$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: zmu23OgF7UaomOIm9acAn6u/kQphXpFrD+beWZ7AoSk= Subject key identifier: AA:2E:5C:AD:00:7A:3F:45:84:8B:76:40:27:B2:68:05:55:C9:A0:58 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 0600 Signing time: Fri 22 Aug 2025 23:05:48 +0000 Manifest this update: Fri 22 Aug 2025 23:05:47 +0000 Manifest next update: Fri 29 Aug 2025 23:05:47 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: YUKH0JDH6M+m3XirUv6jePViVUq4xY7yl/6G+36WVrc=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: UYRwr7mrGPcB3M4JZ+3w5dX5RLWsIV6TVX8sVBNCGfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Aug 22 23:05:47 2025 GMT Not After : Aug 29 23:05:47 2025 GMT Subject: CN=68a8f7cb-4ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:a2:83:ae:9b:3d:a6:75:64:ab:3f:4d:d4: 39:5b:2e:dd:09:56:ea:43:5f:51:76:47:ee:4f:15: 8d:85:2f:2c:e9:22:af:81:6b:5a:0d:5e:aa:02:70: 68:1e:cb:a3:9e:45:11:c2:db:6b:be:f4:eb:ee:4a: 65:2c:c6:27:27:3f:b6:e7:2f:56:bd:d5:a3:d7:65: ab:33:13:7f:c8:61:81:83:69:be:d2:51:5e:89:e8: 57:21:a0:bd:5a:6b:88:05:f5:6c:f3:10:73:69:29: b9:07:f3:39:a6:c5:e8:51:ab:be:91:6d:ac:13:f9: 17:95:3d:70:84:af:26:63:ca:b0:b1:3c:22:5d:f6: 46:70:c5:1b:55:eb:18:72:d3:4b:c8:9d:6c:4a:ab: 63:44:96:79:11:48:8a:d3:11:dd:e2:10:47:af:61: 26:ca:63:9c:82:74:74:6a:ad:ca:09:cb:16:ec:4f: 3c:9e:d3:2c:f4:ca:ed:9e:45:8a:b5:04:c7:11:3f: 58:52:a0:06:5c:65:ca:31:67:06:8e:0f:04:64:a3: 36:9f:b5:be:0e:fd:83:7d:3f:27:01:1e:33:47:10: db:05:09:f6:21:dd:cf:0a:81:b0:ef:ba:20:5d:04: 1d:e6:70:e2:01:2e:76:02:39:b6:0a:1f:51:ae:34: 89:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2E:5C:AD:00:7A:3F:45:84:8B:76:40:27:B2:68:05:55:C9:A0:58 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ab:2c:6f:c8:84:1e:c7:20:53:18:a9:89:2e:38:32:4a:ab: 32:58:65:6e:3e:b1:91:69:17:d6:23:71:d7:9f:29:c3:b4:a3: 3a:dd:43:ab:c0:e6:6c:11:15:9a:29:bb:00:05:e4:a9:a8:0c: 08:d2:d7:b6:17:d2:11:38:93:e7:85:98:df:d3:a0:30:25:93: 70:60:f6:6c:47:2b:fd:4b:83:25:66:0c:1e:e1:56:53:a7:68: 2d:d9:1c:49:62:d9:60:6e:6b:cd:48:2f:f6:cb:44:cf:19:c9: 57:a2:08:d0:20:75:78:93:ec:69:29:8f:7f:49:cb:27:d3:bb: bc:0d:34:43:cd:37:5a:a2:23:6e:b2:49:88:d8:82:5e:6b:13: bc:9e:56:e5:00:6f:03:9e:ed:4c:c2:84:36:13:70:8c:fd:86: 68:9b:95:e2:ee:6b:ae:45:1b:b5:90:b4:57:57:2b:ed:41:e6: a7:f5:fd:d6:04:ba:53:2d:7d:6e:be:95:36:09:f8:4f:12:09: d2:dc:33:f4:2e:86:0d:b0:f2:4f:4b:36:e2:88:f3:81:09:03: 4a:f4:d8:55:50:f0:84:d4:ce:2f:f7:9a:66:2b:a0:59:0c:93: 18:60:e7:3f:b0:b7:0b:59:80:59:b9:b2:cd:cc:b7:6f:34:a9: 33:62:48:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUwODIyMjMwNTQ3WhcNMjUwODI5MjMwNTQ3WjAYMRYwFAYD VQQDEw02OGE4ZjdjYi00YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCaig66bPaZ1ZKs/TdQ5Wy7dCVbqQ19RdkfuTxWNhS8s6SKvgWtaDV6qAnBo HsujnkURwttrvvTr7kplLMYnJz+25y9WvdWj12WrMxN/yGGBg2m+0lFeiehXIaC9 WmuIBfVs8xBzaSm5B/M5psXoUau+kW2sE/kXlT1whK8mY8qwsTwiXfZGcMUbVesY ctNLyJ1sSqtjRJZ5EUiK0xHd4hBHr2EmymOcgnR0aq3KCcsW7E88ntMs9MrtnkWK tQTHET9YUqAGXGXKMWcGjg8EZKM2n7W+Dv2DfT8nAR4zRxDbBQn2Id3PCoGw77og XQQd5nDiAS52Ajm2Ch9RrjSJMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKouXK0A ej9FhIt2QCeyaAVVyaBYMB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyqyxvyIQexyBTGKmJLjgySqsyWGVuPrGRaRfWI3HXnynDtKM63UOr wOZsERWaKbsABeSpqAwI0te2F9IROJPnhZjf06AwJZNwYPZsRyv9S4MlZgwe4VZT p2gt2RxJYtlgbmvNSC/2y0TPGclXogjQIHV4k+xpKY9/Scsn07u8DTRDzTdaoiNu skmI2IJeaxO8nlblAG8Dnu1MwoQ2E3CM/YZom5Xi7muuRRu1kLRXVyvtQean9f3W BLpTLX1uvpU2CfhPEgnS3DP0LoYNsPJPSzbiiPOBCQNK9NhVUPCE1M4v95pmK6BZ DJMYYOc/sLcLWYBZubLNzLdvNKkzYkig -----END CERTIFICATE-----Generated at Sun Aug 24 04:59:07 2025 by rpki-client