$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: tlBD4KIR1SSkKhMVrBH/9zChn+EjzeY8wPcTi/AjLCw= Subject key identifier: 45:95:56:F3:A3:01:6C:DC:55:54:4D:33:F6:56:6E:97:F9:A6:35:07 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 0187 Signing time: Sat 19 Jul 2025 03:50:13 +0000 Manifest this update: Sat 19 Jul 2025 03:50:12 +0000 Manifest next update: Sat 26 Jul 2025 03:50:12 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: uSpvWHcG4DP6eEcLextbA0+hXzwNbbp5nO+fbFsXouA=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Jul 19 03:50:12 2025 GMT Not After : Jul 26 03:50:12 2025 GMT Subject: CN=687b15f4-6a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:c0:1f:fc:cc:ac:9a:f3:08:b4:25:7f:02: e9:89:63:14:a8:f2:ed:67:1f:b0:b0:27:49:84:a2: fc:3d:3d:15:fe:bc:26:1c:a1:58:f6:69:c9:ba:14: 61:7b:25:5a:e3:87:75:c7:59:3f:2e:3f:eb:f0:6c: 9b:2d:d5:b9:25:3a:c2:07:e0:d2:1f:d6:66:85:fe: c5:f4:10:82:9b:24:84:c2:3c:e8:5b:85:bf:af:27: 19:95:a3:18:c1:8c:f6:bd:94:cc:ad:f0:55:d7:21: d5:91:e0:ce:5b:6c:58:e0:f3:e0:e5:63:ff:73:b9: 95:4a:22:56:65:4a:36:93:20:45:2d:e3:f0:69:e4: d1:e3:4a:73:f4:f3:05:55:52:0f:47:1b:71:0f:c0: 25:f4:e7:62:42:3c:71:96:37:69:eb:9b:80:40:6c: 2d:fe:13:e4:b4:f1:f5:2d:ee:72:51:70:9a:d3:57: fd:d7:a3:06:50:31:74:d5:21:84:b4:f7:59:f0:2b: bf:d6:1c:5b:89:55:da:e5:f0:18:eb:01:d7:ef:a4: ae:f1:4e:16:aa:93:64:a0:93:ab:8e:b9:42:ba:b2: 51:7a:7f:cb:bb:9a:69:ee:d7:22:07:cf:27:80:4a: 53:c7:07:cf:ae:f3:03:78:46:67:5a:47:7f:58:8f: b9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:95:56:F3:A3:01:6C:DC:55:54:4D:33:F6:56:6E:97:F9:A6:35:07 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:23:ca:ad:cc:de:4e:a7:c3:21:c7:73:98:0a:a6:09:35:84: b0:74:7f:0e:6a:e5:89:ea:b7:dd:b4:41:dd:05:05:39:80:ef: 97:2b:e3:2b:ed:8e:6e:1b:58:a3:b6:e2:27:54:47:b8:20:06: aa:01:35:0e:dd:24:2f:ec:72:c3:af:30:5c:e7:71:ab:83:23: 45:a6:3f:77:22:42:e6:57:82:8b:dd:0d:82:fa:74:14:2f:09: e2:07:91:b8:6a:2c:33:3a:c0:bd:22:a7:6c:cd:d3:fc:ec:95: 62:9e:3b:b5:24:58:ea:af:f6:e8:91:06:21:8c:05:14:e8:b1: 62:d1:d2:5f:15:d3:dc:59:5b:d5:dc:41:30:8e:21:af:2f:97: 9d:66:9c:2f:a2:9c:d7:b1:88:15:47:ce:3b:43:57:71:3f:b3: a7:cf:b4:0e:2c:2b:b2:92:b9:f5:56:60:60:93:37:fa:e6:af: 09:25:87:d0:ba:6b:d0:e8:5a:a6:e2:28:07:1a:f5:bf:e2:04: b5:41:41:0b:51:8c:43:57:6c:72:62:2b:85:12:94:04:44:aa: d3:77:7e:15:5c:63:af:3a:46:75:78:db:2d:3b:ca:c6:ac:17: 9e:58:f4:ab:e4:9c:71:ba:aa:8e:7f:ea:a7:12:85:07:fd:6a: 91:15:b1:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUwNzE5MDM1MDEyWhcNMjUwNzI2MDM1MDEyWjAYMRYwFAYD VQQDEw02ODdiMTVmNC02YTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsivAH/zMrJrzCLQlfwLpiWMUqPLtZx+wsCdJhKL8PT0V/rwmHKFY9mnJuhRh eyVa44d1x1k/Lj/r8GybLdW5JTrCB+DSH9Zmhf7F9BCCmySEwjzoW4W/rycZlaMY wYz2vZTMrfBV1yHVkeDOW2xY4PPg5WP/c7mVSiJWZUo2kyBFLePwaeTR40pz9PMF VVIPRxtxD8Al9OdiQjxxljdp65uAQGwt/hPktPH1Le5yUXCa01f916MGUDF01SGE tPdZ8Cu/1hxbiVXa5fAY6wHX76Su8U4WqpNkoJOrjrlCurJRen/Lu5pp7tciB88n gEpTxwfPrvMDeEZnWkd/WI+5uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWVVvOj AWzcVVRNM/ZWbpf5pjUHMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkI8qtzN5Op8Mhx3OYCqYJNYSwdH8OauWJ6rfdtEHdBQU5gO+XK+Mr 7Y5uG1ijtuInVEe4IAaqATUO3SQv7HLDrzBc53GrgyNFpj93IkLmV4KL3Q2C+nQU LwniB5G4aiwzOsC9IqdszdP87JVinju1JFjqr/bokQYhjAUU6LFi0dJfFdPcWVvV 3EEwjiGvL5edZpwvopzXsYgVR847Q1dxP7Onz7QOLCuykrn1VmBgkzf65q8JJYfQ umvQ6Fqm4igHGvW/4gS1QUELUYxDV2xyYiuFEpQERKrTd34VXGOvOkZ1eNstO8rG rBeeWPSr5JxxuqqOf+qnEoUH/WqRFbEX -----END CERTIFICATE-----Generated at Sun Jul 20 02:11:59 2025 by rpki-client