$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: ycquUJZJyKwEq9+kBLtjYGwmPpeBx1s71T3z7Ue7ENY= Subject key identifier: 81:98:91:CA:8E:10:50:01:DE:8D:AE:8E:22:F3:F2:3F:F6:35:2F:86 Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: 97 Signing time: Mon 21 Jul 2025 06:32:43 +0000 Manifest this update: Mon 21 Jul 2025 06:32:42 +0000 Manifest next update: Mon 28 Jul 2025 06:32:42 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: TpvBU1/JZYO10dtMD1h1PuUztsSk+fX2TebIN+Z5u18=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: jhgv9aU9R5cyiS+8jQVzOexFGNK8rhaSdkQTaqCgMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Jul 21 06:32:42 2025 GMT Not After : Jul 28 06:32:42 2025 GMT Subject: CN=687ddf0b-e95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:dc:52:5e:0e:93:ee:75:11:62:45:9c:16: 54:2d:81:ce:6c:c9:c3:f1:6a:06:e4:1c:bb:0c:c0: a0:8c:0e:d5:4e:2d:e8:10:55:dd:ef:70:fd:fc:f5: 6a:f7:cd:b7:ea:cb:58:f8:21:07:30:b4:59:03:b0: bc:45:29:f0:1b:90:ce:39:5a:92:fb:c1:bf:fe:71: 73:0c:7e:84:72:9e:e3:d6:37:12:a2:5e:82:32:8b: 9c:6b:1f:55:8a:f4:b9:3b:15:e7:b4:32:1e:ec:88: 3f:66:7d:c9:34:00:88:21:2d:f8:85:71:0c:4f:90: a6:4d:74:a0:dc:97:bc:20:fc:a5:31:cf:18:2e:bd: d9:ab:b1:26:4b:6f:ae:d5:ac:bd:93:b3:08:6a:96: bc:f2:45:12:4e:9c:a1:c9:ee:a6:4a:cd:54:a6:e4: 65:36:b9:f3:23:bb:7c:aa:28:bc:3a:eb:f3:b4:4d: 85:71:d4:06:6f:f4:7c:ec:dc:34:6e:d4:82:a0:f2: 4d:a0:f1:7c:25:4a:14:7d:f9:00:c6:4e:7c:58:73: 90:ea:d8:3c:38:eb:af:bc:fc:76:01:a5:0c:39:e6: 0b:c1:2b:94:07:0f:13:65:6f:f7:20:9f:6c:1e:d8: e1:24:d2:4c:95:0f:e7:07:f9:30:be:49:b1:eb:9c: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:98:91:CA:8E:10:50:01:DE:8D:AE:8E:22:F3:F2:3F:F6:35:2F:86 X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:1f:85:70:fc:ed:c1:88:3b:d9:ab:9d:ec:9e:1d:f2:3b:70: 98:68:d8:41:17:9b:92:85:2d:58:ca:29:01:0b:e5:87:fc:01: 25:41:45:85:43:82:8a:bc:39:88:54:7e:79:23:28:2f:2a:a5: 86:4b:da:2f:e0:f2:fa:36:ad:19:66:fa:dd:72:81:5a:06:bc: f3:c2:50:20:f5:63:da:67:f8:81:11:8a:64:4a:7a:02:80:38: 7f:4c:9d:f7:46:2c:57:2a:07:57:37:e8:fd:33:15:da:25:15: dd:3e:01:bf:27:c3:07:d0:d1:1e:37:32:41:d9:7e:20:6e:0e: 8c:a6:1d:23:e8:9e:57:7c:ad:30:89:d4:25:50:10:d1:b5:1d: f1:f1:ef:2b:4c:f6:c1:ea:ff:81:7f:9e:da:c5:b0:b6:03:88: 94:b3:90:dc:15:83:2a:2b:14:a1:b6:ae:ab:a6:0d:fb:92:19: 36:0d:d9:c5:9b:30:ed:2c:32:d0:b0:2a:72:f1:10:c9:be:4e: 4b:0f:97:3d:42:d1:7c:30:1f:cc:df:53:03:f1:b8:03:d1:2b: 59:74:f3:86:6c:ba:06:21:3c:b8:a3:fb:aa:f7:a8:a9:7e:c7: eb:a9:5a:b6:34:75:49:87:8e:04:3c:7e:4e:b3:a7:74:76:64: 2a:cf:2e:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBGQ0IxMTAvBgNVBAUTKDNDQjRBOTAwNDE4QkU5RENEQzVFMDRBMEJBNjJBODRE QTg1RkU2RTAwHhcNMjUwNzIxMDYzMjQyWhcNMjUwNzI4MDYzMjQyWjAYMRYwFAYD VQQDEw02ODdkZGYwYi1lOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf7cUl4Ok+51EWJFnBZULYHObMnD8WoG5By7DMCgjA7VTi3oEFXd73D9/PVq 98236stY+CEHMLRZA7C8RSnwG5DOOVqS+8G//nFzDH6Ecp7j1jcSol6CMoucax9V ivS5OxXntDIe7Ig/Zn3JNACIIS34hXEMT5CmTXSg3Je8IPylMc8YLr3Zq7EmS2+u 1ay9k7MIapa88kUSTpyhye6mSs1UpuRlNrnzI7t8qii8OuvztE2FcdQGb/R87Nw0 btSCoPJNoPF8JUoUffkAxk58WHOQ6tg8OOuvvPx2AaUMOeYLwSuUBw8TZW/3IJ9s HtjhJNJMlQ/nB/kwvkmx65xx6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGYkcqO EFAB3o2ujiLz8j/2NS+GMB8GA1UdIwQYMBaAFDy0qQBBi+nc3F4EoLpiqE2oX+bg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEZDQi84OUM3OEY3MDgx NjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZkemNYZ1NndW1Lb1RhaGY1 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEZDQi84OUM3OEY3MDgxNjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZk emNYZ1NndW1Lb1RhaGY1dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUH4Vw/O3BiDvZq53snh3yO3CYaNhBF5uShS1YyikBC+WH/AElQUWF Q4KKvDmIVH55IygvKqWGS9ov4PL6Nq0ZZvrdcoFaBrzzwlAg9WPaZ/iBEYpkSnoC gDh/TJ33RixXKgdXN+j9MxXaJRXdPgG/J8MH0NEeNzJB2X4gbg6Mph0j6J5XfK0w idQlUBDRtR3x8e8rTPbB6v+Bf57axbC2A4iUs5DcFYMqKxShtq6rpg37khk2DdnF mzDtLDLQsCpy8RDJvk5LD5c9QtF8MB/M31MD8bgD0StZdPOGbLoGITy4o/uq96ip fsfrqVq2NHVJh44EPH5Os6d0dmQqzy42 -----END CERTIFICATE-----Generated at Mon Jul 21 12:38:07 2025 by rpki-client