$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: BCqd0fPZUcO0h/uiGCqp1b8fPDQYsp1OVkscXqPsCoA= Subject key identifier: 06:DC:AD:B2:A1:BF:6A:B0:DC:BB:C3:3A:E2:C5:5C:7D:87:E9:86:43 Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 0189 Signing time: Thu 03 Jul 2025 03:39:30 +0000 Manifest this update: Thu 03 Jul 2025 03:39:29 +0000 Manifest next update: Thu 10 Jul 2025 03:39:29 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: S+Zmbc2ABT6rXzuKtmmSmrGC+Ef+MPjY09sdWM5taqE=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Validity Not Before: Jul 3 03:39:29 2025 GMT Not After : Jul 10 03:39:29 2025 GMT Subject: CN=6865fb71-6b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:00:ed:c9:95:bb:fc:25:6f:68:1d:18:b1: c4:44:af:a8:fb:56:ed:bd:20:b0:bc:12:c1:e3:88: b3:ab:6a:0a:52:da:4c:1c:95:1c:1f:58:4b:91:eb: 51:ac:4b:e4:01:da:44:5f:e8:e0:11:e5:c9:61:5c: fb:e1:d8:93:48:0b:7c:fe:d0:89:f1:f8:bc:7b:a1: 17:65:58:99:26:b4:4e:6c:2b:8f:9c:25:89:bc:7e: d2:e7:82:37:c9:a7:7d:44:5a:20:df:96:3d:8c:80: fe:e4:c1:b3:dc:e3:ac:33:6c:db:5e:a0:26:af:8d: 5f:70:07:94:bb:cf:6c:23:29:c0:26:45:4b:4f:9b: 2b:cd:3d:b6:8f:71:48:e5:ab:64:65:aa:ff:d0:36: e3:c5:da:01:3f:ff:60:35:70:12:d4:6e:ec:5f:5d: e2:f4:c4:ac:a6:9b:fc:0b:4c:00:8f:45:1c:0d:a6: a3:1b:c9:92:d4:7c:bb:9e:87:cd:e7:d0:5b:7c:5f: 48:af:fc:2d:30:0e:24:c6:54:f0:37:20:59:7c:c0: ce:3e:33:9f:93:3e:85:62:79:70:65:a0:11:ef:27: f4:9c:cc:e1:bd:00:3c:6b:6d:92:0b:69:7e:6f:3e: b5:47:8a:30:a8:e9:9a:92:1c:19:6d:f1:f4:02:af: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DC:AD:B2:A1:BF:6A:B0:DC:BB:C3:3A:E2:C5:5C:7D:87:E9:86:43 X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:0b:c3:ca:2a:05:7a:25:25:5f:b2:43:03:30:17:31:59:58: 94:c7:03:f0:3e:33:7f:91:63:d4:5f:70:39:87:0b:4d:b0:d2: 5b:3a:9a:68:27:ed:57:93:98:52:32:7c:4f:04:6d:d8:41:3b: 2b:89:4a:16:ae:f8:cd:bc:4a:38:fa:9b:8c:bf:0b:4b:e5:17: f6:9a:cb:0d:a0:04:58:3e:60:f6:be:e0:95:07:42:f1:a7:f4: 25:dc:04:e6:90:a3:93:63:78:bb:f9:5f:de:bf:58:ed:a9:d4: e6:cf:20:22:7e:d1:43:2a:7c:ed:01:d8:5a:6c:a6:2d:f9:2d: 9a:79:a2:c4:27:3e:74:b5:c5:df:e0:ae:77:3d:cc:e7:35:53: 18:bf:39:3c:6b:be:e7:b8:c2:55:de:2b:41:f4:18:81:b2:b3: 5c:df:b8:2c:48:3c:e6:9f:9c:51:df:e3:ab:a1:4a:72:6b:49: 51:b2:a1:e0:cc:a2:0f:9c:64:85:7b:0b:f8:41:c8:6c:82:3e: a4:5f:87:b9:62:78:e8:d0:75:5f:06:c6:e9:34:b7:39:70:67: 39:a5:29:51:ce:2d:62:d2:64:b9:34:4e:ec:e0:0f:17:50:f7: 1c:87:8b:16:88:33:c0:b9:18:a7:eb:82:03:a1:cb:96:70:c9: 1a:c9:f9:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjUwNzAzMDMzOTI5WhcNMjUwNzEwMDMzOTI5WjAYMRYwFAYD VQQDEw02ODY1ZmI3MS02YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EUA7cmVu/wlb2gdGLHERK+o+1btvSCwvBLB44izq2oKUtpMHJUcH1hLketR rEvkAdpEX+jgEeXJYVz74diTSAt8/tCJ8fi8e6EXZViZJrRObCuPnCWJvH7S54I3 yad9RFog35Y9jID+5MGz3OOsM2zbXqAmr41fcAeUu89sIynAJkVLT5srzT22j3FI 5atkZar/0DbjxdoBP/9gNXAS1G7sX13i9MSsppv8C0wAj0UcDaajG8mS1Hy7nofN 59BbfF9Ir/wtMA4kxlTwNyBZfMDOPjOfkz6FYnlwZaAR7yf0nMzhvQA8a22SC2l+ bz61R4owqOmakhwZbfH0Aq8+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbcrbKh v2qw3LvDOuLFXH2H6YZDMB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyC8PKKgV6JSVfskMDMBcxWViUxwPwPjN/kWPUX3A5hwtNsNJbOppo J+1Xk5hSMnxPBG3YQTsriUoWrvjNvEo4+puMvwtL5Rf2mssNoARYPmD2vuCVB0Lx p/Ql3ATmkKOTY3i7+V/ev1jtqdTmzyAiftFDKnztAdhabKYt+S2aeaLEJz50tcXf 4K53PcznNVMYvzk8a77nuMJV3itB9BiBsrNc37gsSDzmn5xR3+OroUpya0lRsqHg zKIPnGSFewv4Qchsgj6kX4e5Ynjo0HVfBsbpNLc5cGc5pSlRzi1i0mS5NE7s4A8X UPcch4sWiDPAuRin64IDocuWcMkayfll -----END CERTIFICATE-----Generated at Thu Jul 3 14:30:51 2025 by rpki-client