$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: xxbyv9XxQjYhyLPnLANOkqmSRqhiDLhfpadqbBGTlbM= Subject key identifier: A3:35:18:00:AE:2D:17:5F:27:59:05:85:4C:81:9A:D9:88:E8:77:97 Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: B4 Signing time: Thu 15 May 2025 05:18:10 +0000 Manifest this update: Thu 15 May 2025 05:18:09 +0000 Manifest next update: Thu 22 May 2025 05:18:09 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: aHBlKgvh8Egl9UcTOUAw7cc4qfoBNEH8lNSoKGEtJMM=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: XvWRCynYkFhCMaJDNTtD88NyWN5MgwjlrDADWnFFA8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: May 15 05:18:09 2025 GMT Not After : May 22 05:18:09 2025 GMT Subject: CN=68257911-31b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e6:c7:9f:a7:66:67:dd:9e:10:3e:1b:ee:44: 98:0c:52:f7:f9:1e:1b:a4:be:4a:25:17:9f:05:34: d8:84:39:13:2b:e1:c2:f9:3c:71:e8:55:3c:81:7b: df:29:8e:70:17:c5:e8:d8:0e:4c:3c:fd:b7:3a:53: 4d:de:5b:cd:bb:ae:37:30:d0:c6:b9:3c:23:01:43: 88:35:e4:aa:df:e7:b9:59:9c:80:59:63:90:ea:08: 94:48:35:7b:6e:f4:6b:69:7e:10:7b:59:55:e1:9e: 06:81:0e:9f:e7:42:c6:e6:6b:c4:ee:1e:81:a1:fb: 44:43:e6:ba:2f:6e:be:a3:b8:aa:15:83:f1:91:4c: 37:82:3c:35:28:54:41:50:ad:c8:e3:30:94:ff:67: bb:bc:95:3e:32:b1:f0:d1:8c:92:79:45:98:f1:25: c6:99:9c:4b:17:c8:3e:35:41:7d:53:f0:73:be:35: de:4c:4b:31:b0:ff:6d:95:66:8f:64:62:7a:28:d5: 04:3b:5a:5d:7e:b2:6e:01:13:e8:7e:75:e1:6f:cb: 04:04:23:6e:ba:1f:a1:88:35:b5:41:a0:d2:87:b2: 9c:bb:fa:7d:56:a2:b1:62:6a:99:15:6c:47:54:71: c0:e3:af:37:f1:e5:de:6c:b9:3d:a1:5b:9e:43:f0: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:35:18:00:AE:2D:17:5F:27:59:05:85:4C:81:9A:D9:88:E8:77:97 X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:9a:0c:1d:dc:52:71:4c:50:c6:b4:0e:58:74:9d:82:bd:fb: 73:ed:7d:d8:49:7c:21:7d:ab:7a:c3:fe:f7:ce:04:fd:e7:53: c6:23:55:4f:06:d2:1f:ed:5e:e0:09:fa:9d:35:7f:57:67:7f: 9a:01:5c:87:5a:d3:2c:cb:56:a1:46:47:05:03:11:99:95:25: eb:f8:74:5c:d3:45:a7:c5:10:0c:81:f5:b5:03:73:78:d4:ba: a3:65:bb:93:10:08:e9:d3:5b:d0:3f:9b:c2:1b:cf:1c:e2:07: fa:46:04:00:88:1e:55:39:c1:ae:a2:b3:f8:1f:33:1e:eb:00: 6a:b2:7b:52:af:47:8c:40:88:9c:ce:49:16:0c:86:98:6c:07: b5:37:db:fd:32:76:d0:d7:a4:c2:b7:58:8d:0d:ae:06:d1:cc: 6b:7e:c3:dd:a5:7b:08:fb:c1:ce:67:69:a6:8b:65:8a:9f:10: ff:0e:52:92:7a:2d:4a:e9:ad:3b:2f:49:da:65:0b:04:91:b6: 7b:15:67:98:af:26:a6:3e:05:43:64:44:8e:d6:c9:7d:6f:63: ce:a1:5b:b4:66:bd:9a:a1:e3:49:38:12:23:00:55:eb:e1:ca: e4:65:52:20:6e:84:43:e7:ce:64:f1:c8:ae:a8:21:54:55:c6: 31:e4:97:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjUwNTE1MDUxODA5WhcNMjUwNTIyMDUxODA5WjAYMRYwFAYD VQQDEw02ODI1NzkxMS0zMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+bHn6dmZ92eED4b7kSYDFL3+R4bpL5KJRefBTTYhDkTK+HC+Txx6FU8gXvf KY5wF8Xo2A5MPP23OlNN3lvNu643MNDGuTwjAUOINeSq3+e5WZyAWWOQ6giUSDV7 bvRraX4Qe1lV4Z4GgQ6f50LG5mvE7h6BoftEQ+a6L26+o7iqFYPxkUw3gjw1KFRB UK3I4zCU/2e7vJU+MrHw0YySeUWY8SXGmZxLF8g+NUF9U/BzvjXeTEsxsP9tlWaP ZGJ6KNUEO1pdfrJuARPofnXhb8sEBCNuuh+hiDW1QaDSh7Kcu/p9VqKxYmqZFWxH VHHA46838eXebLk9oVueQ/D2OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKM1GACu LRdfJ1kFhUyBmtmI6HeXMB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q4OS9EM0VENTg1ODIwQjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpn Yk5ZTkVsOEtrYklfN0RBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVmgwd3FJxTFDGtA5YdJ2Cvftz7X3YSXwhfat6w/73zgT951PGI1VP BtIf7V7gCfqdNX9XZ3+aAVyHWtMsy1ahRkcFAxGZlSXr+HRc00WnxRAMgfW1A3N4 1LqjZbuTEAjp01vQP5vCG88c4gf6RgQAiB5VOcGuorP4HzMe6wBqsntSr0eMQIic zkkWDIaYbAe1N9v9MnbQ16TCt1iNDa4G0cxrfsPdpXsI+8HOZ2mmi2WKnxD/DlKS ei1K6a07L0naZQsEkbZ7FWeYryamPgVDZESO1sl9b2POoVu0Zr2aoeNJOBIjAFXr 4crkZVIgboRD585k8ciuqCFUVcYx5JeV -----END CERTIFICATE-----Generated at Sat May 17 07:02:44 2025 by rpki-client