$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: LL3q52WfojFDl/XFvdNXfWUrOLzV8jWu7VkHR/8vSmM= Subject key identifier: AD:14:32:B0:CE:01:6C:A1:DB:A8:9F:F9:A1:2A:5E:3C:85:7B:76:0A Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: CF Signing time: Sat 05 Jul 2025 05:57:49 +0000 Manifest this update: Sat 05 Jul 2025 05:57:48 +0000 Manifest next update: Sat 12 Jul 2025 05:57:48 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: iys4Ij5gXBPK7QHqACiHMScaKzhFwWtmhyrYaq0vWd4=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: 97sXWjq7Fj5JCQCyo6BRYI+5mz862DUMpg5o3JeeUks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: Jul 5 05:57:48 2025 GMT Not After : Jul 12 05:57:48 2025 GMT Subject: CN=6868bedd-43f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c5:03:86:13:a7:e7:cd:58:30:98:e0:f9:da: 43:f4:38:27:42:f0:58:11:93:b6:ef:5e:89:b1:a2: df:9a:17:c4:73:6c:cc:c9:75:37:1d:3f:25:6f:5b: 1a:0e:07:e0:1b:e2:aa:ce:d2:09:70:f6:13:9f:76: 9b:e9:74:26:53:09:e5:d2:1b:7c:19:7b:22:0e:a2: 02:a3:98:8c:e2:67:59:ce:a2:f6:48:4f:7d:2f:1c: 0b:c3:40:22:7a:0a:4d:4e:30:61:e3:ad:f8:fb:12: 60:e4:89:18:68:c5:b6:f3:10:bb:9d:08:06:41:e4: bb:cb:28:5a:21:95:4b:6c:93:2a:6f:54:f8:10:7c: a7:e9:cb:9b:71:08:3c:16:b8:dd:45:89:2a:2c:4e: fd:97:d4:8c:38:10:84:85:0f:9e:85:68:74:46:a8: 10:96:d6:f0:04:36:4e:da:1f:92:7a:08:26:e6:e5: fd:64:95:62:3a:a1:fd:24:ed:11:ba:cf:72:e4:9b: 40:93:91:aa:1b:af:64:ab:75:cf:74:24:a3:cb:49: c2:4d:07:2c:88:7e:f2:2c:68:f9:61:ef:a3:f2:45: c0:07:80:5f:01:f6:ac:6a:0c:3c:06:12:8b:9a:85: a1:e6:70:73:62:9a:5c:7e:31:e5:db:58:7a:d2:57: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:14:32:B0:CE:01:6C:A1:DB:A8:9F:F9:A1:2A:5E:3C:85:7B:76:0A X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8a:5a:3e:f8:5c:01:69:8f:18:b1:52:83:a2:fe:b7:c0:72: 2a:fe:79:2f:a7:07:2b:01:04:7f:3d:9a:4a:a6:14:17:a9:f2: b9:52:c8:da:0d:c8:9e:a1:c9:da:bc:30:87:08:90:e0:9a:f8: 92:be:fa:07:c5:3f:c6:84:e9:69:f7:59:85:0a:22:ff:fe:2b: 2e:ab:cc:a8:5a:b6:b2:40:fd:14:62:05:18:be:ab:f4:0e:21: a0:f5:ec:01:2f:1a:a2:a3:7e:84:0e:e8:e0:54:a2:76:78:98: 4a:2f:11:84:a4:71:75:66:54:be:91:42:46:bb:de:b2:8a:cd: 13:ab:41:a7:8a:9b:6a:fa:ac:8b:58:2f:92:50:8c:75:02:f5: 4e:19:d1:8f:15:ec:95:4d:dd:6a:0a:46:f1:3d:40:be:5e:a1: 97:81:85:a0:66:3f:ff:3e:48:a7:53:55:ef:ff:5c:8b:33:bd: 2c:54:94:90:e4:e0:88:51:40:5e:be:50:d4:bd:3c:05:c4:13: 10:2d:48:dc:c4:50:63:58:99:93:03:33:27:f9:44:1b:81:00: 9f:1a:94:30:03:7d:df:b8:7a:41:1b:42:42:1e:bf:16:e7:23: e8:20:1f:43:4d:61:43:21:1d:fd:cf:cf:27:9e:e9:f1:21:59: 4e:d0:83:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjUwNzA1MDU1NzQ4WhcNMjUwNzEyMDU1NzQ4WjAYMRYwFAYD VQQDEw02ODY4YmVkZC00M2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58UDhhOn581YMJjg+dpD9DgnQvBYEZO2716JsaLfmhfEc2zMyXU3HT8lb1sa DgfgG+KqztIJcPYTn3ab6XQmUwnl0ht8GXsiDqICo5iM4mdZzqL2SE99LxwLw0Ai egpNTjBh4634+xJg5IkYaMW28xC7nQgGQeS7yyhaIZVLbJMqb1T4EHyn6cubcQg8 FrjdRYkqLE79l9SMOBCEhQ+ehWh0RqgQltbwBDZO2h+Seggm5uX9ZJViOqH9JO0R us9y5JtAk5GqG69kq3XPdCSjy0nCTQcsiH7yLGj5Ye+j8kXAB4BfAfasagw8BhKL moWh5nBzYppcfjHl21h60lduOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0UMrDO AWyh26if+aEqXjyFe3YKMB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q4OS9EM0VENTg1ODIwQjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpn Yk5ZTkVsOEtrYklfN0RBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ilo++FwBaY8YsVKDov63wHIq/nkvpwcrAQR/PZpKphQXqfK5Usja DcieocnavDCHCJDgmviSvvoHxT/GhOlp91mFCiL//isuq8yoWrayQP0UYgUYvqv0 DiGg9ewBLxqio36EDujgVKJ2eJhKLxGEpHF1ZlS+kUJGu96yis0Tq0Gniptq+qyL WC+SUIx1AvVOGdGPFeyVTd1qCkbxPUC+XqGXgYWgZj//PkinU1Xv/1yLM70sVJSQ 5OCIUUBevlDUvTwFxBMQLUjcxFBjWJmTAzMn+UQbgQCfGpQwA33fuHpBG0JCHr8W 5yPoIB9DTWFDIR39z88nnunxIVlO0IOw -----END CERTIFICATE-----Generated at Mon Jul 7 03:47:45 2025 by rpki-client