$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: hq3pPRnH9GEuCcF6PhM/EfiGykDIurVeZ7uYHatsRK8= Subject key identifier: DF:B4:64:0F:1C:FB:C6:56:89:FF:0B:B1:97:8A:2B:10:AD:40:CA:76 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 05EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 05E4 Signing time: Wed 02 Jul 2025 23:18:01 +0000 Manifest this update: Wed 02 Jul 2025 23:18:01 +0000 Manifest next update: Wed 09 Jul 2025 23:18:01 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: 4SUBFg+yoPtotGXAyOcYvroKWlMlDHnp82Z9ZVy9Av8=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: kP9B9Apke28RlHv6p4FMMVLBhFiruagPm8D1uCysx10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1519 (0x5ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Jul 2 23:18:01 2025 GMT Not After : Jul 9 23:18:01 2025 GMT Subject: CN=6865be29-b1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:08:d8:76:07:a8:96:7d:1f:bf:52:d4:b9: 00:86:19:a5:69:db:29:a5:62:eb:1c:a1:ce:e8:0c: 72:c4:67:f7:4e:ed:9d:80:16:9e:d1:ab:0a:16:00: a1:94:46:6a:c1:17:f8:ad:40:ad:b1:dd:1f:86:b8: 14:84:21:b1:df:1c:fb:0d:13:c5:a8:66:3b:cf:08: 44:49:38:47:de:75:4a:50:be:0a:a1:3e:9b:97:09: 87:de:e8:5c:88:29:b4:d7:98:a3:c1:bc:a2:6a:cf: 0c:62:15:61:b7:0b:57:b6:1a:60:f0:12:8d:28:36: 7c:a3:f2:56:b1:b1:8f:13:8a:53:a3:6f:12:79:60: 43:83:c3:5a:b9:9a:0b:6c:c2:d5:fa:52:34:02:98: ad:b0:49:49:94:eb:f5:74:c0:cc:b2:c5:c2:70:16: b4:95:b6:e5:bb:83:0f:50:59:0f:cf:74:ba:2a:e6: b8:8d:d6:39:fa:88:93:14:c3:2e:50:55:84:6e:66: 76:80:db:da:eb:60:ac:0c:a5:e9:1f:91:4e:ef:62: 7d:1f:95:2d:13:11:3e:26:21:a4:dc:28:f2:ec:f4: 5a:14:e9:23:a1:9a:db:a5:12:24:57:03:7b:65:01: 53:d7:2a:7f:d1:fe:e3:02:f8:0a:f0:fa:cd:f0:2e: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:64:0F:1C:FB:C6:56:89:FF:0B:B1:97:8A:2B:10:AD:40:CA:76 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:be:16:e3:d2:00:48:60:00:f7:3a:6b:80:f2:06:20:39:47: e1:eb:46:e6:c5:8a:ea:45:8a:ec:a2:4b:fa:05:2c:81:c2:6e: 98:bf:58:bb:1a:e6:d2:29:43:5a:ec:3b:06:dd:52:75:f7:e8: 63:2c:df:1e:cb:cf:89:56:bc:86:27:7f:e8:98:6e:b8:27:6f: d7:ba:51:71:77:34:d8:98:ac:7d:17:05:60:9d:f2:14:11:d2: 11:52:83:d9:4b:52:06:f5:e1:f9:48:54:27:e5:33:d9:68:5b: 55:db:4f:d8:ce:e1:ff:4a:48:37:19:40:a0:5f:e1:6c:25:63: b3:d5:14:70:22:01:18:32:0c:51:68:4e:db:4a:ea:42:b5:82: 6d:54:0d:a8:50:cb:30:97:8f:13:ed:05:bb:3d:92:74:23:c4: 08:7e:e5:29:39:35:95:40:d9:8a:cc:63:33:14:eb:e8:a3:d5: e5:54:4a:d6:67:33:36:b1:a9:ed:a8:49:53:cb:ba:ab:17:50: 87:46:5e:53:1a:b4:38:ce:cc:a9:49:51:fc:29:f7:5d:9e:03: d0:fb:1c:47:a6:6b:38:04:d6:83:44:29:e5:a0:93:b1:d1:d5: e8:71:ee:81:0e:e3:8c:f8:fd:f0:54:4e:78:2b:67:e6:7d:3d: c9:4f:aa:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUwNzAyMjMxODAxWhcNMjUwNzA5MjMxODAxWjAYMRYwFAYD VQQDEw02ODY1YmUyOS1iMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlMI2HYHqJZ9H79S1LkAhhmladsppWLrHKHO6AxyxGf3Tu2dgBae0asKFgCh lEZqwRf4rUCtsd0fhrgUhCGx3xz7DRPFqGY7zwhESThH3nVKUL4KoT6blwmH3uhc iCm015ijwbyias8MYhVhtwtXthpg8BKNKDZ8o/JWsbGPE4pTo28SeWBDg8NauZoL bMLV+lI0ApitsElJlOv1dMDMssXCcBa0lbblu4MPUFkPz3S6Kua4jdY5+oiTFMMu UFWEbmZ2gNva62CsDKXpH5FO72J9H5UtExE+JiGk3Cjy7PRaFOkjoZrbpRIkVwN7 ZQFT1yp/0f7jAvgK8PrN8C52DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+0ZA8c +8ZWif8LsZeKKxCtQMp2MB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHvhbj0gBIYAD3OmuA8gYgOUfh60bmxYrqRYrsokv6BSyBwm6Yv1i7 GubSKUNa7DsG3VJ19+hjLN8ey8+JVryGJ3/omG64J2/XulFxdzTYmKx9FwVgnfIU EdIRUoPZS1IG9eH5SFQn5TPZaFtV20/YzuH/Skg3GUCgX+FsJWOz1RRwIgEYMgxR aE7bSupCtYJtVA2oUMswl48T7QW7PZJ0I8QIfuUpOTWVQNmKzGMzFOvoo9XlVErW ZzM2santqElTy7qrF1CHRl5TGrQ4zsypSVH8KfddngPQ+xxHpms4BNaDRCnloJOx 0dXoce6BDuOM+P3wVE54K2fmfT3JT6p4 -----END CERTIFICATE-----Generated at Thu Jul 3 23:33:03 2025 by rpki-client