$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: mYWQWxbNNQNoc+Kn+20A6zymHmuXtV0MrFZZfBkFAAQ= Subject key identifier: 87:E2:42:F3:1E:3D:0E:F2:DA:B8:91:2C:95:E6:12:6B:2A:2D:E3:5C Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 01C0 Signing time: Sun 19 Oct 2025 05:29:06 +0000 Manifest this update: Sun 19 Oct 2025 05:29:06 +0000 Manifest next update: Sun 26 Oct 2025 05:29:06 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: Cy6nRZS+6PNmYlZAoI+JSA6zJ2TVuI4q4A2zAaW0h3c=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Validity Not Before: Oct 19 05:29:06 2025 GMT Not After : Oct 26 05:29:06 2025 GMT Subject: CN=68f47722-7347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:a2:4a:2c:23:11:d7:3d:bc:69:f3:0a:2e: cf:6f:fe:ca:a6:7c:90:b7:bd:1d:c9:70:4f:52:ed: c4:c3:be:06:0c:a7:a0:46:0c:0e:b9:0e:c7:fc:c2: 4f:44:46:07:0e:91:92:38:e9:d5:30:03:05:54:94: 3e:04:56:91:11:40:24:66:16:2b:ad:0f:02:3f:39: 0c:95:ad:02:23:d6:b2:5d:79:26:89:10:e5:a9:aa: e7:7e:72:6a:a7:cf:80:17:c0:78:10:ab:0e:b1:65: 71:89:e2:45:30:07:66:34:28:1d:c5:6e:5e:26:d3: c9:76:17:d8:d0:2c:f8:d8:34:7f:aa:c1:0c:76:96: e3:9d:13:8f:7b:24:77:92:87:a7:3f:a2:b9:dc:04: 87:e9:eb:62:64:95:dd:2b:da:d6:00:b4:fd:12:53: cd:74:d5:5e:aa:0d:89:e7:31:79:d3:e5:53:b2:2a: cb:d6:e7:a9:22:f9:17:39:43:fc:74:e0:69:1a:06: 6e:85:2c:f9:f3:11:75:c3:77:08:23:86:7a:66:bd: bc:7d:98:c2:e2:d2:3d:8e:29:d8:6b:06:11:d6:71: cd:65:54:51:56:4b:98:69:d4:c3:66:c1:89:64:05: 5c:c1:f0:42:4c:3b:e6:45:1d:c3:db:e7:78:84:46: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E2:42:F3:1E:3D:0E:F2:DA:B8:91:2C:95:E6:12:6B:2A:2D:E3:5C X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:90:85:0a:cb:9b:c6:c6:fc:2f:19:9b:b8:5d:e9:1a:11:04: d0:fb:81:b9:d7:2a:1f:c4:dc:7c:2e:53:55:30:f7:8c:1d:79: c6:14:91:32:e2:f2:13:82:6d:07:7b:56:c4:46:d6:10:6d:14: b5:c2:6d:18:7d:88:ae:93:c1:c6:0f:ef:da:00:b2:22:e4:8d: b8:96:20:ee:1c:91:68:ec:e6:6b:cf:13:9b:90:1c:69:11:fd: f7:04:17:8c:a8:1e:b5:f6:06:ea:79:63:13:7a:29:cf:c5:a1: dd:5c:bd:39:ca:ba:07:81:65:19:0d:cd:6c:39:7c:c5:c7:5b: 7e:4e:83:f7:19:d2:4f:7f:4f:d2:d3:41:68:29:39:a5:76:eb: f5:cb:6f:b9:b5:ec:d1:21:1d:c1:a7:88:7d:50:8d:9e:87:d6: 7b:c3:12:d8:6c:93:76:82:4d:5d:a0:6e:61:c8:5c:dc:d8:9d: 18:be:5f:5c:2d:59:49:0e:bc:99:1d:8b:bd:b4:4f:1e:e9:58: 4b:a2:03:9a:b6:4a:0f:e5:46:02:92:92:53:f3:29:a3:0a:f6: 7d:5d:fe:bf:a6:15:08:4d:04:25:c5:8b:e3:1c:0b:84:10:6e: c5:66:cd:1f:54:df:92:93:65:73:e6:b3:66:c0:f5:32:5e:f5: 45:93:7d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjUxMDE5MDUyOTA2WhcNMjUxMDI2MDUyOTA2WjAYMRYwFAYD VQQDEw02OGY0NzcyMi03MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfWiSiwjEdc9vGnzCi7Pb/7KpnyQt70dyXBPUu3Ew74GDKegRgwOuQ7H/MJP REYHDpGSOOnVMAMFVJQ+BFaREUAkZhYrrQ8CPzkMla0CI9ayXXkmiRDlqarnfnJq p8+AF8B4EKsOsWVxieJFMAdmNCgdxW5eJtPJdhfY0Cz42DR/qsEMdpbjnROPeyR3 koenP6K53ASH6etiZJXdK9rWALT9ElPNdNVeqg2J5zF50+VTsirL1uepIvkXOUP8 dOBpGgZuhSz58xF1w3cII4Z6Zr28fZjC4tI9jinYawYR1nHNZVRRVkuYadTDZsGJ ZAVcwfBCTDvmRR3D2+d4hEbZZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfiQvMe PQ7y2riRLJXmEmsqLeNcMB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3kIUKy5vGxvwvGZu4XekaEQTQ+4G51yofxNx8LlNVMPeMHXnGFJEy 4vITgm0He1bERtYQbRS1wm0YfYiuk8HGD+/aALIi5I24liDuHJFo7OZrzxObkBxp Ef33BBeMqB619gbqeWMTeinPxaHdXL05yroHgWUZDc1sOXzFx1t+ToP3GdJPf0/S 00FoKTmlduv1y2+5tezRIR3Bp4h9UI2eh9Z7wxLYbJN2gk1doG5hyFzc2J0Yvl9c LVlJDryZHYu9tE8e6VhLogOatkoP5UYCkpJT8ymjCvZ9Xf6/phUITQQlxYvjHAuE EG7FZs0fVN+Sk2Vz5rNmwPUyXvVFk339 -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:09 2025 by rpki-client