$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft File: Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json) Hash identifier: BtioigSC4ifnKyhi/HGSXp8alN4OgGH9RThVQ3ITFHs= Subject key identifier: F6:55:5C:09:92:86:49:3B:D6:9C:C5:3B:85:95:2B:62:F4:4E:41:B4 Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft Manifest number: 02AC Signing time: Thu 03 Jul 2025 01:58:42 +0000 Manifest this update: Thu 03 Jul 2025 01:58:41 +0000 Manifest next update: Thu 10 Jul 2025 01:58:41 +0000 Files and hashes: 1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: vUKSPV2btke6Um6o5r89M/btjsvlkD3FG4xEfPN5qsE=) 2: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: 8rnT1/RYFWPcmBVGumAdOk1rKk2uRHrNY0hy1090ab0=) 3: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: 5OZH/ipU9G0SdrZKs5470uFnbaHHzZ691GNPcYjgeyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Validity Not Before: Jul 3 01:58:41 2025 GMT Not After : Jul 10 01:58:41 2025 GMT Subject: CN=6865e3d1-7435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:68:6c:6f:74:8a:d1:35:e1:c5:65:53:2f: e1:03:bc:80:5d:3b:10:99:b5:c3:11:2c:e2:25:32: 21:cd:f9:e2:75:1f:9c:9f:ca:af:3a:30:26:4d:2c: 16:82:5a:db:b5:6f:d4:42:03:fc:2a:9d:c7:46:e2: 7f:c0:54:30:be:db:ad:c2:76:98:3d:88:a2:66:b8: fe:d3:49:e0:b4:52:3f:7f:79:1b:f6:c9:b7:29:2e: 83:dd:f8:12:00:6b:74:53:86:da:72:75:29:34:be: 6a:61:fb:34:3b:7d:39:19:56:40:92:03:29:9f:b6: 5e:04:d3:16:fa:42:59:6c:84:d4:e9:2e:6c:2d:e0: ed:f3:97:f5:d5:ad:b0:84:c6:cb:f7:d2:13:1c:0f: 64:25:67:75:a5:c0:6c:ee:3d:05:65:62:51:a5:37: 92:a1:a2:7d:a9:5d:e8:bd:59:f8:68:96:93:48:68: b8:81:ed:b3:ef:ea:0b:bc:c3:14:ce:6f:03:5e:d7: e7:da:de:d3:d8:b5:4d:73:73:28:78:81:dc:10:e3: 3d:e8:97:4b:e3:af:7d:d7:28:b9:9f:79:a4:22:9f: 49:4f:9c:7e:f6:f1:ce:55:91:d3:a6:ab:93:0c:c1: a1:f8:af:f1:19:b8:23:76:20:d5:ec:35:61:66:3a: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:55:5C:09:92:86:49:3B:D6:9C:C5:3B:85:95:2B:62:F4:4E:41:B4 X509v3 Authority Key Identifier: keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:35:0d:99:97:17:12:7f:6d:ea:e2:21:b2:f3:c2:3d:51:9d: 63:9c:7b:87:89:6c:c9:6d:1e:55:35:ea:a9:95:3b:eb:19:b8: ad:11:2b:cb:f6:54:97:a7:7a:b4:15:82:9f:19:26:f3:71:a0: d8:1c:2d:cb:42:54:40:7a:94:40:73:06:44:5d:cc:63:d1:eb: 58:f6:2b:22:cf:0c:88:6e:89:44:83:b7:e8:ed:eb:85:96:8c: dd:ca:2a:3b:f1:50:02:e0:df:72:12:ae:77:a1:13:cd:d2:c9: 36:41:7e:24:e4:96:e0:32:a3:a3:2b:af:b5:24:a3:30:32:c8: 4c:08:b1:68:88:31:e0:b7:ad:51:28:74:ed:1e:41:43:23:b3: 58:19:0b:23:93:12:df:a0:c4:7c:54:c2:6b:75:7c:30:4d:63: 63:88:6e:c5:2f:84:0a:4b:39:03:4a:72:dc:e6:8e:a5:59:49: 41:8a:92:d9:48:99:06:10:6d:a3:99:53:40:2c:6a:db:b2:22: d7:7b:ff:65:ec:3d:0e:1e:45:bb:39:69:e7:2c:8a:05:3b:c6: ca:f5:3d:86:09:f8:62:4f:8f:ea:cd:66:ed:35:ff:95:57:45: 32:86:9f:c4:a0:e4:a9:63:b3:71:5f:b5:33:ea:0f:7a:19:d1: 28:be:bf:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB MjA5MzU1OEEwHhcNMjUwNzAzMDE1ODQxWhcNMjUwNzEwMDE1ODQxWjAYMRYwFAYD VQQDEw02ODY1ZTNkMS03NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1P1obG90itE14cVlUy/hA7yAXTsQmbXDESziJTIhzfnidR+cn8qvOjAmTSwW glrbtW/UQgP8Kp3HRuJ/wFQwvtutwnaYPYiiZrj+00ngtFI/f3kb9sm3KS6D3fgS AGt0U4bacnUpNL5qYfs0O305GVZAkgMpn7ZeBNMW+kJZbITU6S5sLeDt85f11a2w hMbL99ITHA9kJWd1pcBs7j0FZWJRpTeSoaJ9qV3ovVn4aJaTSGi4ge2z7+oLvMMU zm8DXtfn2t7T2LVNc3MoeIHcEOM96JdL46991yi5n3mkIp9JT5x+9vHOVZHTpquT DMGh+K/xGbgjdiDV7DVhZjoi8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZVXAmS hkk71pzFO4WVK2L0TkG0MB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zQTQxN0Q3NDA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tR T2pGLUtJdlJtNTJpQ1RWWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVNQ2ZlxcSf23q4iGy88I9UZ1jnHuHiWzJbR5VNeqplTvrGbitESvL 9lSXp3q0FYKfGSbzcaDYHC3LQlRAepRAcwZEXcxj0etY9isizwyIbolEg7fo7euF lozdyio78VAC4N9yEq53oRPN0sk2QX4k5JbgMqOjK6+1JKMwMshMCLFoiDHgt61R KHTtHkFDI7NYGQsjkxLfoMR8VMJrdXwwTWNjiG7FL4QKSzkDSnLc5o6lWUlBipLZ SJkGEG2jmVNALGrbsiLXe/9l7D0OHkW7OWnnLIoFO8bK9T2GCfhiT4/qzWbtNf+V V0Uyhp/EoOSpY7NxX7Uz6g96GdEovr9L -----END CERTIFICATE-----Generated at Fri Jul 4 21:58:00 2025 by rpki-client