$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: BzrnZhGthgVc/DcjOOPFjokLraELK1Nrfm3VceZHzMo= Subject key identifier: F3:7D:B5:36:61:CC:01:26:D9:11:77:B1:6F:0A:4D:10:70:AC:15:B4 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 0624 Signing time: Sun 02 Nov 2025 22:48:05 +0000 Manifest this update: Sun 02 Nov 2025 22:48:05 +0000 Manifest next update: Sun 09 Nov 2025 22:48:05 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: msi8d56z8R8o8yp2Fb9fO8fTzFuNvxGjLpZtn25zvLU=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: UYRwr7mrGPcB3M4JZ+3w5dX5RLWsIV6TVX8sVBNCGfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Nov 2 22:48:05 2025 GMT Not After : Nov 9 22:48:05 2025 GMT Subject: CN=6907dfa5-8bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:38:38:52:c3:b4:c9:1c:62:44:a4:6d:1a: b4:73:f6:04:08:91:6b:85:e3:74:d8:08:7b:50:89: 39:c7:cd:0b:b6:b1:c6:59:d1:30:fe:0c:2e:cd:54: 90:c1:80:00:2f:bc:c6:94:a6:c6:4d:d1:12:26:2d: bb:3a:35:a9:a7:b8:98:db:67:05:58:16:92:a4:18: a1:b2:7f:13:9d:3a:e6:5d:70:21:da:4b:86:22:59: db:79:bf:a9:22:45:4f:2c:6a:4e:02:91:68:24:e4: 71:bf:f5:2f:a9:a8:3a:3b:ab:53:21:0e:97:dc:b6: 88:96:6c:f6:0b:cc:fd:99:b6:88:9c:7f:cb:fe:ed: 19:e4:e4:82:a4:89:f7:39:96:c6:2d:46:97:23:ea: 71:cb:32:23:6a:6a:78:ed:45:76:5c:64:3c:ab:b7: df:ac:e4:88:5c:a4:bf:c8:0c:48:a4:4c:31:a6:ae: 78:ce:a2:c6:a5:69:01:74:69:09:34:1e:e9:4a:c2: c2:70:66:81:46:6f:16:1d:ed:4c:d9:9a:40:8f:2f: 74:a0:40:b9:67:e6:b2:68:68:94:d2:f9:9d:ad:b7: 80:02:62:52:70:ac:f6:de:88:6b:a3:21:22:85:6f: 36:7c:6c:7e:95:d9:04:bc:30:e3:62:83:15:f6:e8: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7D:B5:36:61:CC:01:26:D9:11:77:B1:6F:0A:4D:10:70:AC:15:B4 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3a:85:93:43:d6:48:53:2b:04:c7:40:48:b1:53:ad:63:bb: 65:e0:e6:0e:dc:89:7e:2c:e2:b8:07:6c:bd:82:af:47:e8:3b: c5:59:61:78:8a:82:c4:9d:d8:e5:9b:d0:45:3a:7a:f9:22:b5: 3e:e2:05:27:69:fb:d4:8c:08:03:c0:bf:2e:0e:a8:db:f4:46: 52:ac:61:3c:c7:74:a2:ae:b1:0f:63:be:bb:bf:70:d3:44:df: ec:f5:d7:f0:ec:7c:78:06:e3:dc:f6:f4:97:2b:f5:bd:cd:f2: 79:1d:20:57:ea:77:de:53:4a:08:2c:61:5e:af:aa:7e:32:05: 54:b9:70:bc:47:ee:a4:59:4a:3d:90:b5:e6:72:84:b8:ac:a2: 87:e7:f6:81:f5:49:ae:96:d3:4c:a5:ee:cb:f3:fb:64:1f:bf: 82:95:b7:69:b8:ef:3f:ab:62:dd:b3:63:3c:e1:38:06:44:90: 41:aa:70:69:22:3a:95:61:d3:45:69:dd:78:2c:7c:44:52:35: 14:b4:15:bc:3f:ff:4a:7d:44:54:21:5b:71:9e:9f:c7:97:13: e3:56:fd:30:20:d0:f9:90:2f:45:05:5f:c3:31:5a:a1:a0:a3: f9:e2:63:bb:4b:bc:49:40:87:b0:77:8e:79:0a:12:37:3e:e0: a0:0a:13:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUxMTAyMjI0ODA1WhcNMjUxMTA5MjI0ODA1WjAYMRYwFAYD VQQDEw02OTA3ZGZhNS04YmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+I4OFLDtMkcYkSkbRq0c/YECJFrheN02Ah7UIk5x80LtrHGWdEw/gwuzVSQ wYAAL7zGlKbGTdESJi27OjWpp7iY22cFWBaSpBihsn8TnTrmXXAh2kuGIlnbeb+p IkVPLGpOApFoJORxv/Uvqag6O6tTIQ6X3LaIlmz2C8z9mbaInH/L/u0Z5OSCpIn3 OZbGLUaXI+pxyzIjamp47UV2XGQ8q7ffrOSIXKS/yAxIpEwxpq54zqLGpWkBdGkJ NB7pSsLCcGaBRm8WHe1M2ZpAjy90oEC5Z+ayaGiU0vmdrbeAAmJScKz23ohroyEi hW82fGx+ldkEvDDjYoMV9ujjFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN9tTZh zAEm2RF3sW8KTRBwrBW0MB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEOoWTQ9ZIUysEx0BIsVOtY7tl4OYO3Il+LOK4B2y9gq9H6DvFWWF4 ioLEndjlm9BFOnr5IrU+4gUnafvUjAgDwL8uDqjb9EZSrGE8x3SirrEPY767v3DT RN/s9dfw7Hx4BuPc9vSXK/W9zfJ5HSBX6nfeU0oILGFer6p+MgVUuXC8R+6kWUo9 kLXmcoS4rKKH5/aB9UmultNMpe7L8/tkH7+ClbdpuO8/q2Lds2M84TgGRJBBqnBp IjqVYdNFad14LHxEUjUUtBW8P/9KfURUIVtxnp/HlxPjVv0wIND5kC9FBV/DMVqh oKP54mO7S7xJQIewd455ChI3PuCgChO3 -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:17 2025 by rpki-client