$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: cefHtDFIxloj8o88MFZVo4Cja+gQmrtgtcBgt7f2f9c= Subject key identifier: A6:DE:BA:73:7B:F9:98:D9:0A:A6:13:60:E6:C4:0C:19:3F:A5:AA:68 Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 514A Signing time: Thu 18 Sep 2025 15:18:58 +0000 Manifest this update: Thu 18 Sep 2025 15:18:58 +0000 Manifest next update: Thu 25 Sep 2025 15:18:58 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: Zvu8k+qexg2Nl/bLOLXXeXh8ev0jG3NZS2QYKHyiGP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7314 (0x1c92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Sep 18 15:18:58 2025 GMT Not After : Sep 25 15:18:58 2025 GMT Subject: CN=68cc22e2-e0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:d4:88:10:92:2a:70:2f:0d:6b:9a:d9:08: 8e:2e:f6:40:dc:1c:53:54:c0:75:1c:94:fc:88:77: 48:72:87:48:4e:3b:2d:f9:ad:5d:31:83:54:57:a7: 3e:52:0a:92:a5:f0:cb:67:b7:76:14:07:6d:a1:2f: fe:bf:3e:86:ff:29:0a:28:2c:07:c1:52:44:0c:d6: 38:fa:33:a7:4c:1f:36:dd:79:80:5a:a4:e4:d7:2d: 3d:26:97:40:26:b1:d8:0b:70:cc:a8:0c:81:b7:44: 9b:8b:ca:a2:89:ad:34:79:66:b9:87:c1:0d:c3:3c: 08:82:fa:e3:bc:76:96:89:2a:5e:0f:4c:eb:8d:b3: 47:d1:73:16:9a:ac:fc:ee:8f:f6:bf:d8:41:a4:62: fd:e9:ac:0d:4d:39:09:e8:ba:f6:68:4f:46:76:be: 63:fc:11:4d:24:e3:b4:45:15:bc:ea:2c:1c:bd:38: 6c:1c:5d:d6:4b:5a:b5:f1:fe:e5:aa:17:7f:a4:23: ff:c8:7d:ed:fb:a6:f0:5a:00:90:6a:79:72:7f:c8: ba:83:dd:da:3c:16:bf:2e:31:bd:1d:da:a0:0c:b1: b8:bf:2e:03:4d:97:04:5d:dd:3a:79:42:a2:84:c5: 89:0b:3e:40:bd:41:4d:5b:d6:bb:28:2d:d1:05:b7: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:BA:73:7B:F9:98:D9:0A:A6:13:60:E6:C4:0C:19:3F:A5:AA:68 X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ff:27:0e:68:d7:5a:45:ed:21:5e:3d:de:17:2c:98:e1:c2: bc:3e:d0:52:64:85:86:75:63:b5:1a:d6:0f:2d:40:34:19:d2: e6:49:57:c0:99:3b:8d:a1:f2:23:ce:5e:ea:7a:f3:67:4b:f6: 15:ef:e7:10:6f:fb:cd:f0:d3:db:e8:fa:5f:3a:ef:d3:47:da: 76:23:09:d5:88:c2:dc:22:14:46:fe:71:be:95:88:25:dd:9e: 66:10:a7:15:45:61:61:78:7f:7b:b0:22:01:33:8b:71:7f:2e: fa:92:b5:7b:9b:71:f3:43:08:ec:b9:29:cd:9d:47:bd:23:86: b1:eb:eb:48:8c:19:84:38:74:e5:94:11:03:e5:55:9f:6f:4e: 6d:c7:5d:72:3c:01:52:1e:8a:8d:cc:34:9f:c3:79:27:09:c7: 69:da:0c:a4:4e:3c:84:79:85:44:c9:67:63:4b:68:33:a8:ab: 97:4c:93:a2:6a:97:29:6e:62:7d:0e:ef:50:fc:61:80:c3:0b: ed:d5:8f:aa:67:01:a5:27:93:b4:c4:0a:10:06:44:c4:e5:e2: cd:82:a9:bb:1f:6e:47:ae:fa:8a:fe:30:06:08:ec:e8:d1:0d: 19:1c:52:be:17:98:cf:0c:b2:19:77:d8:77:89:27:44:09:69: a8:fc:84:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjUwOTE4MTUxODU4WhcNMjUwOTI1MTUxODU4WjAYMRYwFAYD VQQDEw02OGNjMjJlMi1lMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvTUiBCSKnAvDWua2QiOLvZA3BxTVMB1HJT8iHdIcodITjst+a1dMYNUV6c+ UgqSpfDLZ7d2FAdtoS/+vz6G/ykKKCwHwVJEDNY4+jOnTB823XmAWqTk1y09JpdA JrHYC3DMqAyBt0Sbi8qiia00eWa5h8ENwzwIgvrjvHaWiSpeD0zrjbNH0XMWmqz8 7o/2v9hBpGL96awNTTkJ6Lr2aE9Gdr5j/BFNJOO0RRW86iwcvThsHF3WS1q18f7l qhd/pCP/yH3t+6bwWgCQanlyf8i6g93aPBa/LjG9HdqgDLG4vy4DTZcEXd06eUKi hMWJCz5AvUFNW9a7KC3RBbe0HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbeunN7 +ZjZCqYTYObEDBk/papoMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6/ycOaNdaRe0hXj3eFyyY4cK8PtBSZIWGdWO1GtYPLUA0GdLmSVfA mTuNofIjzl7qevNnS/YV7+cQb/vN8NPb6PpfOu/TR9p2IwnViMLcIhRG/nG+lYgl 3Z5mEKcVRWFheH97sCIBM4txfy76krV7m3HzQwjsuSnNnUe9I4ax6+tIjBmEOHTl lBED5VWfb05tx11yPAFSHoqNzDSfw3knCcdp2gykTjyEeYVEyWdjS2gzqKuXTJOi apcpbmJ9Du9Q/GGAwwvt1Y+qZwGlJ5O0xAoQBkTE5eLNgqm7H25HrvqK/jAGCOzo 0Q0ZHFK+F5jPDLIZd9h3iSdECWmo/IRj -----END CERTIFICATE-----Generated at Fri Sep 19 17:46:19 2025 by rpki-client