$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: me3XF9VFwIyAso9MEd30OJOKzOHO+nQluo4vJCBf2K8= Subject key identifier: FE:F9:A7:2F:91:4C:46:53:32:E1:20:CA:89:66:B1:66:71:56:9C:37 Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: 8E Signing time: Thu 03 Jul 2025 06:40:47 +0000 Manifest this update: Thu 03 Jul 2025 06:40:47 +0000 Manifest next update: Thu 10 Jul 2025 06:40:47 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: ZOZHM9g/QWtJjCWydzFFX1Ka2hd4EZOGVB6+oq3WEXM=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: jhgv9aU9R5cyiS+8jQVzOexFGNK8rhaSdkQTaqCgMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Jul 3 06:40:47 2025 GMT Not After : Jul 10 06:40:47 2025 GMT Subject: CN=686625ef-58b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:ea:30:13:71:95:a5:22:fa:02:2f:0e:ec: c9:53:50:b8:ca:0f:de:ef:ba:d4:4f:6e:09:47:71: d3:1c:c5:93:f8:12:8e:b7:ab:b1:33:1b:8b:30:d7: ce:a7:8a:f8:ca:09:64:4a:08:ad:c9:2f:d8:af:1a: e5:56:74:9b:0b:ec:62:1d:fe:fc:09:b8:20:7b:36: 3e:14:46:18:ce:bc:21:8b:41:ee:8f:ee:f8:e6:90: d1:4f:ba:42:44:53:6c:02:c7:57:a1:29:38:a7:f0: 63:c0:d3:7e:3e:2b:1b:46:e7:72:d6:21:14:cd:3f: 79:7f:9b:25:58:a4:96:9f:e7:c0:59:e7:72:b1:fb: e5:f0:1a:ad:39:cf:62:d8:f7:4e:d5:17:be:c9:9c: b2:3f:f7:5f:17:b9:a7:89:c2:62:ce:74:dc:18:58: d5:f8:19:7d:3a:41:0c:ae:22:d0:f2:c6:db:d3:fb: c6:70:17:85:9a:9a:97:c0:05:0b:8f:3c:6a:c9:f5: cc:9e:48:4c:d9:51:9d:3f:13:84:cd:61:1a:fb:25: 45:ee:8d:8f:55:c4:db:3e:e8:4b:5c:38:8f:e2:d0: 46:97:a2:83:a8:12:c4:3b:f3:fc:e3:93:a2:ed:73: 91:99:e4:d6:e2:f4:e5:d2:33:9f:88:4d:21:3d:54: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F9:A7:2F:91:4C:46:53:32:E1:20:CA:89:66:B1:66:71:56:9C:37 X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d6:1e:a3:c0:ab:d1:cc:4e:3b:ae:93:92:c2:7e:e4:f4:80: 03:4a:6f:11:74:b7:89:ba:e4:9c:50:2f:3a:af:7b:ea:1b:02: ae:d4:68:8a:c5:c7:36:05:4f:46:f4:f6:50:b2:a5:b0:d8:ad: 72:2d:36:b0:98:63:4f:12:d4:53:5e:66:0b:f3:2d:ff:6b:43: 46:36:7e:b7:e8:b3:57:a6:fb:0a:7e:d6:82:7c:d0:13:20:32: 92:9a:0b:95:71:1b:17:12:7f:8e:22:5b:cb:e1:59:ad:1b:54: 6a:55:d5:13:4d:3b:58:ef:07:64:7b:83:cc:6e:65:f6:9a:3a: 67:0d:c5:fc:51:9d:29:ef:5e:aa:4d:1c:df:c4:6a:3e:a6:36: bc:28:35:8b:47:87:44:a0:8b:51:ce:87:73:13:4f:c9:c4:d7: 10:1f:43:a6:4b:7d:8d:2a:7b:3a:ac:fc:05:ca:da:b1:4b:ac: 42:4e:ec:4a:92:c6:e6:9f:7c:8a:04:eb:12:10:36:5c:5d:55: 30:00:65:d7:68:cb:6b:35:c6:9e:1d:8c:b7:1b:bb:92:f5:9c: ca:9b:de:92:5c:64:91:8a:a4:c5:8f:60:0c:01:17:96:09:27: 34:7f:8a:af:31:1d:e5:13:c3:a3:c7:a5:d7:82:84:33:7f:06: 77:6c:7d:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBGQ0IxMTAvBgNVBAUTKDNDQjRBOTAwNDE4QkU5RENEQzVFMDRBMEJBNjJBODRE QTg1RkU2RTAwHhcNMjUwNzAzMDY0MDQ3WhcNMjUwNzEwMDY0MDQ3WjAYMRYwFAYD VQQDEw02ODY2MjVlZi01OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXbqMBNxlaUi+gIvDuzJU1C4yg/e77rUT24JR3HTHMWT+BKOt6uxMxuLMNfO p4r4yglkSgityS/YrxrlVnSbC+xiHf78CbggezY+FEYYzrwhi0Huj+745pDRT7pC RFNsAsdXoSk4p/BjwNN+PisbRudy1iEUzT95f5slWKSWn+fAWedysfvl8BqtOc9i 2PdO1Re+yZyyP/dfF7mnicJiznTcGFjV+Bl9OkEMriLQ8sbb0/vGcBeFmpqXwAUL jzxqyfXMnkhM2VGdPxOEzWEa+yVF7o2PVcTbPuhLXDiP4tBGl6KDqBLEO/P845Oi 7XORmeTW4vTl0jOfiE0hPVQUPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP75py+R TEZTMuEgyolmsWZxVpw3MB8GA1UdIwQYMBaAFDy0qQBBi+nc3F4EoLpiqE2oX+bg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEZDQi84OUM3OEY3MDgx NjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZkemNYZ1NndW1Lb1RhaGY1 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEZDQi84OUM3OEY3MDgxNjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZk emNYZ1NndW1Lb1RhaGY1dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn1h6jwKvRzE47rpOSwn7k9IADSm8RdLeJuuScUC86r3vqGwKu1GiK xcc2BU9G9PZQsqWw2K1yLTawmGNPEtRTXmYL8y3/a0NGNn636LNXpvsKftaCfNAT IDKSmguVcRsXEn+OIlvL4VmtG1RqVdUTTTtY7wdke4PMbmX2mjpnDcX8UZ0p716q TRzfxGo+pja8KDWLR4dEoItRzodzE0/JxNcQH0OmS32NKns6rPwFytqxS6xCTuxK ksbmn3yKBOsSEDZcXVUwAGXXaMtrNcaeHYy3G7uS9ZzKm96SXGSRiqTFj2AMAReW CSc0f4qvMR3lE8Ojx6XXgoQzfwZ3bH33 -----END CERTIFICATE-----Generated at Thu Jul 3 23:21:34 2025 by rpki-client