$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: fq70n95gAEVswPUwFtV8ZocAQT17M1IPvN5gA9UzytY= Subject key identifier: 99:DE:2F:60:6F:D4:05:7D:B1:80:2A:44:3B:1B:DD:DE:37:28:8C:CB Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 517E Signing time: Thu 06 Nov 2025 15:02:23 +0000 Manifest this update: Thu 06 Nov 2025 15:02:22 +0000 Manifest next update: Thu 13 Nov 2025 15:02:22 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: kQcaqM3fk+36Dw1HaJcngDYZHAY1PAaKXtq1J0DTvIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 15:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7340 (0x1cac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Nov 6 15:02:22 2025 GMT Not After : Nov 13 15:02:22 2025 GMT Subject: CN=690cb87e-fd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:eb:9e:fe:d7:49:b9:b1:f6:71:b5:24:ae: 3d:1a:81:92:56:7f:45:36:46:e9:77:20:d8:6f:b2: 44:73:3c:1d:cb:29:d4:ed:90:88:c0:39:80:75:1c: 29:5b:f5:71:12:66:70:de:af:9f:71:92:f8:8b:94: db:f4:f4:60:5b:7a:b6:8c:82:81:bd:7a:a8:a0:d5: 95:77:d3:db:8c:48:ad:31:7a:ce:17:ee:6a:18:aa: eb:9b:f2:ca:50:77:7f:90:77:7c:05:12:46:60:aa: bb:10:f7:76:87:9f:0e:05:be:93:5b:23:fc:a4:cb: 8a:f4:09:ee:25:81:2a:74:3f:9f:1c:01:cc:c3:10: 18:9d:c9:a6:b2:66:8b:53:9c:42:c2:3a:55:33:f0: 9a:d0:79:c7:8d:be:85:d8:3f:61:04:de:59:37:70: d9:07:77:1d:ea:e9:f4:71:a6:ed:29:2b:3d:90:ad: d3:24:ba:db:b4:ff:02:d8:9c:46:9e:56:af:b3:52: 2b:3b:58:5e:a2:83:63:5d:63:f3:af:b3:cf:ca:98: f3:4d:37:df:8d:0e:52:5c:3e:30:9e:5d:37:ff:37: d1:e0:41:7a:b9:12:26:e9:3f:c6:bd:a5:95:7d:84: d9:54:5c:5f:90:59:78:f2:a2:73:e2:98:e2:3a:91: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DE:2F:60:6F:D4:05:7D:B1:80:2A:44:3B:1B:DD:DE:37:28:8C:CB X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:90:a0:f1:34:7c:be:f6:49:d9:9c:cc:f6:aa:19:f8:d0:b1: 7c:c6:ea:69:93:63:be:83:e1:bd:c6:1f:0d:f5:5a:02:bb:be: 5b:a0:e5:df:0a:4b:10:f5:22:ea:ee:57:2a:40:65:03:a9:e7: ce:2e:16:e5:d4:2f:cf:aa:ef:82:4d:42:7f:5b:51:60:5a:33: e7:3b:60:f3:58:6c:fa:6e:3c:e6:97:b7:16:a6:ad:92:b9:7d: 2b:35:f3:30:a2:00:a4:0a:b4:41:3d:6c:79:6d:71:62:fa:9e: 94:b5:af:fe:b3:75:6b:59:18:73:d6:b8:b2:a9:41:f6:3f:e4: dc:b4:87:56:19:de:9e:9b:36:4f:13:b1:47:af:02:36:c3:81: c2:e9:11:e6:39:45:47:9d:56:da:73:ad:ea:c4:b7:a4:a6:16: 68:ff:eb:34:a6:56:ce:3e:d1:d7:46:fb:72:68:55:42:1e:ae: d9:05:5f:19:3a:4f:33:1f:c8:74:3d:95:e6:ce:9b:15:fb:2b: fc:6e:f4:1f:e5:68:02:66:b2:10:1f:bf:a9:d1:84:09:96:3b: 58:b8:6f:7b:f9:40:5c:a7:97:2b:0a:fa:d5:17:7d:db:88:46: 8d:91:08:08:ec:a3:cf:ca:82:d0:7a:9b:87:03:bc:6f:d6:47: a2:a8:85:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUxMTA2MTUwMjIyWhcNMjUxMTEzMTUwMjIyWjAYMRYwFAYD VQQDEw02OTBjYjg3ZS1mZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJrrnv7XSbmx9nG1JK49GoGSVn9FNkbpdyDYb7JEczwdyynU7ZCIwDmAdRwp W/VxEmZw3q+fcZL4i5Tb9PRgW3q2jIKBvXqooNWVd9PbjEitMXrOF+5qGKrrm/LK UHd/kHd8BRJGYKq7EPd2h58OBb6TWyP8pMuK9AnuJYEqdD+fHAHMwxAYncmmsmaL U5xCwjpVM/Ca0HnHjb6F2D9hBN5ZN3DZB3cd6un0cabtKSs9kK3TJLrbtP8C2JxG nlavs1IrO1heooNjXWPzr7PPypjzTTffjQ5SXD4wnl03/zfR4EF6uRIm6T/GvaWV fYTZVFxfkFl48qJz4pjiOpEwpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJneL2Bv 1AV9sYAqRDsb3d43KIzLMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBakKDxNHy+9knZnMz2qhn40LF8xuppk2O+g+G9xh8N9VoCu75boOXf CksQ9SLq7lcqQGUDqefOLhbl1C/Pqu+CTUJ/W1FgWjPnO2DzWGz6bjzml7cWpq2S uX0rNfMwogCkCrRBPWx5bXFi+p6Uta/+s3VrWRhz1riyqUH2P+TctIdWGd6emzZP E7FHrwI2w4HC6RHmOUVHnVbac63qxLekphZo/+s0plbOPtHXRvtyaFVCHq7ZBV8Z Ok8zH8h0PZXmzpsV+yv8bvQf5WgCZrIQH7+p0YQJljtYuG97+UBcp5crCvrVF33b iEaNkQgI7KPPyoLQepuHA7xv1keiqIVy -----END CERTIFICATE-----Generated at Fri Nov 7 12:43:28 2025 by rpki-client