$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: fW0ApJSaTTiLV7xWt55oXdyUzBX5s4Ob19tThmhFuMU= Subject key identifier: 0C:B9:E6:FD:08:4D:AE:D3:9E:E1:1A:C2:55:4E:99:A3:10:AA:BB:7F Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 05F9 Signing time: Fri 08 Aug 2025 23:21:58 +0000 Manifest this update: Fri 08 Aug 2025 23:21:58 +0000 Manifest next update: Fri 15 Aug 2025 23:21:58 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: mAFbKeCN25xrNU7oqFKwX708zFNtNOpep8SctqJLMhk=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: UYRwr7mrGPcB3M4JZ+3w5dX5RLWsIV6TVX8sVBNCGfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Aug 8 23:21:58 2025 GMT Not After : Aug 15 23:21:58 2025 GMT Subject: CN=68968696-d5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:a5:a7:01:f0:f1:27:df:a8:49:ba:e9:e1: 20:0a:95:64:a9:da:6e:e5:59:f7:e4:f0:25:77:a0: 7a:d1:a5:95:27:0c:92:31:f1:0f:80:75:52:9d:3d: d7:29:be:04:2e:db:a3:f4:ff:a5:43:59:16:0f:02: 58:2c:9a:a2:77:53:37:04:0d:f7:65:68:ec:00:ab: 07:07:4b:be:d9:a4:3b:3c:95:67:15:e7:d6:d3:7d: 57:c3:22:9f:75:c5:71:1d:16:49:b4:7d:d1:fb:4f: 37:7d:f2:e2:17:8b:64:8f:d2:49:2a:2e:cf:37:88: db:91:ec:33:8c:82:a9:71:71:39:bf:b2:6a:45:58: 76:57:11:df:6f:17:a2:79:1e:6b:2e:f2:b3:6e:ba: 2e:23:2c:45:a7:5a:de:c4:f5:04:47:52:3e:01:e9: 9b:9b:41:f2:a7:60:39:14:cf:0a:08:21:23:04:df: b4:1f:ef:68:53:a7:47:44:1d:41:86:cb:00:f9:d9: b3:01:0e:12:c3:b5:f1:55:9b:bf:45:fa:a5:70:41: 81:b8:58:2f:94:07:2d:6d:09:94:ca:29:00:ae:dc: 39:17:72:4f:91:7b:12:88:d5:3a:2e:6f:6d:c3:b6: ca:1b:58:a2:a8:08:94:91:99:da:6f:60:4b:dd:24: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B9:E6:FD:08:4D:AE:D3:9E:E1:1A:C2:55:4E:99:A3:10:AA:BB:7F X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f3:5f:00:64:56:4b:9d:95:45:f5:ad:42:7a:ab:fb:5a:40: 12:8d:a8:9c:bf:f3:f1:c8:76:98:36:e1:bd:89:5b:ca:a7:f0: 9a:3a:aa:0e:7c:b5:39:cf:32:76:38:22:9b:55:dd:53:4f:f9: 85:09:5e:41:0f:9f:a2:d6:8e:05:09:bf:58:42:87:84:66:f4: 4f:9a:4b:fb:95:75:e4:9d:dd:d0:43:8f:10:a7:52:51:a5:ba: 43:52:5e:2b:e2:48:31:78:b2:96:3c:23:9d:8e:3e:d3:4a:a8: 04:49:89:92:3f:79:1d:34:68:16:d7:20:13:d0:8f:30:1b:0e: 47:36:08:d2:cc:d7:44:e2:05:10:60:72:38:a1:62:5a:de:23: f4:0b:46:91:82:52:3d:38:3e:ce:65:42:94:a7:74:e4:d4:d1: 98:b6:f8:0a:1d:39:e6:ae:8d:9c:8f:6c:60:90:60:3c:5b:df: 2d:04:63:36:a9:a8:0e:a2:9a:7d:b9:79:88:fc:75:14:74:c1: 05:bc:13:42:41:51:c7:87:f2:1c:d0:5e:5f:b7:3e:b1:61:66: c3:c9:1c:8a:69:67:93:91:c6:0f:fc:ee:53:78:52:77:03:b7: e5:5d:e0:80:19:45:43:c0:12:10:21:e2:08:2d:8f:39:0e:d5: ba:51:e3:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUwODA4MjMyMTU4WhcNMjUwODE1MjMyMTU4WjAYMRYwFAYD VQQDEw02ODk2ODY5Ni1kNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO6lpwHw8SffqEm66eEgCpVkqdpu5Vn35PAld6B60aWVJwySMfEPgHVSnT3X Kb4ELtuj9P+lQ1kWDwJYLJqid1M3BA33ZWjsAKsHB0u+2aQ7PJVnFefW031XwyKf dcVxHRZJtH3R+083ffLiF4tkj9JJKi7PN4jbkewzjIKpcXE5v7JqRVh2VxHfbxei eR5rLvKzbrouIyxFp1rexPUER1I+Aembm0Hyp2A5FM8KCCEjBN+0H+9oU6dHRB1B hssA+dmzAQ4Sw7XxVZu/RfqlcEGBuFgvlActbQmUyikArtw5F3JPkXsSiNU6Lm9t w7bKG1iiqAiUkZnab2BL3STk4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy55v0I Ta7TnuEawlVOmaMQqrt/MB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3818AZFZLnZVF9a1Ceqv7WkASjaicv/PxyHaYNuG9iVvKp/CaOqoO fLU5zzJ2OCKbVd1TT/mFCV5BD5+i1o4FCb9YQoeEZvRPmkv7lXXknd3QQ48Qp1JR pbpDUl4r4kgxeLKWPCOdjj7TSqgESYmSP3kdNGgW1yAT0I8wGw5HNgjSzNdE4gUQ YHI4oWJa3iP0C0aRglI9OD7OZUKUp3Tk1NGYtvgKHTnmro2cj2xgkGA8W98tBGM2 qagOopp9uXmI/HUUdMEFvBNCQVHHh/Ic0F5ftz6xYWbDyRyKaWeTkcYP/O5TeFJ3 A7flXeCAGUVDwBIQIeIILY85DtW6UeOn -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:46 2025 by rpki-client