$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: Lw7i3jSFy0AhHnn4ty6bC9RABNKtBAlz65+agQMMVuE= Subject key identifier: 87:6F:34:0E:5F:9B:E8:89:E8:2B:D2:7F:D2:87:CE:1B:F0:D5:09:E0 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C43 Signing time: Fri 22 Aug 2025 18:45:37 +0000 Manifest this update: Fri 22 Aug 2025 18:45:37 +0000 Manifest next update: Fri 29 Aug 2025 18:45:37 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: lf6c/PDVkAVOq9UOEGMqcJN7CAzNUG/5KRLaC84X/jI=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Aug 22 18:45:37 2025 GMT Not After : Aug 29 18:45:37 2025 GMT Subject: CN=68a8bad1-4ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d7:45:6b:e9:5c:e5:57:f9:0d:7d:19:01:66: 54:d1:b6:06:e5:c3:4e:8f:57:1e:26:14:c2:2c:7d: a1:2e:2f:87:08:16:4f:66:7d:8b:12:fa:08:80:d6: 12:0e:17:c2:fb:52:a4:b2:17:23:3b:b7:cb:0a:f4: 24:49:ee:9f:ae:f8:13:59:a5:fc:14:e4:70:46:f8: 48:bd:c1:7f:ab:84:28:cd:2d:54:e9:20:04:48:d3: 2c:3b:bd:7e:d1:dc:68:05:18:0e:36:c1:ea:df:85: 6b:b5:bd:59:c0:e9:b9:53:3e:a0:64:53:fd:c8:57: 12:e5:71:b5:7c:f1:b9:5e:ba:ab:26:e0:1a:2b:14: c3:84:ec:eb:39:e0:ab:78:40:ec:27:e7:89:b8:d3: 29:34:f8:7c:80:c0:23:d7:16:12:63:f2:5c:b8:c9: 61:e1:c8:7e:8c:67:52:f2:c4:7d:2d:25:17:68:d9: 20:d6:df:76:e8:f1:1b:66:6d:35:5c:78:82:d6:8d: 3b:0e:bb:2b:01:85:41:53:17:ef:ba:c1:9d:3c:35: e7:6d:75:9b:81:d0:94:30:bf:9a:41:c3:12:ed:94: b1:b5:49:70:3f:8b:96:ca:41:6c:c4:c8:77:e1:44: ff:ce:7b:0c:35:1e:64:c4:b7:7b:2d:5d:a7:ff:28: 7c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6F:34:0E:5F:9B:E8:89:E8:2B:D2:7F:D2:87:CE:1B:F0:D5:09:E0 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:74:ef:3b:72:9c:0f:03:56:03:ce:1e:84:18:44:fa:ae:44: 69:ed:a1:2f:f1:a9:74:c8:6c:23:24:d9:8a:98:93:cc:8f:ad: c7:ba:ce:79:38:8b:78:47:8a:8b:9f:b6:be:0c:fe:c6:ae:7d: 9b:39:d7:8b:37:d7:1d:ee:31:4f:37:d3:8f:04:08:95:76:fc: 8c:6a:84:9f:22:f3:55:bb:3c:dc:0e:45:0e:18:2b:3a:9c:59: 5b:b7:63:ee:48:55:27:3f:6a:e4:6c:54:e0:41:da:f3:e7:2b: 38:c1:68:8e:3c:ba:4a:7f:43:dc:2f:4f:10:d7:db:a0:65:37: d1:02:9f:2d:73:1a:e9:18:16:98:91:75:f8:29:2d:27:81:19: 2b:9e:a2:e5:dd:c3:ca:68:1f:59:81:ce:fa:8c:de:0d:6b:62: 28:13:ce:de:e9:85:ea:77:82:9b:7f:9e:77:a4:80:53:43:49: 33:66:9e:63:23:50:1d:45:02:f3:a3:d7:e3:72:e7:6f:a2:aa: 63:a8:8d:02:42:13:f9:22:7c:f4:63:fa:51:7a:d7:b4:10:6d: 2a:36:e0:49:6a:d0:ae:3e:4a:09:06:b9:8a:40:6b:db:af:d6: 45:7f:ba:b2:e0:78:80:46:fd:63:e2:87:c2:80:03:78:5e:ab: 87:2c:1c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUwODIyMTg0NTM3WhcNMjUwODI5MTg0NTM3WjAYMRYwFAYD VQQDEw02OGE4YmFkMS00YWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltdFa+lc5Vf5DX0ZAWZU0bYG5cNOj1ceJhTCLH2hLi+HCBZPZn2LEvoIgNYS DhfC+1KkshcjO7fLCvQkSe6frvgTWaX8FORwRvhIvcF/q4QozS1U6SAESNMsO71+ 0dxoBRgONsHq34Vrtb1ZwOm5Uz6gZFP9yFcS5XG1fPG5XrqrJuAaKxTDhOzrOeCr eEDsJ+eJuNMpNPh8gMAj1xYSY/JcuMlh4ch+jGdS8sR9LSUXaNkg1t926PEbZm01 XHiC1o07DrsrAYVBUxfvusGdPDXnbXWbgdCUML+aQcMS7ZSxtUlwP4uWykFsxMh3 4UT/znsMNR5kxLd7LV2n/yh8OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdvNA5f m+iJ6CvSf9KHzhvw1QngMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjdO87cpwPA1YDzh6EGET6rkRp7aEv8al0yGwjJNmKmJPMj63Hus55 OIt4R4qLn7a+DP7Grn2bOdeLN9cd7jFPN9OPBAiVdvyMaoSfIvNVuzzcDkUOGCs6 nFlbt2PuSFUnP2rkbFTgQdrz5ys4wWiOPLpKf0PcL08Q19ugZTfRAp8tcxrpGBaY kXX4KS0ngRkrnqLl3cPKaB9Zgc76jN4Na2IoE87e6YXqd4Kbf553pIBTQ0kzZp5j I1AdRQLzo9fjcudvoqpjqI0CQhP5Inz0Y/pRete0EG0qNuBJatCuPkoJBrmKQGvb r9ZFf7qy4HiARv1j4ofCgAN4XquHLBwY -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:26 2025 by rpki-client