$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: AQdtKG41n+DpexZhORvoBgpe2BX6+AlL1WMlLmmT1C0= Subject key identifier: 6C:AA:A4:C9:3F:C6:03:2D:8E:F3:2F:16:9B:9B:BF:60:4D:11:D9:85 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 05DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 05D3 Signing time: Fri 30 May 2025 23:15:21 +0000 Manifest this update: Fri 30 May 2025 23:15:21 +0000 Manifest next update: Fri 06 Jun 2025 23:15:21 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: w9ThKaukUC5wl0rIeJjxueSwmThhltIlDMRS3FGeRSM=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: kP9B9Apke28RlHv6p4FMMVLBhFiruagPm8D1uCysx10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1502 (0x5de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: May 30 23:15:21 2025 GMT Not After : Jun 6 23:15:21 2025 GMT Subject: CN=683a3c09-3806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:00:91:57:ec:1b:d5:46:fb:12:5d:4e:c5: 98:f5:46:a4:5c:92:21:68:71:db:ef:3f:58:1b:89: 00:45:1a:24:9f:db:c6:00:0a:f8:59:6b:f2:06:38: 98:32:34:78:c9:04:59:0a:50:3b:1b:24:76:84:50: ef:de:ec:d4:df:25:94:6e:6f:9a:a9:a1:ea:f0:91: e6:18:7a:08:1d:23:9c:1e:73:62:4c:02:9d:7f:9a: 81:c7:16:8a:45:f0:16:ea:a6:b3:ae:ef:59:d9:c6: ac:cb:87:6a:e5:e5:48:f4:ff:f1:85:df:6d:75:db: 95:d1:ea:a5:a7:0c:ab:b8:d7:74:75:d5:83:9c:bc: 5d:29:43:2b:1d:e4:f6:51:21:e9:fd:25:2b:f8:ec: c7:e1:ee:07:dd:5d:a1:45:14:1d:26:72:a6:c3:59: 44:12:63:73:70:5f:32:ab:13:ee:e6:04:01:57:70: 2f:30:72:29:cc:06:81:3f:11:10:96:07:e4:7b:f5: 04:53:6b:47:1f:e1:07:6d:67:b0:85:98:3f:79:2e: 36:5f:5a:4d:b1:90:ed:41:8b:d0:73:ae:97:b8:a7: 78:2c:d2:65:4f:1c:d5:28:42:06:64:5d:d3:b7:a8: 95:ed:65:4c:73:b3:d6:3e:44:6e:37:7e:ee:a5:42: 8f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AA:A4:C9:3F:C6:03:2D:8E:F3:2F:16:9B:9B:BF:60:4D:11:D9:85 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:33:43:2a:3c:01:e5:0e:a5:28:9e:14:d5:22:65:f9:40:6d: 50:18:18:8e:ce:20:e5:19:80:51:c6:dd:68:88:14:5a:ca:00: 40:6c:91:4f:30:18:0c:03:fc:ee:fd:97:0c:ef:d8:bc:8b:0b: 0f:7e:f3:79:78:0f:45:70:91:a7:4a:3b:06:78:0f:47:f2:82: 0f:54:7f:f9:37:73:6d:16:9f:dd:0d:34:5c:2b:d2:95:c8:88: 78:c0:e5:98:ef:ed:42:9f:19:00:ae:9c:8e:3a:f8:de:43:d4: 9d:10:5f:8d:10:25:77:36:a0:4a:b7:07:fd:8d:c4:74:41:fe: 88:3e:f4:ce:d2:6c:eb:f8:e8:93:9d:7e:09:a1:70:ef:6c:91: 0b:3d:01:97:17:55:79:f9:4f:98:6a:d2:af:ce:69:00:10:27: 62:6b:e6:a6:fc:6b:c2:83:36:2a:de:c5:83:b0:8c:6d:42:a1: 31:f6:58:15:6d:e9:1e:0f:96:48:21:0d:ec:64:72:9a:7e:0f: 35:c7:50:27:5d:91:50:fd:4b:1f:61:01:e7:c8:c5:ce:a3:59: ed:ae:f9:5b:90:41:e8:c2:ae:e5:2c:c0:50:20:30:35:0a:39: f3:62:f9:99:d6:f0:cb:ed:93:92:e3:24:cf:04:d8:20:35:c1: 5d:9c:ea:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUwNTMwMjMxNTIxWhcNMjUwNjA2MjMxNTIxWjAYMRYwFAYD VQQDEw02ODNhM2MwOS0zODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CMAkVfsG9VG+xJdTsWY9UakXJIhaHHb7z9YG4kARRokn9vGAAr4WWvyBjiY MjR4yQRZClA7GyR2hFDv3uzU3yWUbm+aqaHq8JHmGHoIHSOcHnNiTAKdf5qBxxaK RfAW6qazru9Z2casy4dq5eVI9P/xhd9tdduV0eqlpwyruNd0ddWDnLxdKUMrHeT2 USHp/SUr+OzH4e4H3V2hRRQdJnKmw1lEEmNzcF8yqxPu5gQBV3AvMHIpzAaBPxEQ lgfke/UEU2tHH+EHbWewhZg/eS42X1pNsZDtQYvQc66XuKd4LNJlTxzVKEIGZF3T t6iV7WVMc7PWPkRuN37upUKPsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyqpMk/ xgMtjvMvFpubv2BNEdmFMB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsM0MqPAHlDqUonhTVImX5QG1QGBiOziDlGYBRxt1oiBRaygBAbJFP MBgMA/zu/ZcM79i8iwsPfvN5eA9FcJGnSjsGeA9H8oIPVH/5N3NtFp/dDTRcK9KV yIh4wOWY7+1CnxkArpyOOvjeQ9SdEF+NECV3NqBKtwf9jcR0Qf6IPvTO0mzr+OiT nX4JoXDvbJELPQGXF1V5+U+YatKvzmkAECdia+am/GvCgzYq3sWDsIxtQqEx9lgV bekeD5ZIIQ3sZHKafg81x1AnXZFQ/UsfYQHnyMXOo1ntrvlbkEHowq7lLMBQIDA1 CjnzYvmZ1vDL7ZOS4yTPBNggNcFdnOp2 -----END CERTIFICATE-----Generated at Sat May 31 17:11:19 2025 by rpki-client