$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: KoxgYChXnpiUbTOhdOWu0srdDZqCmG163ap+cACn8/E= Subject key identifier: B3:57:B4:A5:08:1B:0A:03:65:66:95:27:02:FB:54:DD:93:31:FC:24 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 061D Signing time: Sun 19 Oct 2025 00:25:56 +0000 Manifest this update: Sun 19 Oct 2025 00:25:55 +0000 Manifest next update: Sun 26 Oct 2025 00:25:55 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: 612TxuUbQgY4o3fYtTmkyavG7l62xKW5LAlSzD0MQuA=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: UYRwr7mrGPcB3M4JZ+3w5dX5RLWsIV6TVX8sVBNCGfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Oct 19 00:25:55 2025 GMT Not After : Oct 26 00:25:55 2025 GMT Subject: CN=68f43013-3278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:f2:73:a8:cf:77:85:26:ec:01:ac:62:85: 5d:7a:af:67:b7:cb:87:a5:88:56:ff:e8:b7:fc:ea: 6d:f2:71:84:d8:a8:f0:b7:07:3c:c3:1b:b4:33:36: b3:65:9f:48:7c:1a:4b:21:20:f4:39:3c:88:05:b4: b1:74:c9:7e:7d:e0:4f:f7:60:ea:43:b3:4c:79:70: 68:33:30:07:d1:1b:2c:a0:78:d8:e8:7e:33:1b:24: cf:d2:e3:ac:75:f9:2a:c2:6a:6f:2b:74:0b:37:cc: 59:bf:d2:68:f3:5d:d9:4c:15:9e:61:c7:e3:01:46: 99:72:64:97:1e:8d:51:1d:73:d6:93:fd:16:bc:09: 4f:af:a5:1f:bd:02:7a:07:2c:ac:7e:12:07:b8:45: 92:bf:ac:32:46:f9:88:26:63:3e:bc:bb:86:70:d6: 36:67:7f:b8:73:1e:82:40:68:c3:5b:a6:e3:e1:e8: 4a:f4:f0:34:33:64:3a:1b:6e:bb:c2:9c:a6:c3:46: a4:bd:30:21:82:36:fc:ec:33:de:1b:02:5f:16:69: b1:6e:a5:34:76:77:30:75:36:47:86:f5:b4:eb:07: 27:99:54:61:4b:7d:7a:d6:05:31:be:87:ee:46:ab: e6:00:d6:69:f7:c8:a2:1e:88:bf:e0:df:cb:2b:fe: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:57:B4:A5:08:1B:0A:03:65:66:95:27:02:FB:54:DD:93:31:FC:24 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:8a:94:ac:c6:dd:95:73:1c:0d:2a:13:f0:56:db:0d:4c:5d: a2:9b:ea:d8:43:25:1b:68:68:ff:8e:14:19:92:c0:0f:43:05: f6:5a:26:17:a1:8e:83:a2:2f:93:e5:e2:4e:b1:f1:b3:5e:9a: 2e:50:33:3d:c6:7d:4a:c3:52:da:e3:c0:3f:ca:88:da:b9:8a: 28:41:c4:6f:ef:f4:5a:8f:4a:21:5a:0c:54:69:f5:29:22:b1: c0:43:da:e4:4d:3f:d3:08:d0:23:17:2d:64:99:93:0b:7d:96: d1:40:1d:fc:22:c1:6a:99:0a:30:2d:8d:79:dc:42:d8:8d:4a: 1d:14:5a:0b:e2:34:f3:11:0c:df:61:c2:ae:7c:b4:c0:17:c2: 59:3f:da:2b:bf:eb:fc:1d:0b:46:2b:99:4a:2c:3d:ee:62:c1: 9e:aa:a1:da:07:ab:9c:19:d0:6d:1c:be:9a:4e:1c:4a:70:a3: b9:1d:4b:3e:a1:07:ae:ac:7b:2f:a9:d2:28:75:48:bc:37:a2: 7f:d8:6c:8c:d3:6b:8c:55:2b:de:46:44:f4:89:63:62:6b:6b: ad:20:84:2d:89:d0:f4:70:bc:7d:73:32:19:8e:ac:5c:6d:97: fe:39:aa:60:ee:55:af:3f:48:38:8e:50:ab:65:cf:3e:c4:dd: f9:8f:a9:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUxMDE5MDAyNTU1WhcNMjUxMDI2MDAyNTU1WjAYMRYwFAYD VQQDEw02OGY0MzAxMy0zMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1Dyc6jPd4Um7AGsYoVdeq9nt8uHpYhW/+i3/Opt8nGE2Kjwtwc8wxu0Mzaz ZZ9IfBpLISD0OTyIBbSxdMl+feBP92DqQ7NMeXBoMzAH0RssoHjY6H4zGyTP0uOs dfkqwmpvK3QLN8xZv9Jo813ZTBWeYcfjAUaZcmSXHo1RHXPWk/0WvAlPr6UfvQJ6 ByysfhIHuEWSv6wyRvmIJmM+vLuGcNY2Z3+4cx6CQGjDW6bj4ehK9PA0M2Q6G267 wpymw0akvTAhgjb87DPeGwJfFmmxbqU0dncwdTZHhvW06wcnmVRhS3161gUxvofu RqvmANZp98iiHoi/4N/LK/5iIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNXtKUI GwoDZWaVJwL7VN2TMfwkMB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDipSsxt2VcxwNKhPwVtsNTF2im+rYQyUbaGj/jhQZksAPQwX2WiYX oY6Doi+T5eJOsfGzXpouUDM9xn1Kw1La48A/yojauYooQcRv7/Raj0ohWgxUafUp IrHAQ9rkTT/TCNAjFy1kmZMLfZbRQB38IsFqmQowLY153ELYjUodFFoL4jTzEQzf YcKufLTAF8JZP9orv+v8HQtGK5lKLD3uYsGeqqHaB6ucGdBtHL6aThxKcKO5HUs+ oQeurHsvqdIodUi8N6J/2GyM02uMVSveRkT0iWNia2utIIQtidD0cLx9czIZjqxc bZf+Oapg7lWvP0g4jlCrZc8+xN35j6ka -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:02 2025 by rpki-client