$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft File: Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json) Hash identifier: K2hyz15ZgSZJM+07VuZ1Eu3xgu/B3+LhQ6E++nrphoc= Subject key identifier: F5:B2:CA:02:2D:AE:3C:6B:B2:B1:46:2E:6A:42:BB:50:20:D4:D3:80 Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft Manifest number: 027E Signing time: Sat 05 Apr 2025 01:51:26 +0000 Manifest this update: Sat 05 Apr 2025 01:51:26 +0000 Manifest next update: Sat 12 Apr 2025 01:51:26 +0000 Files and hashes: 1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: PQWKD31rsJ1WpCiATpAfRQ4/K5/OymZDdLbPKJ1w6HI=) 2: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: R8BTOL86V2lkOQsbW+rQ8pt2tHQCxt6FoHVMOBZZhL4=) 3: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: 7CKylBpxKWewvw1jHj+wa1g1s5Juhm7MXUJtNktQtY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998 Validity Not Before: Apr 5 01:51:26 2025 GMT Not After : Apr 12 01:51:26 2025 GMT Subject: CN=67f08c9e-c6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:68:5a:bb:bf:4e:d7:6f:c7:37:c1:34:1f: dc:8c:c3:65:e5:65:32:b7:60:ed:15:75:17:78:a8: 92:1c:2e:18:55:29:75:f8:db:45:79:ce:6e:81:e9: e5:51:e4:45:e6:a0:b7:28:33:31:b3:39:27:f2:5a: 3c:3d:3e:46:68:bb:73:cf:0e:d4:92:95:e2:34:76: 82:ad:ae:4b:d9:f8:33:38:6e:9f:ed:13:60:50:98: 47:84:79:0f:7c:34:d3:9f:b0:81:36:79:76:f6:33: af:34:75:9e:3d:05:88:0b:16:91:42:a4:cc:b5:37: f5:9a:6f:5b:67:6e:37:0f:36:4c:d6:60:ae:95:d4: 43:55:56:df:d7:5c:48:f3:97:cd:d9:ff:a2:47:73: e6:38:61:39:76:ec:2f:69:a4:71:03:0d:57:20:ea: 7d:40:4e:80:80:2c:b3:b3:64:8c:20:1c:f7:dd:0b: 88:f5:de:91:01:7f:aa:5a:67:55:19:af:7a:29:31: 4f:a8:b8:38:99:94:89:4c:20:94:18:fd:71:1c:4a: 0f:88:77:34:74:2d:39:30:db:b7:db:95:1f:fb:d7: 60:b5:47:3d:2d:55:60:65:a0:d0:74:75:47:3c:b8: 48:ab:47:cd:2d:ca:b5:1e:ea:7d:5e:c7:d2:a2:6f: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B2:CA:02:2D:AE:3C:6B:B2:B1:46:2E:6A:42:BB:50:20:D4:D3:80 X509v3 Authority Key Identifier: keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:58:91:f2:97:63:9d:35:c4:52:22:12:1c:ec:4b:0d:a3:86: 42:92:57:d6:88:b4:0d:5c:2c:4c:81:c0:be:d2:a7:ef:15:94: c1:06:85:3c:34:5a:91:19:0f:22:c1:59:52:0b:6e:65:59:a9: 41:0a:07:f9:25:37:0a:de:63:81:1b:0b:6d:e8:ca:8c:95:7f: 61:19:a1:da:98:68:f8:84:ee:9a:72:eb:fd:da:04:a9:ff:da: 9c:18:3a:b9:a7:22:d9:e5:fd:d0:8b:ba:24:2d:19:c5:15:d8: 86:24:60:a6:96:e6:c8:04:f6:81:17:14:39:1b:3f:80:d4:63: 2e:c9:2f:d5:72:7a:e8:c5:44:36:0d:5f:54:17:93:51:db:56: df:9a:50:1f:86:fb:0c:3f:3c:0d:20:df:c0:54:0a:55:a0:50: 4c:bd:46:40:f9:eb:c3:7e:1a:5d:02:c3:6d:6a:4a:a2:cc:bc: bd:b1:ca:ae:eb:60:3a:10:c7:d1:7c:b5:b1:58:13:3f:13:da: d5:0d:92:1f:2f:c4:c1:f7:b2:55:b3:89:c3:f8:c4:00:46:4c: f0:e1:09:98:45:3b:11:18:1c:7f:26:2c:1e:5b:f8:07:1c:a2: d1:27:47:79:39:fc:f7:35:13:ac:64:90:89:76:aa:12:d5:82: 4a:49:28:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB MjA5MzU1OEEwHhcNMjUwNDA1MDE1MTI2WhcNMjUwNDEyMDE1MTI2WjAYMRYwFAYD VQQDEw02N2YwOGM5ZS1jNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA401oWru/TtdvxzfBNB/cjMNl5WUyt2DtFXUXeKiSHC4YVSl1+NtFec5ugenl UeRF5qC3KDMxszkn8lo8PT5GaLtzzw7UkpXiNHaCra5L2fgzOG6f7RNgUJhHhHkP fDTTn7CBNnl29jOvNHWePQWICxaRQqTMtTf1mm9bZ243DzZM1mCuldRDVVbf11xI 85fN2f+iR3PmOGE5duwvaaRxAw1XIOp9QE6AgCyzs2SMIBz33QuI9d6RAX+qWmdV Ga96KTFPqLg4mZSJTCCUGP1xHEoPiHc0dC05MNu325Uf+9dgtUc9LVVgZaDQdHVH PLhIq0fNLcq1Hup9XsfSom9FmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWyygIt rjxrsrFGLmpCu1Ag1NOAMB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zQTQxN0Q3NDA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tR T2pGLUtJdlJtNTJpQ1RWWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvWJHyl2OdNcRSIhIc7EsNo4ZCklfWiLQNXCxMgcC+0qfvFZTBBoU8 NFqRGQ8iwVlSC25lWalBCgf5JTcK3mOBGwtt6MqMlX9hGaHamGj4hO6acuv92gSp /9qcGDq5pyLZ5f3Qi7okLRnFFdiGJGCmlubIBPaBFxQ5Gz+A1GMuyS/VcnroxUQ2 DV9UF5NR21bfmlAfhvsMPzwNIN/AVApVoFBMvUZA+evDfhpdAsNtakqizLy9scqu 62A6EMfRfLWxWBM/E9rVDZIfL8TB97JVs4nD+MQARkzw4QmYRTsRGBx/JiweW/gH HKLRJ0d5Ofz3NROsZJCJdqoS1YJKSShL -----END CERTIFICATE-----Generated at Sat Apr 5 21:00:54 2025 by rpki-client