$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: 76m17ninvf64MR0zuCMf3zTK/+FDliJzm3Xo7Ynu2/k= Subject key identifier: 45:C3:1D:B6:9D:2F:43:60:20:40:8D:8E:07:01:F4:DB:BF:E0:C3:41 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C51 Signing time: Thu 18 Sep 2025 18:48:16 +0000 Manifest this update: Thu 18 Sep 2025 18:48:16 +0000 Manifest next update: Thu 25 Sep 2025 18:48:16 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: mX8ak74D1omKibA/ECx12t/ocGZXGn8MGSE0foEAGBc=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Sep 18 18:48:16 2025 GMT Not After : Sep 25 18:48:16 2025 GMT Subject: CN=68cc53f0-3f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:c5:6c:ed:71:6b:c0:fa:2c:db:0c:31:7e: 0c:ad:16:9b:6d:77:69:c5:f8:26:e0:b8:17:45:00: 58:e8:af:2c:80:d1:78:11:8a:cb:58:e6:82:f5:d9: a4:e3:62:bf:44:21:b9:e0:90:62:e1:c3:30:43:81: 7d:75:c4:17:bf:b1:6b:19:49:2e:93:37:44:6d:b8: 96:1d:c2:41:53:3a:68:fc:5d:95:5d:53:63:1b:90: 0f:99:fd:e0:1c:c5:9a:7e:98:6b:ed:17:a0:8a:51: e8:34:56:2d:52:c1:e2:e3:a9:a1:af:6a:45:5a:fc: 58:c9:6f:15:b0:ae:a2:3c:b2:8f:be:2c:bb:05:cc: 97:f8:37:1e:ad:84:4b:f0:f1:c0:47:97:91:31:5a: 56:b9:46:eb:3f:29:17:17:08:8d:30:9f:49:a8:29: 50:4d:a6:b6:3b:33:51:85:8d:c8:da:18:97:c1:2b: 0d:97:c4:77:2e:62:0b:c3:f3:e9:cf:98:ce:94:d0: b8:1a:8f:d5:43:64:72:a2:51:df:19:ca:98:bb:03: 77:0f:4f:0b:91:6d:f2:c1:c8:d0:f9:c0:14:ab:cd: ff:b5:e4:88:cc:ea:78:4e:ad:e6:23:96:fb:5f:80: ad:e2:5b:36:12:00:29:36:b9:af:9c:62:a1:a7:05: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C3:1D:B6:9D:2F:43:60:20:40:8D:8E:07:01:F4:DB:BF:E0:C3:41 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:88:1d:69:2f:1f:19:ee:86:24:ec:4c:6d:0e:ae:1e:fe:51: 75:28:29:e7:2d:cf:d0:8c:60:c1:80:f0:8c:2f:34:01:b7:e1: 43:52:02:da:37:69:ec:15:45:a5:16:5b:71:e0:ff:23:77:f0: 22:8a:b7:81:67:de:cf:7c:fc:29:ac:58:e2:30:da:9a:c7:bb: 01:c7:e6:9c:2e:eb:8a:47:b5:e9:87:44:5c:20:c3:ba:57:27: 89:f1:a1:55:8f:ec:fa:97:32:39:ec:32:06:96:8c:eb:f6:43: 8e:ad:c2:db:bc:21:81:52:61:a6:b8:7a:3d:2f:9b:31:05:a5: 04:a7:33:d9:88:29:b3:d8:2e:be:f8:07:d7:54:2c:72:28:10: 3a:0c:dd:f5:18:7d:c9:f0:30:10:8d:7e:62:04:1d:7e:77:37: d1:5e:7a:f9:74:06:93:dc:1f:90:6b:b3:68:d5:8b:b0:8c:20: b6:63:c2:f5:0f:be:a8:1c:ee:e7:df:39:3e:1b:32:85:18:6d: fd:ac:14:44:ad:46:da:70:f9:c6:4d:70:d5:8c:fc:f3:01:15: 0e:8d:9d:10:29:66:8b:5e:b9:07:65:d7:5d:a2:0f:06:8c:16: a3:5a:a9:d1:cb:40:66:fd:19:33:8b:c1:58:c4:f7:fc:ee:b8: 8a:a5:43:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUwOTE4MTg0ODE2WhcNMjUwOTI1MTg0ODE2WjAYMRYwFAYD VQQDEw02OGNjNTNmMC0zZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z/FbO1xa8D6LNsMMX4MrRabbXdpxfgm4LgXRQBY6K8sgNF4EYrLWOaC9dmk 42K/RCG54JBi4cMwQ4F9dcQXv7FrGUkukzdEbbiWHcJBUzpo/F2VXVNjG5APmf3g HMWafphr7RegilHoNFYtUsHi46mhr2pFWvxYyW8VsK6iPLKPviy7BcyX+DcerYRL 8PHAR5eRMVpWuUbrPykXFwiNMJ9JqClQTaa2OzNRhY3I2hiXwSsNl8R3LmILw/Pp z5jOlNC4Go/VQ2RyolHfGcqYuwN3D08LkW3ywcjQ+cAUq83/teSIzOp4Tq3mI5b7 X4Ct4ls2EgApNrmvnGKhpwVFrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXDHbad L0NgIECNjgcB9Nu/4MNBMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAiB1pLx8Z7oYk7ExtDq4e/lF1KCnnLc/QjGDBgPCMLzQBt+FDUgLa N2nsFUWlFltx4P8jd/AiireBZ97PfPwprFjiMNqax7sBx+acLuuKR7Xph0RcIMO6 VyeJ8aFVj+z6lzI57DIGlozr9kOOrcLbvCGBUmGmuHo9L5sxBaUEpzPZiCmz2C6+ +AfXVCxyKBA6DN31GH3J8DAQjX5iBB1+dzfRXnr5dAaT3B+Qa7No1YuwjCC2Y8L1 D76oHO7n3zk+GzKFGG39rBRErUbacPnGTXDVjPzzARUOjZ0QKWaLXrkHZdddog8G jBajWqnRy0Bm/Rkzi8FYxPf87riKpUPk -----END CERTIFICATE-----Generated at Fri Sep 19 07:51:34 2025 by rpki-client