$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: 9tnqNdoCf/ZW+gZK8Jaay+n/DPB0Umhagxnjkld+n2o= Subject key identifier: 7D:50:DA:0A:89:06:27:3F:6F:18:B8:48:A0:F5:21:09:00:A2:D1:16 Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C3D Signing time: Sun 10 Aug 2025 18:39:15 +0000 Manifest this update: Sun 10 Aug 2025 18:39:14 +0000 Manifest next update: Sun 17 Aug 2025 18:39:14 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: V8AmhkdwY0BbxxgZmW0DG1ElPn0eNiCXCqed3cMwMG4=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Aug 10 18:39:14 2025 GMT Not After : Aug 17 18:39:14 2025 GMT Subject: CN=6898e753-4683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:96:ce:2f:68:63:d7:75:f1:56:99:a8:7f:a5: 4a:2f:5c:5a:61:11:88:16:a8:47:04:6e:6c:c7:9a: 48:f6:3d:64:e1:34:68:ac:c5:3e:24:8f:e7:5f:e6: c3:24:5a:e1:88:6d:6e:65:76:a7:ff:dd:76:9f:f1: d8:55:e1:3f:38:50:05:62:c6:84:8d:10:88:17:2c: 74:f9:09:e1:97:4d:84:19:53:e7:2d:ce:b5:d5:d3: 15:03:79:da:f4:7a:6c:07:bc:fb:12:9b:42:61:84: cc:00:4c:6a:a5:17:ce:f8:31:6f:3c:9a:02:62:c3: 5a:6c:8f:1e:50:02:69:4b:ff:43:aa:a6:45:89:2b: 8f:cc:0d:77:74:12:b5:02:cb:d9:71:d2:50:f2:d2: 41:0b:19:46:6d:df:9a:1a:eb:7f:87:94:d3:dc:a1: c4:d9:f6:9f:4a:88:0e:2b:39:dc:3e:93:3a:84:c4: d1:12:63:d8:80:e0:49:8c:a5:8f:65:83:51:15:e4: ff:51:cb:5e:da:4f:3a:5f:27:82:8c:92:c2:35:89: 7a:02:b2:4b:fe:07:d0:8a:ec:27:38:fa:94:8e:7a: 3d:bb:3d:ba:1c:28:cf:37:7c:21:bd:8f:78:78:e2: 37:80:37:53:3d:df:b3:b9:eb:98:5d:f1:5c:cb:01: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:50:DA:0A:89:06:27:3F:6F:18:B8:48:A0:F5:21:09:00:A2:D1:16 X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:07:7d:b3:2b:a6:d1:80:a3:6f:8b:86:c8:ad:82:f6:d3:bb: f4:bc:cf:81:a9:cb:81:dc:b8:38:33:71:cc:67:10:65:f7:5f: 81:e0:f5:51:5e:80:e3:e4:a9:8f:db:ae:e9:98:c2:79:6e:84: 94:61:9a:6e:ed:98:70:88:58:a9:95:0c:9f:df:52:cb:b3:e0: b9:23:6d:d9:3d:a9:07:19:d0:dc:a5:cc:1a:57:6f:45:79:37: 67:24:fe:43:80:0c:25:3d:4f:99:1b:01:11:0c:8c:a6:88:ef: 62:93:b3:13:ec:83:0b:00:26:9b:c4:e3:3d:c3:9e:c9:e1:eb: 26:b7:16:f6:53:88:74:fd:4a:47:7a:e7:09:5d:02:7a:a3:b8: f8:f5:62:c5:d3:7b:7c:c3:0e:1f:f0:92:bf:47:83:4f:dd:6c: 0e:5d:6e:28:45:89:ce:30:5f:75:21:d4:38:05:49:13:9a:7d: 7e:99:27:c5:8a:f1:4e:32:ed:a0:e8:a9:d3:c9:2d:23:12:5b: b4:09:83:f6:0e:73:3c:e1:8b:d2:d0:cf:72:ed:f0:14:ef:85: bb:9e:32:52:98:fd:a3:ff:7e:45:5d:ee:d3:90:cf:83:e6:61: 77:aa:5a:1f:c1:7e:d6:6b:61:c2:f2:12:e1:3f:e8:f7:9a:ea: b6:90:c0:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUwODEwMTgzOTE0WhcNMjUwODE3MTgzOTE0WjAYMRYwFAYD VQQDEw02ODk4ZTc1My00NjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZbOL2hj13XxVpmof6VKL1xaYRGIFqhHBG5sx5pI9j1k4TRorMU+JI/nX+bD JFrhiG1uZXan/912n/HYVeE/OFAFYsaEjRCIFyx0+Qnhl02EGVPnLc611dMVA3na 9HpsB7z7EptCYYTMAExqpRfO+DFvPJoCYsNabI8eUAJpS/9DqqZFiSuPzA13dBK1 AsvZcdJQ8tJBCxlGbd+aGut/h5TT3KHE2fafSogOKzncPpM6hMTREmPYgOBJjKWP ZYNRFeT/Ucte2k86XyeCjJLCNYl6ArJL/gfQiuwnOPqUjno9uz26HCjPN3whvY94 eOI3gDdTPd+zueuYXfFcywHahwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1Q2gqJ Bic/bxi4SKD1IQkAotEWMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+B32zK6bRgKNvi4bIrYL207v0vM+BqcuB3Lg4M3HMZxBl91+B4PVR XoDj5KmP267pmMJ5boSUYZpu7ZhwiFiplQyf31LLs+C5I23ZPakHGdDcpcwaV29F eTdnJP5DgAwlPU+ZGwERDIymiO9ik7MT7IMLACabxOM9w57J4esmtxb2U4h0/UpH eucJXQJ6o7j49WLF03t8ww4f8JK/R4NP3WwOXW4oRYnOMF91IdQ4BUkTmn1+mSfF ivFOMu2g6KnTyS0jElu0CYP2DnM84YvS0M9y7fAU74W7njJSmP2j/35FXe7TkM+D 5mF3qlofwX7Wa2HC8hLhP+j3muq2kMBd -----END CERTIFICATE-----Generated at Mon Aug 11 07:53:27 2025 by rpki-client