1a:86:1d:a7:c9:db:80:fd:9e:b8:d2:e8:8c: 8d:46:7a:49:07:6c:9f:f0:4d:20:6b:bd:df:74:15:4a:3d:fe: 55:40:bb:12:12:20:77:e0:0e:fd:05:a7:ec:01:60:bc:04:e1: e0:4c:e0:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUwNTMxMTUxNTIwWhcNMjUwNjA3MTUxNTIwWjAYMRYwFAYD VQQDEw02ODNiMWQwOC03ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JSO9+lHdNxne3HJBuR8Lz8GDwmLjgJ/jG1/ZJutVdeDehrCwRDrCwLiaV6O MvdL8OeznsAJ+z0ZYv1EQp82IWyilKR3FRoFB1yTfJvS/afKCzK9+heldixoNTBR y1p4ZUckQBYn8Y74XzFdJPfLS9yVm0ActRe4Sgi7KAtg7EFNYtHc9SSqp2UqTSfZ RRjgUe8lFAD5tjv88Xgz6IF4Vu6h1sCsqGBFRexUgHNJcTYoPVWbZ3h8EqHeSf+l bHR9TajXqRfGJGx+LGz0xvg8LAxSaEM68uXeZOwUYeH6xvK/RTuGw4OOML3zZUBr Rn6x0E3xFrOt7Ng9P0i0xFDmEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTtOlgx 165omPW4dtJBMFFsNR8MMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgf6K+PcuOZ5Xkqwyxm72pELmLVJUgAQjwsAYT9dfyGZPu4AYycXe7 o9Xw+9PLM4oEnJP+yilLZYVVpJPdvYDnYFvI/H00buLPEWeg5XJmtIOc3+H0uVl6 r4i+PdOD7LN5vtaRakLE7hF68J3dKQYb/Ko2fE4e1I6PnYSitcU6DOnJlflyRJyy TX6EMWyNXmqimFqkhtjBLQxN460pxGg026+4MLNCUbIPu2+vC1/xVgm+FgazBGD3 +6Z2VvY5gx+ubsE5Gxaiqju1NBqGHafJ24D9nrjS6IyNRnpJB2yf8E0ga73fdBVK Pf5VQLsSEiB34A79BafsAWC8BOHgTODv -----END CERTIFICATE-----Generated at Sat May 31 16:38:52 2025 by rpki-client