$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: ESXqTZgvchpr7bzkU74YoV4aZ5JpNjFYXINwC8/KYJ0= Subject key identifier: B4:73:E3:CF:DA:86:7A:49:C4:B2:E9:CE:E5:E0:FA:73:4A:7E:3A:68 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 0608 Signing time: Sat 06 Sep 2025 23:12:34 +0000 Manifest this update: Sat 06 Sep 2025 23:12:34 +0000 Manifest next update: Sat 13 Sep 2025 23:12:34 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: +BtFfC9bgDqEYMiSsHaGJjkJRW7dR7dDVwvxvmke/y4=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: UYRwr7mrGPcB3M4JZ+3w5dX5RLWsIV6TVX8sVBNCGfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Sep 6 23:12:34 2025 GMT Not After : Sep 13 23:12:34 2025 GMT Subject: CN=68bcbfe2-268d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:1f:72:41:09:41:a3:c7:8c:bb:f7:2e:e5: 36:28:98:64:2c:1c:a9:89:36:f2:ce:f8:e0:83:e0: 2d:11:ef:59:c8:c3:cb:34:36:68:1f:89:cb:dc:e3: 90:b9:0d:fa:cb:6e:87:55:3c:46:33:14:51:fe:11: 85:42:28:6c:1a:91:e8:02:37:0a:a9:fe:bd:92:56: c5:c1:2f:8e:0a:b3:e3:90:64:b5:fc:22:c9:ab:69: f3:dc:6c:3b:c8:b1:d4:d6:79:c5:67:1e:d9:29:0d: c0:6d:1f:d7:28:2b:98:c4:d2:59:28:16:e1:2e:59: d4:c0:17:de:14:bc:68:f0:ea:ff:fd:e7:ec:bd:0e: d1:c4:96:c7:40:1a:1a:8c:8a:ac:09:6a:46:17:b3: f5:22:68:ff:2d:a8:e3:ff:a2:f1:f1:2e:f6:5d:a0: da:7f:76:f3:a5:5c:31:c3:fa:54:5b:e8:ac:af:10: 19:fb:df:2f:fe:79:33:7e:fe:a5:cc:ad:ef:9d:84: bb:68:4f:3e:4d:28:ce:fd:80:46:ec:18:b2:ba:d6: 53:14:49:d3:6b:99:58:88:61:76:ab:3e:1e:da:59: 2d:63:3d:b9:97:c8:2f:86:dc:d1:62:9d:83:e1:d2: db:0f:44:2e:dd:3a:e9:1b:e4:6e:74:34:f3:d6:24: b3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:73:E3:CF:DA:86:7A:49:C4:B2:E9:CE:E5:E0:FA:73:4A:7E:3A:68 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:29:33:23:fc:c6:c4:f3:26:b2:32:ec:b2:89:1e:d8:9c:18: 73:46:35:93:bb:20:97:cd:b7:40:90:cd:d6:92:89:d8:ca:a5: 1c:49:60:f1:3d:58:92:28:de:d4:4c:ef:19:1e:01:bd:83:94: 43:dc:f9:b0:0e:6b:83:b4:9c:ee:ef:88:f9:3a:90:b6:e0:31: 9a:f6:6e:9c:0c:10:ab:4c:b0:21:bb:9d:14:64:1a:03:db:ec: 38:a5:99:c0:71:da:89:2c:32:d7:ab:9e:c3:e8:2a:15:de:47: 34:0d:16:f0:3f:b6:e0:d3:51:1e:f2:a8:54:03:ea:ba:53:5e: 31:9b:57:73:06:56:6e:8a:e8:d6:bc:e5:ff:c4:bf:0c:24:01: ed:4d:57:ba:03:83:7a:c3:69:56:89:17:6a:c3:91:fe:45:5f: 3c:52:bf:63:d7:25:6e:5c:90:0a:71:9b:ad:7d:b1:f5:f4:02: 47:01:ed:cc:f2:9c:7d:46:ae:2f:17:e9:f1:98:1d:8c:fd:5e: 82:c3:34:b6:03:15:1c:da:fd:26:f4:7f:1f:5f:27:85:31:c7: 0b:31:c2:6d:fc:b6:13:d1:df:0c:3b:88:1d:bc:8c:9f:75:ed: 00:96:7f:f4:cd:5b:2a:af:fa:25:be:6e:11:61:9a:96:f7:03: 14:24:58:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUwOTA2MjMxMjM0WhcNMjUwOTEzMjMxMjM0WjAYMRYwFAYD VQQDEw02OGJjYmZlMi0yNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOMfckEJQaPHjLv3LuU2KJhkLBypiTbyzvjgg+AtEe9ZyMPLNDZoH4nL3OOQ uQ36y26HVTxGMxRR/hGFQihsGpHoAjcKqf69klbFwS+OCrPjkGS1/CLJq2nz3Gw7 yLHU1nnFZx7ZKQ3AbR/XKCuYxNJZKBbhLlnUwBfeFLxo8Or//efsvQ7RxJbHQBoa jIqsCWpGF7P1Imj/Lajj/6Lx8S72XaDaf3bzpVwxw/pUW+isrxAZ+98v/nkzfv6l zK3vnYS7aE8+TSjO/YBG7BiyutZTFEnTa5lYiGF2qz4e2lktYz25l8gvhtzRYp2D 4dLbD0Qu3TrpG+RudDTz1iSzCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRz48/a hnpJxLLpzuXg+nNKfjpoMB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRKTMj/MbE8yayMuyyiR7YnBhzRjWTuyCXzbdAkM3WkonYyqUcSWDx PViSKN7UTO8ZHgG9g5RD3PmwDmuDtJzu74j5OpC24DGa9m6cDBCrTLAhu50UZBoD 2+w4pZnAcdqJLDLXq57D6CoV3kc0DRbwP7bg01Ee8qhUA+q6U14xm1dzBlZuiujW vOX/xL8MJAHtTVe6A4N6w2lWiRdqw5H+RV88Ur9j1yVuXJAKcZutfbH19AJHAe3M 8px9Rq4vF+nxmB2M/V6CwzS2AxUc2v0m9H8fXyeFMccLMcJt/LYT0d8MO4gdvIyf de0Aln/0zVsqr/olvm4RYZqW9wMUJFhq -----END CERTIFICATE-----Generated at Mon Sep 8 03:34:47 2025 by rpki-client