$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: pZeJixz0xQUO6DANEAVyV9hY+jY4hizX8bGSzeBnryE= Subject key identifier: B7:43:29:05:53:11:E2:66:AF:85:86:E9:76:48:5E:D3:D4:5B:D5:59 Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: BD Signing time: Sat 31 May 2025 05:29:39 +0000 Manifest this update: Sat 31 May 2025 05:29:38 +0000 Manifest next update: Sat 07 Jun 2025 05:29:38 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: DM+2+FE+BvXWCoT41bek6fDHAyIRoJoWREPpESpSZig=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: 97sXWjq7Fj5JCQCyo6BRYI+5mz862DUMpg5o3JeeUks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: May 31 05:29:38 2025 GMT Not After : Jun 7 05:29:38 2025 GMT Subject: CN=683a93c3-d019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:ef:34:0a:67:50:a2:a6:21:cd:79:23:75: 50:38:ef:7d:88:40:d7:d6:51:49:4a:7b:1d:6c:bc: 60:5f:cb:53:eb:fe:d8:84:a8:84:38:7a:a9:a4:85: db:7b:c8:ff:3e:1e:b6:98:d3:aa:07:a2:06:6e:7a: e1:85:f7:76:3d:30:33:0e:19:15:6a:3a:b6:ab:a0: 55:35:eb:fb:d9:bf:6d:20:38:c6:14:cf:29:f4:c8: 5a:3e:09:70:9e:09:51:23:fa:c6:02:89:e8:2c:09: d1:98:ea:2a:ec:d6:fa:23:31:69:10:9c:78:86:e4: 8b:92:79:5e:9a:a1:1b:0e:92:ee:ff:aa:d8:b4:3a: 90:22:3f:aa:c5:49:78:d6:cb:76:85:d3:c5:20:84: a1:95:a2:36:73:cb:a7:db:f4:1c:66:a3:b2:fa:7f: 48:3d:ae:14:08:0b:e4:d9:0c:4f:35:a2:41:c7:a1: 0d:00:ab:29:ec:69:1c:45:da:7d:66:0e:56:1e:0e: 07:45:2e:ff:90:9d:4e:71:1c:f8:94:da:31:d0:05: 28:3e:82:a2:1a:8d:67:ae:5b:33:8a:fe:5d:73:40: 62:8f:bb:f5:e7:b0:69:eb:76:90:da:07:bf:46:cc: 89:b9:f7:46:54:28:6d:ab:bb:39:5f:42:d7:ee:22: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:43:29:05:53:11:E2:66:AF:85:86:E9:76:48:5E:D3:D4:5B:D5:59 X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:87:31:cf:96:be:04:fb:09:b8:41:6c:fe:03:25:bd:73:c2: e4:8a:3b:8b:f6:49:51:75:9b:c5:df:47:43:2e:60:b8:0d:e4: be:d2:a1:77:81:4a:13:6c:33:56:fb:2f:b6:45:80:8c:cf:a1: 4a:04:88:78:b6:9f:0b:e1:84:34:5d:b8:d1:e4:3a:10:7a:43: eb:86:ad:6b:d3:44:5b:90:0e:14:a7:e0:0a:4a:90:00:7b:0a: 5b:54:4a:3d:86:20:ba:8a:c6:17:57:aa:ea:16:4e:25:70:b2: 1e:9a:53:91:22:d7:20:00:e4:d0:e0:a4:4b:75:e7:3c:01:1e: 29:f2:39:96:8d:df:ab:ac:4f:79:b8:b5:2b:6d:d3:79:d6:2e: 8a:66:fb:17:f6:4e:d4:96:57:4f:61:f8:82:a0:a5:4b:2e:a8: 15:4b:51:8d:fd:a7:61:95:76:d2:3e:85:a2:a2:3c:c0:2c:26: bd:7e:c2:9c:b4:c3:6d:fb:25:6e:78:52:fa:43:32:c4:72:e3: ba:67:2a:de:af:1a:7a:dd:63:c1:15:28:ab:07:57:7b:ae:43: 72:87:38:7b:60:df:ea:b0:eb:7d:33:66:be:e2:3d:51:30:f3: 53:2b:67:f4:3c:8c:8b:3a:12:cc:ae:9f:93:97:3f:c4:ec:68: 47:1d:a3:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjUwNTMxMDUyOTM4WhcNMjUwNjA3MDUyOTM4WjAYMRYwFAYD VQQDEw02ODNhOTNjMy1kMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wbvNApnUKKmIc15I3VQOO99iEDX1lFJSnsdbLxgX8tT6/7YhKiEOHqppIXb e8j/Ph62mNOqB6IGbnrhhfd2PTAzDhkVajq2q6BVNev72b9tIDjGFM8p9MhaPglw nglRI/rGAonoLAnRmOoq7Nb6IzFpEJx4huSLknlemqEbDpLu/6rYtDqQIj+qxUl4 1st2hdPFIIShlaI2c8un2/QcZqOy+n9IPa4UCAvk2QxPNaJBx6ENAKsp7GkcRdp9 Zg5WHg4HRS7/kJ1OcRz4lNox0AUoPoKiGo1nrlsziv5dc0Bij7v157Bp63aQ2ge/ RsyJufdGVChtq7s5X0LX7iLLewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdDKQVT EeJmr4WG6XZIXtPUW9VZMB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q4OS9EM0VENTg1ODIwQjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpn Yk5ZTkVsOEtrYklfN0RBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmhzHPlr4E+wm4QWz+AyW9c8LkijuL9klRdZvF30dDLmC4DeS+0qF3 gUoTbDNW+y+2RYCMz6FKBIh4tp8L4YQ0XbjR5DoQekPrhq1r00RbkA4Up+AKSpAA ewpbVEo9hiC6isYXV6rqFk4lcLIemlORItcgAOTQ4KRLdec8AR4p8jmWjd+rrE95 uLUrbdN51i6KZvsX9k7UlldPYfiCoKVLLqgVS1GN/adhlXbSPoWiojzALCa9fsKc tMNt+yVueFL6QzLEcuO6Zyrerxp63WPBFSirB1d7rkNyhzh7YN/qsOt9M2a+4j1R MPNTK2f0PIyLOhLMrp+Tlz/E7GhHHaPw -----END CERTIFICATE-----Generated at Sat May 31 17:53:07 2025 by rpki-client