$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: aVEm42G9Ftje5yIaT8vLvipY2WIvYXs8nj1c/aYU9rU= Subject key identifier: E5:6A:92:10:4E:B2:C0:52:7B:38:8B:EC:D8:63:E1:8B:42:02:BD:93 Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: AA Signing time: Fri 25 Apr 2025 05:08:05 +0000 Manifest this update: Fri 25 Apr 2025 05:08:05 +0000 Manifest next update: Fri 02 May 2025 05:08:05 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: i6oaUv5Pj2pmA//wu9uFNPgGojmKHxUp7KPv6N4VpFY=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: XvWRCynYkFhCMaJDNTtD88NyWN5MgwjlrDADWnFFA8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: Apr 25 05:08:05 2025 GMT Not After : May 2 05:08:05 2025 GMT Subject: CN=680b18b5-fb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:a4:1f:0b:56:27:78:b9:f9:5f:50:95:a1: 9e:87:da:69:80:cd:ec:77:d3:bc:a9:0a:25:20:51: 17:bf:f9:17:c5:44:9e:d8:03:27:65:30:28:46:df: f6:ba:d6:a5:fb:ad:9f:04:b9:88:fd:ed:bd:c4:99: 08:01:5d:15:8d:e4:05:fd:6f:6d:fb:75:cd:d4:af: 0b:05:d9:cb:a1:b4:fb:77:2c:b5:2a:61:c8:fb:29: a8:04:e9:40:71:6d:f9:9d:7a:a2:8f:1a:55:8a:37: 01:ff:72:8d:e9:d7:27:12:08:4d:ea:1c:9b:b4:c7: 98:21:ac:75:4c:b3:8f:3d:44:fb:62:c9:5d:3c:1d: 43:91:e4:25:a3:65:8e:75:06:c7:82:34:13:af:20: 3e:31:58:77:76:82:b9:19:07:3d:eb:ca:dc:d3:32: 06:35:9c:6e:4e:2c:c0:e2:a6:78:8c:06:0d:69:72: 0d:4c:f1:69:42:75:40:c5:da:55:03:45:b8:80:20: 02:63:23:9f:d6:f2:5a:5a:f0:22:71:40:ec:26:18: b3:01:2e:3e:42:bd:5d:ce:a9:5f:e7:a8:84:b6:a4: e7:10:35:a0:fd:79:8b:92:a1:d5:86:10:3d:7c:7b: cb:b0:84:2f:9a:e7:74:6c:1e:b1:25:3f:57:a0:67: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:92:10:4E:B2:C0:52:7B:38:8B:EC:D8:63:E1:8B:42:02:BD:93 X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:01:15:b6:e2:1f:99:f9:0a:a5:36:37:39:b2:1a:52:cf:d1: af:03:b5:c7:a1:f3:cc:75:f5:ec:65:04:35:f3:63:54:1f:e3: 22:2c:b9:8c:17:0e:58:6e:83:44:21:1f:a2:c3:53:fc:f4:2c: 28:db:85:19:9d:01:b3:60:6e:f5:14:42:8d:17:75:f0:1f:3d: c8:35:1c:6a:8b:0f:25:c7:1b:81:7a:ce:38:1d:63:70:13:df: ae:76:64:2b:7e:8f:52:fc:f5:67:e0:e0:bb:c9:b4:28:91:4d: 0c:a9:af:d5:f4:bc:52:eb:7e:d8:c9:6c:19:e9:b0:87:78:0a: b7:17:7a:76:da:09:40:75:62:e3:6a:89:d9:e9:8a:71:09:e0: c5:3e:98:ef:c7:ba:06:13:16:05:fd:6d:8f:42:79:7c:88:53: cb:0a:b1:9a:d6:f6:6f:fc:9b:fe:54:b7:f5:09:98:b4:51:58: cd:07:72:f8:ec:c7:a7:ef:26:fa:df:79:3d:81:42:8b:28:58: 91:a3:81:27:de:31:ba:ec:79:fa:88:ab:3e:48:19:54:f8:71: 57:54:ea:d2:3f:f3:d4:6d:2f:90:72:05:7e:96:2b:1e:91:5e: 39:ed:fa:bf:6e:eb:fe:c3:79:b8:1d:2d:f3:b9:d4:dc:1a:00: bb:ce:ac:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjUwNDI1MDUwODA1WhcNMjUwNTAyMDUwODA1WjAYMRYwFAYD VQQDEw02ODBiMThiNS1mYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SukHwtWJ3i5+V9QlaGeh9ppgM3sd9O8qQolIFEXv/kXxUSe2AMnZTAoRt/2 utal+62fBLmI/e29xJkIAV0VjeQF/W9t+3XN1K8LBdnLobT7dyy1KmHI+ymoBOlA cW35nXqijxpVijcB/3KN6dcnEghN6hybtMeYIax1TLOPPUT7YsldPB1DkeQlo2WO dQbHgjQTryA+MVh3doK5GQc968rc0zIGNZxuTizA4qZ4jAYNaXINTPFpQnVAxdpV A0W4gCACYyOf1vJaWvAicUDsJhizAS4+Qr1dzqlf56iEtqTnEDWg/XmLkqHVhhA9 fHvLsIQvmud0bB6xJT9XoGcocQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVqkhBO ssBSeziL7Nhj4YtCAr2TMB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q4OS9EM0VENTg1ODIwQjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpn Yk5ZTkVsOEtrYklfN0RBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3ARW24h+Z+QqlNjc5shpSz9GvA7XHofPMdfXsZQQ182NUH+MiLLmM Fw5YboNEIR+iw1P89Cwo24UZnQGzYG71FEKNF3XwHz3INRxqiw8lxxuBes44HWNw E9+udmQrfo9S/PVn4OC7ybQokU0Mqa/V9LxS637YyWwZ6bCHeAq3F3p22glAdWLj aonZ6YpxCeDFPpjvx7oGExYF/W2PQnl8iFPLCrGa1vZv/Jv+VLf1CZi0UVjNB3L4 7Men7yb633k9gUKLKFiRo4En3jG67Hn6iKs+SBlU+HFXVOrSP/PUbS+QcgV+lise kV457fq/buv+w3m4HS3zudTcGgC7zqzj -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:31 2025 by rpki-client