$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: uoqZJyztGLv0TEN5/vzAPi0ho6WFdUttd6RtRBaiHdw= Subject key identifier: D4:78:7D:73:D8:57:3F:D0:E9:DD:1C:FF:35:7C:FE:E2:7E:66:88:4B Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 01A2 Signing time: Tue 09 Sep 2025 03:24:51 +0000 Manifest this update: Tue 09 Sep 2025 03:24:50 +0000 Manifest next update: Tue 16 Sep 2025 03:24:50 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: cedHHJKn/qGD2NWqTXcFiyFfz+8LVAxMWEbWqnB1jYg=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Sep 9 03:24:50 2025 GMT Not After : Sep 16 03:24:50 2025 GMT Subject: CN=68bf9e02-99f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:46:c4:d3:ff:40:e2:27:f1:13:cb:90:c8: f3:a5:79:01:f1:1c:5c:f3:10:5c:5d:1e:c3:ec:1e: 88:da:b0:d6:83:ac:e2:bd:2f:9a:10:54:0d:26:66: 79:57:06:36:c7:90:07:e7:69:f4:ce:5f:46:e0:9c: e9:9c:43:73:c2:67:cb:af:c2:f4:a9:71:37:23:0a: a4:34:38:ac:d7:56:6c:7a:8e:ea:f1:1d:df:c6:10: d1:e0:01:4d:38:00:35:34:41:fe:0c:6d:59:55:60: 33:a2:c3:c4:6f:0a:7f:71:ca:cd:28:7a:46:aa:b9: e2:dd:82:1e:55:a4:96:62:e4:22:1c:0e:3d:d9:81: 22:ea:0b:07:7b:60:d5:92:a6:4a:38:33:7c:58:ed: 2e:c9:31:2c:42:eb:86:50:74:06:89:52:a6:f3:9d: f8:cc:20:15:18:c5:b1:2d:32:d6:c4:62:b1:f8:21: cb:06:06:cf:76:38:58:3d:00:db:7a:32:e0:f8:7b: 38:88:b3:c3:d8:b9:72:9b:5d:cc:7c:d3:be:86:a7: a2:76:95:fc:0e:0a:73:10:37:b3:05:1d:c8:55:3a: e3:f9:6f:2f:b0:82:5a:46:aa:82:f9:a8:a9:4b:23: 6a:06:c0:7d:11:df:81:69:b2:b4:3b:61:51:4c:d9: 77:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:78:7D:73:D8:57:3F:D0:E9:DD:1C:FF:35:7C:FE:E2:7E:66:88:4B X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:eb:a3:66:6a:6d:3c:f3:93:2f:bb:a1:bb:75:4d:f9:37:b0: 53:93:8e:e7:fd:27:93:5f:05:14:5a:79:51:6d:76:b2:e6:e8: 39:bc:36:54:55:19:dd:3b:42:f4:2e:3c:08:8a:f0:87:a2:2b: 85:36:25:d5:41:47:f3:9c:b9:12:ad:98:84:0c:31:c3:2c:ab: 17:ae:25:17:bd:75:5c:c6:f3:50:49:d4:cd:e1:a6:3e:8f:a9: 3b:c6:87:4f:fb:b0:85:a9:9f:83:1f:0c:ea:ad:fb:13:be:e3: 55:82:4d:40:2e:b9:c4:9c:85:d5:b9:4f:9a:2c:22:41:bd:f1: 03:05:3e:82:f1:81:28:91:13:9e:42:18:b3:7f:4f:c3:7b:75: e7:10:1e:86:6a:60:69:de:28:31:84:65:da:f3:9d:cd:0b:d5: 0a:61:38:37:19:8a:e4:0b:bd:49:22:6b:27:a9:dc:d7:a4:57: 86:9c:de:02:6d:c5:57:89:c6:31:97:a2:d7:22:3d:0a:fa:7e: 30:0f:7f:07:00:98:54:6c:af:0c:75:ba:8c:55:51:a7:4b:97: 0a:d0:f8:21:08:fd:0b:17:df:cb:a3:58:ad:33:ec:32:35:f7: 58:7d:4f:fa:57:b1:ea:6d:b2:a2:2a:6c:e5:47:82:27:bb:8a: 25:c2:b3:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUwOTA5MDMyNDUwWhcNMjUwOTE2MDMyNDUwWjAYMRYwFAYD VQQDEw02OGJmOWUwMi05OWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIFGxNP/QOIn8RPLkMjzpXkB8Rxc8xBcXR7D7B6I2rDWg6zivS+aEFQNJmZ5 VwY2x5AH52n0zl9G4JzpnENzwmfLr8L0qXE3IwqkNDis11Zseo7q8R3fxhDR4AFN OAA1NEH+DG1ZVWAzosPEbwp/ccrNKHpGqrni3YIeVaSWYuQiHA492YEi6gsHe2DV kqZKODN8WO0uyTEsQuuGUHQGiVKm8534zCAVGMWxLTLWxGKx+CHLBgbPdjhYPQDb ejLg+Hs4iLPD2Llym13MfNO+hqeidpX8DgpzEDezBR3IVTrj+W8vsIJaRqqC+aip SyNqBsB9Ed+BabK0O2FRTNl38wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR4fXPY Vz/Q6d0c/zV8/uJ+ZohLMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM66Nmam0885Mvu6G7dU35N7BTk47n/SeTXwUUWnlRbXay5ug5vDZU VRndO0L0LjwIivCHoiuFNiXVQUfznLkSrZiEDDHDLKsXriUXvXVcxvNQSdTN4aY+ j6k7xodP+7CFqZ+DHwzqrfsTvuNVgk1ALrnEnIXVuU+aLCJBvfEDBT6C8YEokROe Qhizf0/De3XnEB6GamBp3igxhGXa853NC9UKYTg3GYrkC71JImsnqdzXpFeGnN4C bcVXicYxl6LXIj0K+n4wD38HAJhUbK8MdbqMVVGnS5cK0PghCP0LF9/Lo1itM+wy NfdYfU/6V7HqbbKiKmzlR4Inu4olwrOe -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:34 2025 by rpki-client