$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: aLjeeg6f5+pVA0PpEppyODdau2fLWDwdl/9pL8Iv4dg= Subject key identifier: D2:4D:3C:85:D5:68:17:D0:24:FF:B4:FF:5A:95:7B:D9:73:5D:1D:EA Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: A2 Signing time: Mon 11 Aug 2025 06:27:08 +0000 Manifest this update: Mon 11 Aug 2025 06:27:07 +0000 Manifest next update: Mon 18 Aug 2025 06:27:07 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: EeFhuHCKPpW6i5oUTcxggooU9n0Vz2VSa8k5P+ecN+I=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: jhgv9aU9R5cyiS+8jQVzOexFGNK8rhaSdkQTaqCgMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Aug 11 06:27:07 2025 GMT Not After : Aug 18 06:27:07 2025 GMT Subject: CN=68998d3c-b725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:66:c4:35:b6:13:6f:17:1c:87:f0:5f:cb: 41:d4:24:ea:97:61:96:5f:b1:6c:ad:eb:a8:74:42: 10:29:51:82:4a:61:da:83:41:a3:2a:1a:10:11:c3: d2:10:00:39:3f:d5:5b:1c:d4:2a:8c:ef:f2:8a:4f: 82:64:f0:61:7f:e6:b2:07:0f:7f:0f:00:bb:f2:70: 36:fc:10:c3:cd:28:5d:75:e5:b8:73:e0:a5:7a:8f: ab:cf:76:29:84:b0:a6:64:24:dd:d6:e5:72:88:4c: f8:32:09:88:27:a0:95:a3:78:c2:75:03:6f:f1:19: 70:58:2c:3e:b0:f3:29:dc:06:09:4e:01:31:9e:00: 34:c4:62:b5:06:f0:35:47:b8:87:75:f1:9c:73:55: bc:eb:af:88:52:a4:0b:4b:09:d1:a2:37:1f:16:62: 7b:2a:7a:24:89:f5:3e:c1:29:50:a3:2f:b3:55:31: f0:c4:f6:b2:81:e1:5f:22:a8:f2:3a:57:80:0a:45: 5d:c7:16:e9:2a:61:36:5d:d7:01:2b:43:83:d7:52: af:49:83:3e:9e:7a:35:10:c3:eb:be:62:6d:27:9d: 47:eb:02:03:69:da:4f:36:2a:65:cf:28:b2:7c:33: f2:87:1b:98:06:25:b0:3d:05:12:e3:16:91:4f:7e: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4D:3C:85:D5:68:17:D0:24:FF:B4:FF:5A:95:7B:D9:73:5D:1D:EA X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ea:36:21:5d:d3:5d:2c:9f:d9:23:79:45:0a:3a:81:b6:e5: ec:04:ac:54:61:cb:cd:ff:43:de:a6:a0:85:01:78:93:fd:b4: 05:83:3e:19:1d:69:4a:f0:97:81:3b:c4:43:32:95:db:1b:f7: e4:b2:2e:c1:50:4d:aa:a6:87:66:0d:74:92:be:09:fc:12:2f: c2:33:32:7d:ae:0f:b2:3f:5c:18:be:b9:ae:f4:d4:b3:22:56: 21:ba:94:06:5d:86:40:d5:9f:47:8b:2f:a2:ce:60:1c:03:93: be:a6:59:64:36:64:8c:dc:b2:a7:21:90:98:69:54:0e:1b:da: 26:63:1b:c4:03:79:05:b6:74:82:ac:0b:0f:4b:2a:35:a6:78: a4:f5:33:19:07:a9:58:87:e1:2b:af:58:2a:84:ec:6c:b3:dd: 9f:66:b9:75:17:5b:1b:73:ba:4f:fe:bd:4d:3e:e2:6e:41:1d: 5a:50:31:60:d5:88:86:21:7f:b2:be:24:c3:c0:41:88:f9:ef: ef:93:1c:6f:62:fc:4c:1a:e0:af:1f:80:37:e1:d5:5b:9f:fc: cc:7c:e3:cd:15:16:66:eb:e6:22:5b:13:8d:ee:0e:07:a2:f8: 7b:f8:ac:c8:b3:e6:02:d5:89:67:9c:66:2e:72:26:fd:70:0b: 4f:71:13:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBGQ0IxMTAvBgNVBAUTKDNDQjRBOTAwNDE4QkU5RENEQzVFMDRBMEJBNjJBODRE QTg1RkU2RTAwHhcNMjUwODExMDYyNzA3WhcNMjUwODE4MDYyNzA3WjAYMRYwFAYD VQQDEw02ODk5OGQzYy1iNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf5mxDW2E28XHIfwX8tB1CTql2GWX7FsreuodEIQKVGCSmHag0GjKhoQEcPS EAA5P9VbHNQqjO/yik+CZPBhf+ayBw9/DwC78nA2/BDDzShddeW4c+Cleo+rz3Yp hLCmZCTd1uVyiEz4MgmIJ6CVo3jCdQNv8RlwWCw+sPMp3AYJTgExngA0xGK1BvA1 R7iHdfGcc1W866+IUqQLSwnRojcfFmJ7KnokifU+wSlQoy+zVTHwxPaygeFfIqjy OleACkVdxxbpKmE2XdcBK0OD11KvSYM+nno1EMPrvmJtJ51H6wIDadpPNiplzyiy fDPyhxuYBiWwPQUS4xaRT34h1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJNPIXV aBfQJP+0/1qVe9lzXR3qMB8GA1UdIwQYMBaAFDy0qQBBi+nc3F4EoLpiqE2oX+bg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEZDQi84OUM3OEY3MDgx NjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZkemNYZ1NndW1Lb1RhaGY1 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEZDQi84OUM3OEY3MDgxNjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZk emNYZ1NndW1Lb1RhaGY1dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu6jYhXdNdLJ/ZI3lFCjqBtuXsBKxUYcvN/0PepqCFAXiT/bQFgz4Z HWlK8JeBO8RDMpXbG/fksi7BUE2qpodmDXSSvgn8Ei/CMzJ9rg+yP1wYvrmu9NSz IlYhupQGXYZA1Z9Hiy+izmAcA5O+pllkNmSM3LKnIZCYaVQOG9omYxvEA3kFtnSC rAsPSyo1pnik9TMZB6lYh+Err1gqhOxss92fZrl1F1sbc7pP/r1NPuJuQR1aUDFg 1YiGIX+yviTDwEGI+e/vkxxvYvxMGuCvH4A34dVbn/zMfOPNFRZm6+YiWxON7g4H ovh7+KzIs+YC1YlnnGYucib9cAtPcRO1 -----END CERTIFICATE-----Generated at Mon Aug 11 11:54:42 2025 by rpki-client