$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: mivmJUcgADVLWTGOlN9C0r7GrxQl0ZEkJBwTl9uxRXI= Subject key identifier: 45:FD:32:00:D3:37:43:5D:A0:41:A5:A4:E3:3A:60:54:50:90:4D:02 Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: AF Signing time: Fri 05 Sep 2025 06:31:08 +0000 Manifest this update: Fri 05 Sep 2025 06:31:08 +0000 Manifest next update: Fri 12 Sep 2025 06:31:08 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: lMZMJfSFcXoLxCqEanKidgb7j21aM/N62kia0vasosE=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: jhgv9aU9R5cyiS+8jQVzOexFGNK8rhaSdkQTaqCgMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Sep 5 06:31:08 2025 GMT Not After : Sep 12 06:31:08 2025 GMT Subject: CN=68ba83ac-4c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:f2:b2:c6:c5:7a:19:7f:b6:12:f5:7a:56: 4f:1f:c7:01:d3:f1:7c:84:8a:5f:48:85:f9:a7:2d: 79:be:77:6e:2a:db:09:0f:d5:3e:ef:d2:3c:bd:2c: 30:33:f1:f0:9b:3f:b2:b5:57:4b:fe:fc:0e:b4:49: 71:57:c9:19:9f:8d:92:2b:7f:24:54:cf:0f:1e:a3: 73:94:43:e7:5b:ad:87:68:a2:1b:d8:64:8d:3b:09: 30:47:16:68:17:e2:ab:29:7d:99:b3:13:07:30:82: a2:2f:4d:44:f2:de:32:4e:b1:fb:8f:41:29:43:4f: f9:46:10:3d:90:25:82:47:8a:d1:f8:77:a3:c4:3a: 21:20:1c:bd:6b:03:e7:54:6a:7c:58:14:74:f6:1f: 10:19:f0:60:55:2b:a8:f7:4b:cd:97:67:f6:2a:e9: 2b:16:f9:aa:3d:39:d3:f3:30:18:cf:a4:c1:da:21: dc:3c:9b:e7:98:aa:5b:61:41:36:f9:58:3d:1f:d0: c5:fa:b8:23:f7:81:bd:3a:71:ad:1e:19:2f:f9:ca: e9:7f:38:05:2f:47:8a:3f:21:3a:d1:29:dd:17:7b: ef:79:29:f6:3e:52:7a:63:3e:7d:c6:5a:9a:89:5c: 79:10:54:8e:9f:11:ea:0f:0d:3d:d7:45:c7:d4:7e: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FD:32:00:D3:37:43:5D:A0:41:A5:A4:E3:3A:60:54:50:90:4D:02 X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:16:26:90:7c:5e:0f:90:c3:4f:3c:37:ce:8e:80:8d:aa:9f: ce:f3:49:c5:2c:dc:52:9d:df:26:79:d0:a0:dd:a7:ff:f8:4c: e9:2c:3f:40:6b:8a:5d:1f:c1:97:79:a1:3c:bd:50:f2:ea:52: 2c:6f:72:e7:3e:0f:06:9f:8f:9a:f3:70:f2:bc:fd:75:b1:40: 92:a1:ab:c3:0d:34:67:19:01:fc:d7:7f:09:d2:dc:00:6b:7b: a0:a3:e0:68:64:56:61:86:9a:b6:65:3c:45:fa:3b:6a:a4:e2: 1f:55:f0:18:9f:e7:83:2b:53:0d:ce:cd:dd:53:96:0e:7b:b2: 09:d1:3b:76:c4:4c:f9:52:86:22:a2:29:e3:24:03:c1:44:af: f7:7a:75:a8:79:35:31:0a:61:a0:5f:61:5c:ba:f5:bb:cb:d6: e7:96:d6:1c:e3:ba:f3:87:21:d5:3c:9c:f5:ec:ba:42:64:f0: 85:32:12:ee:69:de:b4:b9:ea:ac:11:da:b4:bf:6c:e3:c3:a3: c2:08:a7:0c:32:4e:46:c3:8b:93:11:12:80:11:03:15:a0:e7: a7:97:06:40:43:95:19:6b:8e:2f:9b:34:9f:27:10:b0:47:cc: bf:e9:78:0d:0c:f3:4a:8a:cb:05:4e:22:64:1e:d9:44:6c:33: 9e:49:6f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBGQ0IxMTAvBgNVBAUTKDNDQjRBOTAwNDE4QkU5RENEQzVFMDRBMEJBNjJBODRE QTg1RkU2RTAwHhcNMjUwOTA1MDYzMTA4WhcNMjUwOTEyMDYzMTA4WjAYMRYwFAYD VQQDEw02OGJhODNhYy00Yzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC3yssbFehl/thL1elZPH8cB0/F8hIpfSIX5py15vnduKtsJD9U+79I8vSww M/Hwmz+ytVdL/vwOtElxV8kZn42SK38kVM8PHqNzlEPnW62HaKIb2GSNOwkwRxZo F+KrKX2ZsxMHMIKiL01E8t4yTrH7j0EpQ0/5RhA9kCWCR4rR+HejxDohIBy9awPn VGp8WBR09h8QGfBgVSuo90vNl2f2KukrFvmqPTnT8zAYz6TB2iHcPJvnmKpbYUE2 +Vg9H9DF+rgj94G9OnGtHhkv+crpfzgFL0eKPyE60SndF3vveSn2PlJ6Yz59xlqa iVx5EFSOnxHqDw0910XH1H4YyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEX9MgDT N0NdoEGlpOM6YFRQkE0CMB8GA1UdIwQYMBaAFDy0qQBBi+nc3F4EoLpiqE2oX+bg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEZDQi84OUM3OEY3MDgx NjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZkemNYZ1NndW1Lb1RhaGY1 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEZDQi84OUM3OEY3MDgxNjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZk emNYZ1NndW1Lb1RhaGY1dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCFiaQfF4PkMNPPDfOjoCNqp/O80nFLNxSnd8medCg3af/+EzpLD9A a4pdH8GXeaE8vVDy6lIsb3LnPg8Gn4+a83DyvP11sUCSoavDDTRnGQH8138J0twA a3ugo+BoZFZhhpq2ZTxF+jtqpOIfVfAYn+eDK1MNzs3dU5YOe7IJ0Tt2xEz5UoYi oinjJAPBRK/3enWoeTUxCmGgX2FcuvW7y9bnltYc47rzhyHVPJz17LpCZPCFMhLu ad60ueqsEdq0v2zjw6PCCKcMMk5Gw4uTERKAEQMVoOenlwZAQ5UZa44vmzSfJxCw R8y/6XgNDPNKissFTiJkHtlEbDOeSW9p -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:37 2025 by rpki-client