$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft File: Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json) Hash identifier: RFoAv5knNcN4GKc/pgZZDHd6kmv3Vqea6Ku+vIgwpDo= Subject key identifier: 56:33:C7:27:DD:81:E0:87:B9:E4:8C:C7:6F:EC:CF:AD:D0:DB:A1:1E Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft Manifest number: 0288 Signing time: Fri 25 Apr 2025 01:27:43 +0000 Manifest this update: Fri 25 Apr 2025 01:27:43 +0000 Manifest next update: Fri 02 May 2025 01:27:43 +0000 Files and hashes: 1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: p+9XXcxR8n4uknBOG7aAEeQzqym80FIlwwFs0j8sPs4=) 2: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: R8BTOL86V2lkOQsbW+rQ8pt2tHQCxt6FoHVMOBZZhL4=) 3: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: 7CKylBpxKWewvw1jHj+wa1g1s5Juhm7MXUJtNktQtY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Validity Not Before: Apr 25 01:27:43 2025 GMT Not After : May 2 01:27:43 2025 GMT Subject: CN=680ae50f-9588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:94:21:70:4a:48:27:ca:df:25:02:5b:e8: 2d:5a:bc:f0:7f:e7:9e:1e:69:20:93:fb:cb:35:80: da:35:fa:eb:79:a2:dc:83:1f:c4:b3:64:20:b5:10: 0d:73:e9:f5:89:c3:25:4f:a5:b9:67:d5:9b:95:09: 61:a2:d3:ec:d9:a5:62:fa:66:e6:45:6d:a3:c2:b5: 4f:6f:c5:52:d8:5d:71:d0:46:9a:49:19:64:7b:9c: eb:45:f3:0d:53:22:81:98:8a:42:21:98:02:71:56: 5a:6b:4e:bd:d6:85:71:42:c1:6e:c3:ce:21:a8:a2: 20:2a:d4:51:56:a5:0b:fc:5b:13:41:a4:e3:82:ae: 2a:dc:67:a0:0c:72:aa:3c:dc:9e:b9:5b:17:e3:9d: 53:8b:f6:a9:54:d2:8d:0f:70:60:78:cb:11:95:89: ed:5c:da:0b:fd:3b:5c:ad:96:cf:d5:25:e7:6a:9f: 28:29:b0:43:82:f6:69:ed:8d:89:88:1f:3e:80:30: 5d:b6:fc:3c:07:6f:92:0f:15:56:80:99:d4:04:ac: 89:93:72:53:e1:e5:bd:20:8c:17:1b:7f:0b:b5:f8: e1:45:64:37:d9:22:98:aa:b7:15:b4:2c:1f:f3:5a: f3:ba:cf:ee:67:1e:e1:32:38:a9:16:3a:4a:af:3d: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:33:C7:27:DD:81:E0:87:B9:E4:8C:C7:6F:EC:CF:AD:D0:DB:A1:1E X509v3 Authority Key Identifier: keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:33:62:96:12:0f:44:dc:ef:d5:26:c0:7c:07:79:be:c5:14: 30:67:53:94:c6:40:2a:ad:e8:6c:60:b5:27:fa:0f:c5:ec:ef: d0:81:0f:3b:b2:44:5d:5e:c5:6a:16:c7:66:3d:3a:a0:33:25: a6:94:81:19:9d:3d:14:9a:d4:d8:73:1f:66:43:53:d2:63:a0: 5a:90:06:45:1e:33:0a:09:49:18:50:37:99:5c:57:1d:b5:0a: ee:3b:c8:6e:8c:09:b6:11:45:42:a4:50:50:26:7d:68:3b:a3: 5b:5d:9d:88:98:3c:78:14:94:33:81:58:e3:35:99:82:7a:ee: 99:e4:45:8e:a1:6d:41:66:3d:24:01:3b:a6:37:5d:c2:e7:cf: cb:d1:cf:8f:cd:ae:90:6e:44:1e:1e:05:d7:21:92:91:9c:b1: 9f:50:64:f8:33:8d:de:f6:95:5e:49:4c:fc:ef:a8:60:48:ce: 41:21:0d:1d:97:84:86:d4:b6:57:05:08:f9:09:ce:da:75:6f: dc:0e:bc:41:23:44:4e:bf:33:d0:87:cf:5a:c2:31:8d:c5:a9: 76:5b:d4:86:53:a1:d1:34:dd:5d:d4:76:17:26:eb:ae:8f:d0: 99:52:6d:da:15:a4:e7:f9:24:47:43:33:d0:ea:3f:51:8f:fd: 1b:e4:45:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB MjA5MzU1OEEwHhcNMjUwNDI1MDEyNzQzWhcNMjUwNTAyMDEyNzQzWjAYMRYwFAYD VQQDEw02ODBhZTUwZi05NTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+KUIXBKSCfK3yUCW+gtWrzwf+eeHmkgk/vLNYDaNfrreaLcgx/Es2QgtRAN c+n1icMlT6W5Z9WblQlhotPs2aVi+mbmRW2jwrVPb8VS2F1x0EaaSRlke5zrRfMN UyKBmIpCIZgCcVZaa0691oVxQsFuw84hqKIgKtRRVqUL/FsTQaTjgq4q3GegDHKq PNyeuVsX451Ti/apVNKND3BgeMsRlYntXNoL/TtcrZbP1SXnap8oKbBDgvZp7Y2J iB8+gDBdtvw8B2+SDxVWgJnUBKyJk3JT4eW9IIwXG38LtfjhRWQ32SKYqrcVtCwf 81rzus/uZx7hMjipFjpKrz1ONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYzxyfd geCHueSMx2/sz63Q26EeMB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zQTQxN0Q3NDA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tR T2pGLUtJdlJtNTJpQ1RWWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+M2KWEg9E3O/VJsB8B3m+xRQwZ1OUxkAqrehsYLUn+g/F7O/QgQ87 skRdXsVqFsdmPTqgMyWmlIEZnT0UmtTYcx9mQ1PSY6BakAZFHjMKCUkYUDeZXFcd tQruO8hujAm2EUVCpFBQJn1oO6NbXZ2ImDx4FJQzgVjjNZmCeu6Z5EWOoW1BZj0k ATumN13C58/L0c+Pza6QbkQeHgXXIZKRnLGfUGT4M43e9pVeSUz876hgSM5BIQ0d l4SG1LZXBQj5Cc7adW/cDrxBI0ROvzPQh89awjGNxal2W9SGU6HRNN1d1HYXJuuu j9CZUm3aFaTn+SRHQzPQ6j9Rj/0b5EW1 -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:49 2025 by rpki-client