$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: ByoFST9omopXfEfPz8C29behW72m7fW8sotGhmKsQ20= Subject key identifier: 13:03:8A:B5:78:73:AF:52:1B:95:93:EB:33:F0:A1:17:B8:F0:38:B7 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 05D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 05CB Signing time: Mon 12 May 2025 22:51:29 +0000 Manifest this update: Mon 12 May 2025 22:51:28 +0000 Manifest next update: Mon 19 May 2025 22:51:28 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: unXlmvJVYj9j5RURIPXkFvfbmaz/sbyV4ISQD3xGwfQ=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: kP9B9Apke28RlHv6p4FMMVLBhFiruagPm8D1uCysx10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1494 (0x5d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: May 12 22:51:28 2025 GMT Not After : May 19 22:51:28 2025 GMT Subject: CN=68227b70-34b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:38:10:18:bc:1e:41:54:59:1e:ea:4c:a0: d7:b5:c1:10:ca:1b:34:69:0f:45:17:98:42:59:70: 90:e4:8b:79:3a:ea:11:75:e5:c4:fb:d8:b5:54:63: 6b:eb:f8:14:38:93:08:2e:52:71:a6:ed:0c:a0:d4: 27:a9:53:43:bf:c3:64:15:1c:2d:bb:04:24:7d:6f: 30:87:4f:b1:27:94:31:ad:7f:c2:32:6f:c2:c3:7d: 22:f5:38:7a:13:77:71:c8:b8:49:93:e9:10:73:f7: 31:2a:29:77:54:af:bb:cf:d8:6a:e4:39:92:e0:15: da:37:0f:1e:fd:3f:6c:97:5c:49:e5:92:6d:1d:31: 5a:18:71:a0:03:63:b3:90:4d:34:b2:52:6c:4b:52: 82:cb:08:e1:ea:23:52:1e:60:0b:ef:2d:24:0a:20: 93:39:0e:b4:38:47:fb:fd:08:d1:10:2e:52:e6:cb: c1:d7:44:84:3e:02:2a:9c:e2:22:1f:70:a0:3e:a9: c0:a2:ce:12:46:97:a3:24:18:d1:c7:0d:ea:59:f6: 21:10:4c:91:a8:5a:cc:2e:28:40:b0:ef:24:7e:7b: c2:f1:e4:0c:53:e4:b0:9d:0a:71:c3:fd:6e:eb:91: a9:7f:19:4e:02:4d:fd:99:99:2b:18:22:91:0b:20: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:03:8A:B5:78:73:AF:52:1B:95:93:EB:33:F0:A1:17:B8:F0:38:B7 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:52:be:e5:a2:58:23:f5:e1:4a:ac:1a:b9:5e:b2:e8:86:21: ed:d5:67:91:de:20:60:09:b9:34:b6:c6:0c:09:e6:88:b2:b4: 4f:06:1b:82:0f:95:49:4f:99:59:e3:08:88:b1:33:a1:f1:69: 8e:66:6e:26:b6:82:a0:94:5c:8c:e8:38:04:24:ef:d2:9c:ee: 6c:1b:a9:1a:74:52:5b:65:9a:14:cb:9f:e3:44:5e:3c:d0:42: be:ea:db:ad:82:e2:16:5c:69:9a:6a:3b:bc:a2:89:51:51:a9: 4e:76:dd:11:cf:6f:58:29:a8:21:f9:94:a3:c9:af:b1:4c:33: f5:60:75:2d:59:f3:f3:94:c2:c2:a3:cc:5e:e9:35:76:63:96: 2f:43:7a:e2:fe:7b:88:6f:1e:45:2d:20:6e:69:c5:6c:5b:1f: 70:24:fb:a7:27:fb:40:19:ff:21:db:8b:f2:e6:a1:de:66:18: 3a:82:4d:19:a0:ee:79:d2:6d:c3:a5:38:a1:b7:e8:d9:fb:b3: 38:50:84:33:29:de:14:74:ff:ff:51:92:c9:a0:0a:96:af:4c: aa:10:f0:b7:17:6a:64:5f:f1:56:2c:1d:6e:c6:01:9b:e3:47: b0:73:1f:37:73:8d:c2:ba:a3:21:33:ef:4c:d6:43:9b:cb:13: ec:22:7f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUwNTEyMjI1MTI4WhcNMjUwNTE5MjI1MTI4WjAYMRYwFAYD VQQDEw02ODIyN2I3MC0zNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllk4EBi8HkFUWR7qTKDXtcEQyhs0aQ9FF5hCWXCQ5It5OuoRdeXE+9i1VGNr 6/gUOJMILlJxpu0MoNQnqVNDv8NkFRwtuwQkfW8wh0+xJ5QxrX/CMm/Cw30i9Th6 E3dxyLhJk+kQc/cxKil3VK+7z9hq5DmS4BXaNw8e/T9sl1xJ5ZJtHTFaGHGgA2Oz kE00slJsS1KCywjh6iNSHmAL7y0kCiCTOQ60OEf7/QjREC5S5svB10SEPgIqnOIi H3CgPqnAos4SRpejJBjRxw3qWfYhEEyRqFrMLihAsO8kfnvC8eQMU+SwnQpxw/1u 65GpfxlOAk39mZkrGCKRCyAiSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMDirV4 c69SG5WT6zPwoRe48Di3MB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNUr7lolgj9eFKrBq5XrLohiHt1WeR3iBgCbk0tsYMCeaIsrRPBhuC D5VJT5lZ4wiIsTOh8WmOZm4mtoKglFyM6DgEJO/SnO5sG6kadFJbZZoUy5/jRF48 0EK+6tutguIWXGmaaju8oolRUalOdt0Rz29YKagh+ZSjya+xTDP1YHUtWfPzlMLC o8xe6TV2Y5YvQ3ri/nuIbx5FLSBuacVsWx9wJPunJ/tAGf8h24vy5qHeZhg6gk0Z oO550m3DpTiht+jZ+7M4UIQzKd4UdP//UZLJoAqWr0yqEPC3F2pkX/FWLB1uxgGb 40ewcx83c43CuqMhM+9M1kObyxPsIn99 -----END CERTIFICATE-----Generated at Wed May 14 03:40:12 2025 by rpki-client