$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: mkYJDgqrnkXYZny8l42zuvrPsWGxDBOMKZhNRQss4N4= Subject key identifier: 5C:94:A5:C0:09:C3:61:84:94:B9:68:B1:37:B0:8E:2F:65:89:DB:08 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C18 Signing time: Fri 30 May 2025 18:53:16 +0000 Manifest this update: Fri 30 May 2025 18:53:15 +0000 Manifest next update: Fri 06 Jun 2025 18:53:15 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: kFABCcoRa9VlKhf+ZeqYucc+aemgXZGtFIeqVocBt8E=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: May 30 18:53:15 2025 GMT Not After : Jun 6 18:53:15 2025 GMT Subject: CN=6839fe9c-2ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:c8:52:10:b1:42:0d:62:a7:ad:25:a2:5e: 92:0f:59:3d:59:40:dd:03:51:83:9f:35:91:02:a9: 4d:d4:8e:99:2e:0e:5a:cc:c2:7a:ab:06:3a:81:40: 64:ea:4c:d5:d5:6c:46:6c:3d:36:d3:1b:6a:c0:f3: 97:5f:68:f7:6f:de:9d:5d:3e:56:aa:78:ae:c9:eb: 0f:e6:a9:50:a6:67:1e:17:9e:ed:0d:fc:8f:74:d4: 6d:ff:92:58:d8:7d:9d:8a:cc:83:10:94:9f:4e:22: e2:13:7d:e5:40:cf:ab:09:01:d9:b5:88:eb:b5:1d: 37:e0:ec:33:a2:11:7e:8f:68:84:28:70:dd:d6:10: 94:ac:b8:42:2b:bd:12:9f:94:f3:2f:21:a8:7a:8c: 29:fc:f8:f2:16:7f:67:c4:ef:e3:26:35:58:12:ef: fb:bc:5a:73:a6:94:b8:cd:f6:1a:db:fb:14:94:6b: 98:bc:ef:7e:38:18:e6:bc:75:33:05:fa:cb:b7:c0: 33:09:8e:55:19:8e:a2:91:9a:f0:ef:24:2f:ed:1e: e5:7a:03:05:85:84:40:48:8f:af:ec:80:8f:83:87: 50:28:50:f5:ec:66:83:05:33:33:be:a6:11:c7:2d: 9a:4b:75:c1:0c:05:d8:25:39:a4:7d:5e:dc:4d:f4: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:94:A5:C0:09:C3:61:84:94:B9:68:B1:37:B0:8E:2F:65:89:DB:08 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:65:a2:81:0a:9d:35:8a:f7:0c:1c:3e:1c:ea:cf:33:2a:ed: 83:12:c2:31:8f:7d:36:2e:e0:7b:48:d0:4e:a6:29:66:29:ae: 84:e3:1a:2e:42:62:df:39:09:b1:e3:52:2d:8f:9b:a1:0c:62: 52:af:70:f6:89:28:17:74:4e:c2:b4:a3:da:9e:be:ee:2f:88: f3:0d:dd:53:90:bd:9d:3f:2f:45:48:aa:fe:ae:d4:03:a2:3f: 90:f6:be:fc:4a:85:32:6a:54:5d:3d:c3:c0:1e:fd:75:94:c0: 34:12:ec:e5:cd:17:b1:eb:77:33:3c:c4:13:dc:cc:c1:90:86: 58:ed:51:ce:e0:d8:be:82:79:ab:55:d5:7c:fa:6f:28:4a:10: a5:2c:65:c5:ef:a7:1f:45:ba:b3:3f:8d:72:78:fc:0c:c1:c2: e2:e8:18:79:bb:e8:1e:60:70:9c:e3:c9:1b:70:6d:8e:4e:92: cb:e8:fe:cd:df:70:14:45:4f:ca:32:9c:26:0d:f1:49:a2:30: 3a:c3:98:07:ae:ed:ad:e2:84:11:dc:86:bc:47:49:bc:ea:15: 9d:df:5b:78:45:43:d7:aa:56:8f:9b:e1:e0:aa:ca:2d:a6:9e: 55:5f:4d:4a:41:cd:d3:72:6b:37:f2:32:2b:f9:11:f8:fd:c3: 4d:b1:84:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUwNTMwMTg1MzE1WhcNMjUwNjA2MTg1MzE1WjAYMRYwFAYD VQQDEw02ODM5ZmU5Yy0yZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4efIUhCxQg1ip60lol6SD1k9WUDdA1GDnzWRAqlN1I6ZLg5azMJ6qwY6gUBk 6kzV1WxGbD020xtqwPOXX2j3b96dXT5WqniuyesP5qlQpmceF57tDfyPdNRt/5JY 2H2disyDEJSfTiLiE33lQM+rCQHZtYjrtR034OwzohF+j2iEKHDd1hCUrLhCK70S n5TzLyGoeowp/PjyFn9nxO/jJjVYEu/7vFpzppS4zfYa2/sUlGuYvO9+OBjmvHUz BfrLt8AzCY5VGY6ikZrw7yQv7R7legMFhYRASI+v7ICPg4dQKFD17GaDBTMzvqYR xy2aS3XBDAXYJTmkfV7cTfSLHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyUpcAJ w2GElLlosTewji9lidsIMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfZaKBCp01ivcMHD4c6s8zKu2DEsIxj302LuB7SNBOpilmKa6E4xou QmLfOQmx41Itj5uhDGJSr3D2iSgXdE7CtKPanr7uL4jzDd1TkL2dPy9FSKr+rtQD oj+Q9r78SoUyalRdPcPAHv11lMA0EuzlzRex63czPMQT3MzBkIZY7VHO4Ni+gnmr VdV8+m8oShClLGXF76cfRbqzP41yePwMwcLi6Bh5u+geYHCc48kbcG2OTpLL6P7N 33AURU/KMpwmDfFJojA6w5gHru2t4oQR3Ia8R0m86hWd31t4RUPXqlaPm+Hgqsot pp5VX01KQc3Tcms38jIr+RH4/cNNsYQw -----END CERTIFICATE-----Generated at Sat May 31 17:56:24 2025 by rpki-client