$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft File: SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft (raw, json) Hash identifier: f/ozOi50HaFzTlXDzytD23QPnU29mX9KA9vL9inYAcA= Subject key identifier: F7:31:DF:6A:8C:60:01:C6:73:1D:6A:CC:E7:D7:B8:3A:2A:38:F0:95 Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft Manifest number: 010D Signing time: Wed 05 Nov 2025 05:06:27 +0000 Manifest this update: Wed 05 Nov 2025 05:06:26 +0000 Manifest next update: Wed 12 Nov 2025 05:06:26 +0000 Files and hashes: 1: SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl (hash: g4e/TH0paKcUoUEuVYLdsgJUJn5ryfT3SFoWAXYj6zc=) 2: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (hash: 97sXWjq7Fj5JCQCyo6BRYI+5mz862DUMpg5o3JeeUks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: Nov 5 05:06:26 2025 GMT Not After : Nov 12 05:06:26 2025 GMT Subject: CN=690adb53-ebd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:6a:b2:9e:ac:9b:1a:5c:66:c6:c1:ad:28: 28:d0:2a:9e:5c:d3:32:a6:41:1a:53:09:14:6a:75: 0d:da:80:b7:6e:b3:ee:12:34:03:5c:7e:28:c4:1a: 94:3b:ae:37:c1:69:99:2b:51:d6:5c:45:3c:18:91: e1:80:a7:fe:65:a1:6f:77:30:97:b7:7e:ec:ec:18: e9:9b:a7:4f:6b:56:7d:c1:20:54:4d:59:55:4a:e3: 4b:c4:da:78:45:de:aa:d5:e8:1c:58:e2:8e:5e:68: 91:65:c0:4e:7f:34:ab:d3:f6:85:76:38:d6:72:50: 33:bb:af:f8:62:ad:2c:45:41:f9:f9:22:9b:ca:6b: 23:4b:d5:34:b5:4a:f0:44:05:09:d0:23:0a:e1:82: 91:7b:93:6c:6a:35:52:68:75:0c:9e:fd:78:c7:1a: 21:f2:2b:86:59:0c:9d:0a:fa:de:d1:dd:f5:e1:cc: d5:58:9a:3b:9f:76:67:b6:71:fe:01:8d:2d:04:1f: 23:90:0a:42:cf:f1:d9:a9:15:02:b1:56:5f:81:cf: a2:56:89:fe:ae:14:48:ba:17:23:11:cf:30:ab:10: 4b:6a:cc:f2:52:6a:d2:4f:a1:bf:d1:ff:5c:55:ed: 87:a1:ce:83:5a:5e:77:bf:26:74:42:d4:40:3f:ed: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:31:DF:6A:8C:60:01:C6:73:1D:6A:CC:E7:D7:B8:3A:2A:38:F0:95 X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:10:6f:58:e6:34:a8:e3:c6:6b:05:de:33:f4:1e:cf:08:d0: 14:73:d9:b7:15:c4:8d:db:54:df:9d:ec:0d:51:76:3b:e9:55: b2:1e:41:df:eb:00:52:e4:fd:db:68:81:a0:25:72:00:f4:de: c1:6b:2c:6d:da:c1:48:67:0c:31:92:5b:fc:3f:f0:42:5b:e6: 93:d9:51:64:5f:6b:89:33:92:1a:6a:bd:df:65:a2:78:16:cd: c8:46:21:34:a7:a5:e6:09:4e:bb:2e:61:4c:68:e6:f9:81:ab: 70:4a:9b:4f:29:9f:e3:62:5c:6e:3c:7b:98:07:55:29:8a:81: fb:ba:e1:4c:dc:9c:51:81:2d:2a:b0:c9:cc:20:62:29:2d:c7: 02:1f:f3:4c:41:03:9f:cb:56:cc:42:01:16:03:ea:85:1a:90: 73:a0:6e:21:3a:de:9d:98:37:98:8b:97:b8:e9:ec:a1:84:60: 49:a6:ba:b4:fa:39:17:d0:fc:20:cf:c6:1b:2e:72:5e:6e:f0: fe:70:58:a0:21:4e:44:08:6c:38:f2:6a:08:a3:4e:f9:06:34: 1b:bf:db:db:7f:73:ff:b9:7b:7d:af:d1:25:f5:ce:bc:6e:0b: 0c:bc:67:a4:6c:50:14:ff:27:63:04:9e:18:86:ca:71:b6:2a: eb:a4:8e:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjUxMTA1MDUwNjI2WhcNMjUxMTEyMDUwNjI2WjAYMRYwFAYD VQQDEw02OTBhZGI1My1lYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwehqsp6smxpcZsbBrSgo0CqeXNMypkEaUwkUanUN2oC3brPuEjQDXH4oxBqU O643wWmZK1HWXEU8GJHhgKf+ZaFvdzCXt37s7Bjpm6dPa1Z9wSBUTVlVSuNLxNp4 Rd6q1egcWOKOXmiRZcBOfzSr0/aFdjjWclAzu6/4Yq0sRUH5+SKbymsjS9U0tUrw RAUJ0CMK4YKRe5NsajVSaHUMnv14xxoh8iuGWQydCvre0d314czVWJo7n3ZntnH+ AY0tBB8jkApCz/HZqRUCsVZfgc+iVon+rhRIuhcjEc8wqxBLaszyUmrST6G/0f9c Ve2Hoc6DWl53vyZ0QtRAP+3iUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcx32qM YAHGcx1qzOfXuDoqOPCVMB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q4OS9EM0VENTg1ODIwQjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpn Yk5ZTkVsOEtrYklfN0RBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIEG9Y5jSo48ZrBd4z9B7PCNAUc9m3FcSN21TfnewNUXY76VWyHkHf 6wBS5P3baIGgJXIA9N7Bayxt2sFIZwwxklv8P/BCW+aT2VFkX2uJM5Iaar3fZaJ4 Fs3IRiE0p6XmCU67LmFMaOb5gatwSptPKZ/jYlxuPHuYB1UpioH7uuFM3JxRgS0q sMnMIGIpLccCH/NMQQOfy1bMQgEWA+qFGpBzoG4hOt6dmDeYi5e46eyhhGBJprq0 +jkX0Pwgz8YbLnJebvD+cFigIU5ECGw48moIo075BjQbv9vbf3P/uXt9r9El9c68 bgsMvGekbFAU/ydjBJ4YhspxtirrpI61 -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:26 2025 by rpki-client