$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: SZUugM9PuEqNz+NpjBYMle6H5Yenlou1U1eRSAMW42Q= Subject key identifier: 28:35:A7:7E:86:43:A4:CF:7F:BE:7F:DA:7D:3D:A4:6E:24:7B:85:6D Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 06:23:36 +0000 Manifest this update: Sat 23 Aug 2025 06:23:36 +0000 Manifest next update: Sat 30 Aug 2025 06:23:36 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: Q5PaXpN0B5Ts3MhI88RDX2OGbgm7iGyAOsqEOZ/zBas=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: jhgv9aU9R5cyiS+8jQVzOexFGNK8rhaSdkQTaqCgMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Aug 23 06:23:36 2025 GMT Not After : Aug 30 06:23:36 2025 GMT Subject: CN=68a95e68-1f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:39:2a:3d:49:b7:ee:11:86:de:20:59:df: 29:51:09:d2:7e:69:c6:88:a9:f0:e5:9c:88:47:84: 14:46:a8:21:dc:e4:c9:de:41:a8:89:f8:f9:56:f5: 80:60:46:86:36:32:66:be:f7:76:64:90:da:33:3e: d3:d5:fb:22:ec:a5:84:70:a3:d2:8a:07:87:19:0e: 65:5b:e3:d7:9e:3b:a2:63:cc:0c:6f:4c:12:a0:2d: 09:6f:0c:ba:bd:c5:d0:83:c3:41:8b:e3:73:f7:5f: 37:00:5e:da:e4:57:22:94:bf:09:62:fb:fa:9a:b0: 6d:9a:b0:f3:de:45:45:b9:54:17:f4:76:68:31:2a: e2:31:a8:6e:d9:c3:2c:a1:ee:6a:e8:66:5c:68:de: 7c:a3:e9:04:a1:41:90:46:07:fb:07:b8:8f:ac:52: 4f:60:0b:42:06:51:42:c4:22:c5:ce:16:c4:59:e3: 44:7e:bb:f5:ec:5d:4d:79:2b:fe:89:31:3d:0e:b0: 9c:4e:21:8b:a2:b0:0b:6c:27:88:30:5b:75:f1:cc: f7:47:8e:ca:18:f1:b1:93:00:f2:ee:66:43:5b:a6: 87:33:22:60:03:63:0c:6a:d0:5d:d3:2f:80:8d:88: a3:4e:20:7e:88:df:97:ff:89:73:58:e6:5c:61:1d: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:35:A7:7E:86:43:A4:CF:7F:BE:7F:DA:7D:3D:A4:6E:24:7B:85:6D X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4d:be:61:5c:da:1a:16:2a:f3:a9:c4:14:5c:07:00:7e:05: ca:1a:ba:35:b5:2c:6d:56:eb:46:3f:56:38:78:9b:84:82:34: 27:d3:50:9c:92:dc:ea:7d:e1:71:f4:c9:c9:a1:50:98:7c:88: ba:56:b4:85:1d:3e:6b:99:ce:25:e6:b5:eb:03:ce:85:28:ef: 0e:86:c6:d7:dd:a4:c8:a4:ca:da:c4:1d:01:47:f9:15:7d:dc: 7a:20:55:61:c6:c2:cb:23:af:8f:95:91:17:9a:7c:c4:e1:0e: 80:48:bc:09:1d:db:45:88:cb:bd:25:30:9b:92:b2:54:6b:54: 52:62:f0:79:ce:17:48:d4:a0:69:d7:46:ff:d8:99:74:e0:0a: 4d:8b:18:74:74:90:4e:6e:91:14:52:b6:a5:26:16:99:63:4a: b5:09:e0:a3:7a:e6:69:68:7e:48:29:8d:f4:8b:1a:57:19:42: 7e:cc:eb:70:9f:6a:2a:f6:c2:bd:00:32:98:86:76:ad:f1:95: d0:3c:27:d2:0e:f4:e3:9e:fb:19:c0:4e:2b:48:b8:8c:04:23: 29:bf:9a:4d:29:99:7c:0d:8e:25:1b:4a:b0:f8:b8:82:36:82: a1:b7:7f:40:4a:25:68:1f:be:89:d0:ed:47:41:f4:1b:a8:61: 73:89:17:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBGQ0IxMTAvBgNVBAUTKDNDQjRBOTAwNDE4QkU5RENEQzVFMDRBMEJBNjJBODRE QTg1RkU2RTAwHhcNMjUwODIzMDYyMzM2WhcNMjUwODMwMDYyMzM2WjAYMRYwFAYD VQQDEw02OGE5NWU2OC0xZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnD85Kj1Jt+4Rht4gWd8pUQnSfmnGiKnw5ZyIR4QURqgh3OTJ3kGoifj5VvWA YEaGNjJmvvd2ZJDaMz7T1fsi7KWEcKPSigeHGQ5lW+PXnjuiY8wMb0wSoC0Jbwy6 vcXQg8NBi+Nz9183AF7a5FcilL8JYvv6mrBtmrDz3kVFuVQX9HZoMSriMahu2cMs oe5q6GZcaN58o+kEoUGQRgf7B7iPrFJPYAtCBlFCxCLFzhbEWeNEfrv17F1NeSv+ iTE9DrCcTiGLorALbCeIMFt18cz3R47KGPGxkwDy7mZDW6aHMyJgA2MMatBd0y+A jYijTiB+iN+X/4lzWOZcYR0SWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg1p36G Q6TPf75/2n09pG4ke4VtMB8GA1UdIwQYMBaAFDy0qQBBi+nc3F4EoLpiqE2oX+bg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEZDQi84OUM3OEY3MDgx NjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZkemNYZ1NndW1Lb1RhaGY1 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEZDQi84OUM3OEY3MDgxNjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZk emNYZ1NndW1Lb1RhaGY1dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdTb5hXNoaFirzqcQUXAcAfgXKGro1tSxtVutGP1Y4eJuEgjQn01Cc ktzqfeFx9MnJoVCYfIi6VrSFHT5rmc4l5rXrA86FKO8OhsbX3aTIpMraxB0BR/kV fdx6IFVhxsLLI6+PlZEXmnzE4Q6ASLwJHdtFiMu9JTCbkrJUa1RSYvB5zhdI1KBp 10b/2Jl04ApNixh0dJBObpEUUralJhaZY0q1CeCjeuZpaH5IKY30ixpXGUJ+zOtw n2oq9sK9ADKYhnat8ZXQPCfSDvTjnvsZwE4rSLiMBCMpv5pNKZl8DY4lG0qw+LiC NoKht39ASiVoH76J0O1HQfQbqGFziRcw -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:35 2025 by rpki-client