$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft File: Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json) Hash identifier: FEVIgdEtRmdUOjvuDStm2KcRV26Ryhz94A93ZNlqn4U= Subject key identifier: B2:35:4D:51:BF:90:6E:EE:2D:FB:EB:97:80:60:25:A1:EB:BF:87:65 Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft Manifest number: 02A5 Signing time: Thu 19 Jun 2025 01:57:53 +0000 Manifest this update: Thu 19 Jun 2025 01:57:53 +0000 Manifest next update: Thu 26 Jun 2025 01:57:53 +0000 Files and hashes: 1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: /e7XnWFcFelS3ZOLtdYWB8ptdEWCf6WYtzTznNCyY64=) 2: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: 8rnT1/RYFWPcmBVGumAdOk1rKk2uRHrNY0hy1090ab0=) 3: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: 5OZH/ipU9G0SdrZKs5470uFnbaHHzZ691GNPcYjgeyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Validity Not Before: Jun 19 01:57:53 2025 GMT Not After : Jun 26 01:57:53 2025 GMT Subject: CN=68536ea1-78cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:7b:1c:ae:1c:b8:80:a0:83:74:7c:5e:c6: 53:ab:e3:da:c7:fb:35:4f:36:25:0a:92:13:d8:cb: 34:89:cc:f0:2f:e0:fa:66:83:4d:fe:04:eb:92:04: f9:08:6a:33:64:de:56:fb:1d:4d:fc:4f:c8:ae:5b: 38:26:6c:a9:4a:18:9d:cc:a1:89:82:3e:95:3a:27: 2c:0a:b9:51:4b:4b:fc:c6:36:36:aa:8e:4e:f3:cf: fa:77:e7:8c:50:01:2b:d1:07:c1:e9:cd:ba:39:7e: f6:b3:55:53:c7:ef:29:17:50:85:72:6a:56:80:1b: 64:cf:29:d5:c6:0a:78:e7:fb:92:6f:b9:0f:8c:e1: b8:05:d1:d6:d4:cb:c8:2b:58:49:f6:20:0b:4f:d1: 01:28:82:2f:2e:19:ff:57:14:0c:78:f5:00:a6:fb: 16:c4:4a:94:df:b0:10:76:8d:23:c1:01:4a:b7:6b: 1c:87:0d:ce:19:d4:69:93:f1:8b:73:de:07:78:6d: 3c:a8:b2:c8:9f:c1:bd:f8:eb:e4:40:2c:5d:42:10: c9:80:23:bf:15:8c:ae:37:da:37:21:bd:e4:ad:30: 49:81:fe:bd:a0:83:f6:6a:eb:cc:fa:77:61:94:d6: 72:3c:6b:f9:d8:9b:86:b7:a7:60:93:a3:9c:4e:cd: d1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:4D:51:BF:90:6E:EE:2D:FB:EB:97:80:60:25:A1:EB:BF:87:65 X509v3 Authority Key Identifier: keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:64:07:e9:f3:23:69:13:b2:43:33:49:dc:30:17:1e:17:f9: 37:1d:3d:0c:4d:ff:ca:92:e1:e4:07:82:8f:aa:e4:44:f0:a0: e9:16:d7:fa:63:1d:0a:a9:df:2d:43:d5:dc:d4:d0:75:78:25: e0:d7:73:74:bb:2f:0e:81:0d:01:c5:8b:0d:45:9b:70:06:1d: ce:8f:e6:19:28:f3:77:d3:ec:0f:c4:d8:73:0e:5b:00:f0:3b: 97:65:6d:5d:09:1d:9d:ac:9f:2d:4d:74:87:ff:f5:14:33:03: 72:9d:de:98:cb:53:d9:b9:80:7c:bd:24:7f:92:40:78:7d:5b: 48:fb:2a:cb:92:94:e4:d3:bd:b2:e1:42:6f:ac:ec:a5:2c:7c: 04:27:26:f5:f4:f0:7e:ff:40:3d:3c:5b:4a:37:0c:5c:ac:ae: 3e:17:cc:5d:7a:c6:22:63:bf:7d:cb:24:dc:70:fc:d2:ea:a4: 20:04:32:13:2a:3c:63:fe:c8:7f:f7:72:d6:82:f1:a6:66:80: aa:41:3c:f6:9c:bb:6b:17:a7:2c:bf:fe:1f:cf:52:19:61:fb: 82:f6:02:9b:4b:1c:d9:de:a8:fb:ab:19:85:c2:96:7c:df:da: e0:57:9a:bc:dd:d6:87:e2:b7:cd:0e:15:30:2d:70:8a:6d:22: cd:d1:4a:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB MjA5MzU1OEEwHhcNMjUwNjE5MDE1NzUzWhcNMjUwNjI2MDE1NzUzWjAYMRYwFAYD VQQDEw02ODUzNmVhMS03OGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yZ7HK4cuICgg3R8XsZTq+Pax/s1TzYlCpIT2Ms0iczwL+D6ZoNN/gTrkgT5 CGozZN5W+x1N/E/Irls4JmypShidzKGJgj6VOicsCrlRS0v8xjY2qo5O88/6d+eM UAEr0QfB6c26OX72s1VTx+8pF1CFcmpWgBtkzynVxgp45/uSb7kPjOG4BdHW1MvI K1hJ9iALT9EBKIIvLhn/VxQMePUApvsWxEqU37AQdo0jwQFKt2schw3OGdRpk/GL c94HeG08qLLIn8G9+OvkQCxdQhDJgCO/FYyuN9o3Ib3krTBJgf69oIP2auvM+ndh lNZyPGv52JuGt6dgk6OcTs3RqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI1TVG/ kG7uLfvrl4BgJaHrv4dlMB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zQTQxN0Q3NDA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tR T2pGLUtJdlJtNTJpQ1RWWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfZAfp8yNpE7JDM0ncMBceF/k3HT0MTf/KkuHkB4KPquRE8KDpFtf6 Yx0Kqd8tQ9Xc1NB1eCXg13N0uy8OgQ0BxYsNRZtwBh3Oj+YZKPN30+wPxNhzDlsA 8DuXZW1dCR2drJ8tTXSH//UUMwNynd6Yy1PZuYB8vSR/kkB4fVtI+yrLkpTk072y 4UJvrOylLHwEJyb19PB+/0A9PFtKNwxcrK4+F8xdesYiY799yyTccPzS6qQgBDIT Kjxj/sh/93LWgvGmZoCqQTz2nLtrF6csv/4fz1IZYfuC9gKbSxzZ3qj7qxmFwpZ8 39rgV5q83daH4rfNDhUwLXCKbSLN0Urn -----END CERTIFICATE-----Generated at Fri Jun 20 05:33:06 2025 by rpki-client