$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: I51ecSkxYO4uzy2V0GJeX/ttofXrlf0+ou6+rr73AlE= Subject key identifier: 03:41:0F:53:AB:F7:FB:97:DD:05:6A:D7:7B:1B:09:5A:7A:22:E7:1E Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: E3 Signing time: Wed 13 Aug 2025 06:04:20 +0000 Manifest this update: Wed 13 Aug 2025 06:04:19 +0000 Manifest next update: Wed 20 Aug 2025 06:04:19 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: GGAdhJne+mlSsqo3TEswhjog4u5L1soOS/b02FxZ0Gs=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: 97sXWjq7Fj5JCQCyo6BRYI+5mz862DUMpg5o3JeeUks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: Aug 13 06:04:19 2025 GMT Not After : Aug 20 06:04:19 2025 GMT Subject: CN=689c2ae3-0b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:bb:5c:e0:82:6c:04:89:92:55:fe:84:0e: a5:b3:e9:ea:35:bc:b4:aa:27:c9:0f:cd:01:70:7f: bb:04:50:fc:08:cd:d4:78:dd:aa:1b:3c:9c:35:01: 7a:c2:c7:42:8c:8a:2f:b5:5f:28:01:76:27:08:1d: 5c:f5:1c:d6:87:22:b9:08:61:c3:31:45:69:bc:94: 83:6d:b4:29:ff:69:05:ac:ce:92:fb:ea:ea:44:5d: ac:ea:26:3e:00:73:ff:89:c5:3e:53:81:42:b6:2b: 3c:2b:ea:c2:9e:43:c9:90:53:b7:78:d0:27:e2:94: dc:f1:38:53:96:b5:0d:ff:14:40:d4:9e:6e:37:94: 43:7f:99:b4:0c:98:b8:07:00:85:b3:b0:c5:b6:1d: c0:cd:fb:00:9e:c5:22:51:74:1a:d1:fc:e6:6a:57: 5b:e2:69:e0:4d:d4:65:26:1c:d5:83:4b:52:6f:1d: ab:9f:71:fc:95:9d:95:9c:60:0e:79:47:15:fd:de: d8:b9:43:85:d0:0a:ee:c0:5b:75:50:6d:86:4f:4a: a2:51:6c:ce:ff:6c:b1:be:37:0c:aa:70:75:9a:0d: 0a:fc:19:a7:6d:ec:e7:4e:ba:76:66:7a:91:2a:59: 1b:12:0d:cf:f4:d2:da:66:48:54:2c:d6:d4:73:d8: d9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:41:0F:53:AB:F7:FB:97:DD:05:6A:D7:7B:1B:09:5A:7A:22:E7:1E X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a8:f8:c7:7d:63:38:54:5a:34:ac:f3:5a:f7:e6:99:a7:82: 75:2a:b6:00:5d:31:6b:f9:32:ae:ca:aa:d5:c0:5d:06:7e:19: d5:63:5f:56:2f:32:4d:8f:48:d5:b3:f0:a2:db:4e:8b:d5:3b: c6:d1:e6:b1:17:96:43:00:d8:5e:09:3c:55:09:9f:d1:8a:e0: 26:45:12:fe:5d:1b:da:ce:60:51:09:99:3a:a2:95:48:e8:25: 1e:1b:84:56:e0:8f:68:b6:48:da:4f:8b:36:b6:19:bb:e5:c2: 1d:13:5e:af:17:00:d0:12:63:aa:7b:8c:62:a8:61:cd:23:36: 3b:8a:03:23:b2:02:bb:f6:d9:e6:54:64:7b:6f:f8:0b:ee:4c: 72:cd:1e:c3:a0:5a:71:01:a2:58:a0:b8:d2:72:ba:a9:c1:5f: 52:3d:93:9c:6c:3f:d5:cc:90:0e:84:b0:4f:43:53:dd:3e:6c: 61:d4:cd:81:0f:3d:fc:dd:1e:60:67:65:66:99:66:88:e6:c3: 3d:ba:85:e4:8d:be:cf:79:fe:8e:46:e6:72:19:38:49:3c:ae: 60:05:48:0b:e6:6e:38:c8:81:57:ba:0d:e3:43:86:46:23:60: b8:25:78:d2:2f:d1:70:20:53:0c:42:67:da:f5:b2:ba:a3:6e: 31:63:f0:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjUwODEzMDYwNDE5WhcNMjUwODIwMDYwNDE5WjAYMRYwFAYD VQQDEw02ODljMmFlMy0wYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyK7XOCCbASJklX+hA6ls+nqNby0qifJD80BcH+7BFD8CM3UeN2qGzycNQF6 wsdCjIovtV8oAXYnCB1c9RzWhyK5CGHDMUVpvJSDbbQp/2kFrM6S++rqRF2s6iY+ AHP/icU+U4FCtis8K+rCnkPJkFO3eNAn4pTc8ThTlrUN/xRA1J5uN5RDf5m0DJi4 BwCFs7DFth3AzfsAnsUiUXQa0fzmaldb4mngTdRlJhzVg0tSbx2rn3H8lZ2VnGAO eUcV/d7YuUOF0AruwFt1UG2GT0qiUWzO/2yxvjcMqnB1mg0K/BmnbeznTrp2ZnqR KlkbEg3P9NLaZkhULNbUc9jZRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANBD1Or 9/uX3QVq13sbCVp6IuceMB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q4OS9EM0VENTg1ODIwQjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpn Yk5ZTkVsOEtrYklfN0RBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6qPjHfWM4VFo0rPNa9+aZp4J1KrYAXTFr+TKuyqrVwF0GfhnVY19W LzJNj0jVs/Ci206L1TvG0eaxF5ZDANheCTxVCZ/RiuAmRRL+XRvazmBRCZk6opVI 6CUeG4RW4I9otkjaT4s2thm75cIdE16vFwDQEmOqe4xiqGHNIzY7igMjsgK79tnm VGR7b/gL7kxyzR7DoFpxAaJYoLjScrqpwV9SPZOcbD/VzJAOhLBPQ1PdPmxh1M2B Dz383R5gZ2VmmWaI5sM9uoXkjb7Pef6ORuZyGThJPK5gBUgL5m44yIFXug3jQ4ZG I2C4JXjSL9FwIFMMQmfa9bK6o24xY/BD -----END CERTIFICATE-----Generated at Wed Aug 13 09:49:35 2025 by rpki-client