$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: nRiw8wMlFNJhE1DZGEAqSoG4373/aPbIGm3p7rt2n/I= Subject key identifier: B0:C5:8A:42:25:61:F7:69:6B:B3:ED:37:AC:B5:68:F2:14:43:E5:E9 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C29 Signing time: Wed 02 Jul 2025 18:54:28 +0000 Manifest this update: Wed 02 Jul 2025 18:54:27 +0000 Manifest next update: Wed 09 Jul 2025 18:54:27 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: oHZanIfZjsrbYPw5GmGJzneZ5XV0cRCakfFxgph4XJw=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Jul 2 18:54:27 2025 GMT Not After : Jul 9 18:54:27 2025 GMT Subject: CN=68658063-6338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:30:e2:a3:27:d2:1f:99:62:a6:3f:eb:1d: 9f:68:21:41:28:48:1a:e3:12:3c:09:5c:5f:16:48: 27:b9:68:f9:0c:4e:c2:ef:2a:da:1d:bb:ca:18:aa: 5a:1e:12:e5:9c:f2:05:66:68:91:07:2b:88:f6:24: 34:2e:fd:78:47:a4:4b:97:70:3e:14:08:b0:71:37: cb:11:8a:d6:49:e2:74:34:89:65:88:b2:26:e6:a2: 15:23:a1:89:25:ed:a8:30:dc:70:bf:45:ed:0f:b4: a5:99:13:c0:2e:cd:ff:c1:b3:c2:cd:7d:fb:37:b1: ae:dd:cb:9d:15:5f:de:c2:ae:81:1b:ca:a9:ec:a2: 1d:6e:8b:eb:83:23:ad:40:e1:55:08:f6:05:5b:43: a1:42:b6:2f:c5:9a:9b:72:ff:6d:d3:eb:4b:1d:33: b1:db:aa:b5:c5:94:dd:01:95:9d:d1:e5:49:c6:66: 93:81:43:a1:6f:12:e5:ff:cc:a2:14:38:1a:90:fe: e9:04:ce:28:d9:c2:3b:c8:09:5b:ab:f9:42:1b:dd: e2:19:47:e8:d0:1f:c0:ca:c7:ab:0e:86:38:52:5f: 8f:86:aa:9e:5b:3d:2f:e7:dd:2c:c3:4f:04:af:20: fc:e4:6e:ef:78:ee:6f:23:00:28:69:43:e8:9f:43: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C5:8A:42:25:61:F7:69:6B:B3:ED:37:AC:B5:68:F2:14:43:E5:E9 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f2:2c:8f:35:b2:79:4a:84:f5:18:b2:ab:67:0f:b5:6c:d2: 32:b0:98:9b:79:65:5e:92:a2:3a:77:04:40:f6:21:4e:26:40: 2a:55:65:26:dc:a4:b1:32:f3:b8:a7:5a:94:76:cc:52:85:a3: 00:7f:c8:f0:4f:b0:ec:18:da:ba:7a:27:ec:23:50:3b:8a:1c: 85:57:5a:23:5a:b3:6b:10:cd:39:b3:bd:a1:4c:2a:ea:41:71: 06:9b:b3:9d:99:88:2f:49:6d:b5:6b:16:77:51:df:4e:e1:48: 6e:c9:03:3b:0f:40:07:f9:3c:f8:8d:b3:4e:fe:81:b4:90:70: 5d:17:42:3e:31:61:0e:31:f3:a5:79:84:80:7b:b9:d9:0b:3a: ae:71:c7:8d:e9:8d:4a:34:8b:ef:a9:cf:e6:bb:22:ed:51:02: c7:c5:4f:7d:03:40:de:88:a3:24:c8:76:de:c6:59:13:e3:44: 22:74:2b:f9:73:fb:07:d4:a3:d9:37:ee:ac:6f:9c:a3:97:4a: 3b:32:8e:d3:32:d4:43:ee:bf:1f:b8:81:0a:04:bf:94:0f:9b: 6e:d7:52:cc:58:aa:1c:ba:e3:80:52:51:45:f8:ee:83:95:cc: ae:dc:72:37:50:03:f2:f8:08:09:aa:39:64:99:99:24:c1:2f: 52:8e:dd:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUwNzAyMTg1NDI3WhcNMjUwNzA5MTg1NDI3WjAYMRYwFAYD VQQDEw02ODY1ODA2My02MzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgYw4qMn0h+ZYqY/6x2faCFBKEga4xI8CVxfFkgnuWj5DE7C7yraHbvKGKpa HhLlnPIFZmiRByuI9iQ0Lv14R6RLl3A+FAiwcTfLEYrWSeJ0NIlliLIm5qIVI6GJ Je2oMNxwv0XtD7SlmRPALs3/wbPCzX37N7Gu3cudFV/ewq6BG8qp7KIdbovrgyOt QOFVCPYFW0OhQrYvxZqbcv9t0+tLHTOx26q1xZTdAZWd0eVJxmaTgUOhbxLl/8yi FDgakP7pBM4o2cI7yAlbq/lCG93iGUfo0B/AyserDoY4Ul+PhqqeWz0v590sw08E ryD85G7veO5vIwAoaUPon0PzkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDFikIl Yfdpa7PtN6y1aPIUQ+XpMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc8iyPNbJ5SoT1GLKrZw+1bNIysJibeWVekqI6dwRA9iFOJkAqVWUm 3KSxMvO4p1qUdsxShaMAf8jwT7DsGNq6eifsI1A7ihyFV1ojWrNrEM05s72hTCrq QXEGm7OdmYgvSW21axZ3Ud9O4UhuyQM7D0AH+Tz4jbNO/oG0kHBdF0I+MWEOMfOl eYSAe7nZCzqucceN6Y1KNIvvqc/muyLtUQLHxU99A0DeiKMkyHbexlkT40QidCv5 c/sH1KPZN+6sb5yjl0o7Mo7TMtRD7r8fuIEKBL+UD5tu11LMWKocuuOAUlFF+O6D lcyu3HI3UAPy+AgJqjlkmZkkwS9Sjt2M -----END CERTIFICATE-----Generated at Fri Jul 4 01:16:13 2025 by rpki-client