$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: iSNGYzQwCHSai/9EsYwk1/LtCota4Cz17vAFusGXXio= Subject key identifier: D8:DA:6F:96:A2:77:17:C8:9B:22:64:F7:17:76:45:E8:E8:66:74:9D Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: 7C Signing time: Sun 01 Jun 2025 06:23:42 +0000 Manifest this update: Sun 01 Jun 2025 06:23:41 +0000 Manifest next update: Sun 08 Jun 2025 06:23:41 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: XVuIuTu0zK020upJ0p8UnRdc0e9+FvTeT8g17FdjYxo=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: ieIL/C2PsSajQ+T9x9NCeatLKXOzRnjbWOmpv4r/01g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Jun 1 06:23:41 2025 GMT Not After : Jun 8 06:23:41 2025 GMT Subject: CN=683bf1ee-00f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:e9:3a:a0:97:f7:50:14:65:2c:2c:39:98: bb:a7:03:fe:b9:b0:4e:96:0b:ab:7a:f8:51:d9:ee: e1:9c:be:db:3f:af:e7:85:59:ca:ef:62:6d:fa:76: ae:71:ec:a5:6d:18:eb:0b:c7:ed:e6:99:27:3d:5f: 85:3f:50:8f:6e:c4:ff:71:bd:d6:18:35:7c:ae:49: 0c:cc:0c:be:db:55:6f:b3:d6:48:a2:b0:82:14:80: ab:e7:65:a6:23:6a:72:ed:29:8b:1f:c9:c7:05:7a: 1a:31:19:18:cb:0e:a0:a8:2d:02:81:d1:11:09:29: bf:66:e3:dd:d7:f2:3e:f3:2b:7b:eb:2d:fc:4a:7e: f8:99:19:0e:07:75:86:20:7b:e3:a2:31:4d:55:35: 2a:fd:d8:ad:b4:53:6e:95:41:24:fb:d4:f3:c9:f1: 97:11:85:7b:fe:e3:c8:ed:08:83:0f:20:72:f3:11: 79:cd:4f:ac:9b:51:c5:65:20:4c:37:53:54:17:08: 10:74:d4:df:ef:f9:c2:8c:43:9b:40:ee:c2:51:08: 12:c4:42:85:b4:fe:74:0a:7d:fb:e0:3b:d6:d7:b3: 64:7a:b2:20:1d:21:ab:11:0a:69:83:db:c7:cc:52: ca:74:b6:42:05:2f:26:27:5f:79:07:0c:ba:4d:93: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DA:6F:96:A2:77:17:C8:9B:22:64:F7:17:76:45:E8:E8:66:74:9D X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7c:06:dc:79:3a:3f:21:83:ea:d7:d6:55:c5:2d:d6:4f:be: 61:b5:fa:10:9d:20:6a:4a:94:04:c8:b6:38:a4:80:4c:d5:f9: 3b:3c:ea:81:b3:07:ac:22:43:a0:95:e5:d9:5e:cb:0c:5a:4c: ff:22:0a:d2:52:51:06:03:15:12:84:7f:b3:42:02:22:d2:f1: 6c:72:94:76:f3:b8:3d:4c:ed:35:15:40:3a:39:78:fe:e5:d3: d6:27:81:3d:8c:64:56:64:f8:4f:22:de:83:d7:76:94:17:0f: e5:05:c5:fd:cf:c5:8f:82:ce:5b:07:dd:8a:e9:17:ba:01:77: 5e:dc:1b:f6:ac:fe:1a:c7:57:dd:be:c6:86:dc:48:3e:0f:fb: 95:4b:75:53:5a:d6:05:3b:8b:6d:98:cc:06:d1:a1:79:26:0c: 95:ec:4e:27:2c:bb:06:07:04:18:3d:d1:62:0c:36:16:a0:85: d5:a2:b9:31:c5:53:98:c7:c7:c9:f6:bf:e7:76:38:87:ae:8f: 08:de:a2:a5:9b:66:ec:58:27:9e:0e:71:0a:20:b4:8c:46:f5: 1e:c5:0c:40:e0:6e:c7:49:47:1d:d9:d7:5f:80:0e:23:ce:4e: 7d:4d:fc:37:81:9a:84:93:aa:26:72:75:0e:b9:97:f9:79:97: d5:3a:dd:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEZDQjExMC8GA1UEBRMoM0NCNEE5MDA0MThCRTlEQ0RDNUUwNEEwQkE2MkE4NERB ODVGRTZFMDAeFw0yNTA2MDEwNjIzNDFaFw0yNTA2MDgwNjIzNDFaMBgxFjAUBgNV BAMTDTY4M2JmMWVlLTAwZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOkuk6oJf3UBRlLCw5mLunA/65sE6WC6t6+FHZ7uGcvts/r+eFWcrvYm36dq5x 7KVtGOsLx+3mmSc9X4U/UI9uxP9xvdYYNXyuSQzMDL7bVW+z1kiisIIUgKvnZaYj anLtKYsfyccFehoxGRjLDqCoLQKB0REJKb9m493X8j7zK3vrLfxKfviZGQ4HdYYg e+OiMU1VNSr92K20U26VQST71PPJ8ZcRhXv+48jtCIMPIHLzEXnNT6ybUcVlIEw3 U1QXCBB01N/v+cKMQ5tA7sJRCBLEQoW0/nQKffvgO9bXs2R6siAdIasRCmmD28fM Usp0tkIFLyYnX3kHDLpNk5PbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2NpvlqJ3 F8ibImT3F3ZF6OhmdJ0wHwYDVR0jBBgwFoAUPLSpAEGL6dzcXgSgumKoTahf5uAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRkNCLzg5Qzc4RjcwODE2 OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUExTcEFFR0w2ZHpjWGdTZ3VtS29UYWhmNXVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RkNCLzg5Qzc4RjcwODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1BMU3BBRUdMNmR6 Y1hnU2d1bUtvVGFoZjV1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJ8Btx5Oj8hg+rX1lXFLdZPvmG1+hCdIGpKlATItjikgEzV+Ts86oGz B6wiQ6CV5dleywxaTP8iCtJSUQYDFRKEf7NCAiLS8WxylHbzuD1M7TUVQDo5eP7l 09YngT2MZFZk+E8i3oPXdpQXD+UFxf3PxY+CzlsH3YrpF7oBd17cG/as/hrHV92+ xobcSD4P+5VLdVNa1gU7i22YzAbRoXkmDJXsTicsuwYHBBg90WIMNhaghdWiuTHF U5jHx8n2v+d2OIeujwjeoqWbZuxYJ54OcQogtIxG9R7FDEDgbsdJRx3Z11+ADiPO Tn1N/DeBmoSTqiZydQ65l/l5l9U63Zc= -----END CERTIFICATE-----Generated at Mon Jun 2 19:58:17 2025 by rpki-client