$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: H5rXq+nRVt9qi+fwx0xuXyYS+Tpfkw+aOPmokAis4Nc= Subject key identifier: 3C:5A:CF:8A:C9:EB:28:FE:FF:58:25:CA:81:FC:47:C5:67:63:40:2D Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 01A3 Signing time: Sat 23 Aug 2025 03:24:28 +0000 Manifest this update: Sat 23 Aug 2025 03:24:28 +0000 Manifest next update: Sat 30 Aug 2025 03:24:27 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: FznvdZUibzSmztNpNIiEs+n43AXSSOjFoaMdmYnF9/s=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Validity Not Before: Aug 23 03:24:28 2025 GMT Not After : Aug 30 03:24:27 2025 GMT Subject: CN=68a9346c-2660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:14:1d:ae:4d:05:3d:5f:6b:bc:ea:2a:97: 82:72:64:9e:2f:82:2e:83:f0:d3:04:68:ca:7d:19: 47:c7:49:47:87:6d:f2:66:eb:99:74:12:c6:bb:b9: 13:98:02:6b:52:ed:9a:2d:92:90:76:f3:55:d9:f9: 34:8c:6b:eb:7f:b5:59:90:24:2e:f3:f4:37:ec:e1: 00:df:71:0e:72:21:d8:e4:ea:d8:06:6a:a0:5d:00: 9e:d0:d1:bc:1d:5a:aa:eb:de:8d:80:38:3c:19:83: 2c:13:5d:97:2f:77:d6:75:8a:ba:81:d6:0a:a0:69: 08:7b:ff:d7:e7:2f:4d:60:25:6e:44:09:44:d1:90: 2f:ad:fb:fd:03:f9:41:cb:cc:4e:5d:42:27:b9:db: 3c:a1:68:b0:3b:1b:4a:18:70:82:83:5a:a8:db:8d: a1:fe:c4:a1:a5:33:e5:cd:1f:a1:17:8d:84:8a:4a: 64:2b:19:47:38:c7:d3:26:ec:0c:b0:3d:ba:99:21: b5:ea:4f:48:4e:6a:1b:6a:57:fa:af:07:b8:b9:f7: 71:01:e0:cc:dd:f6:ec:ee:76:8b:04:5c:d7:19:20: a2:37:e2:d6:f3:45:b3:91:27:c2:89:85:ac:e9:b6: 31:b6:f5:58:1f:34:77:94:f8:30:91:66:b6:00:92: 44:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5A:CF:8A:C9:EB:28:FE:FF:58:25:CA:81:FC:47:C5:67:63:40:2D X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:01:c4:12:8a:da:f9:7f:86:0e:21:2a:11:6b:d0:00:07:b0: 02:28:d5:c1:4b:07:9a:7c:a9:67:21:3f:21:9d:a8:3f:bd:69: 3c:c2:02:47:11:32:a2:44:01:db:95:f8:cd:8f:50:a7:5f:0e: 03:6c:cd:9e:15:b3:a6:4b:c1:66:20:95:0a:bc:3d:50:74:8d: c8:2a:02:96:fb:01:ce:79:1c:7d:fa:70:55:82:80:f2:ba:7f: 9e:2a:54:0d:99:77:70:3b:bc:a0:1c:14:7a:ba:f5:96:0b:e3: fc:bc:46:a1:a0:01:d8:33:24:3c:8d:24:89:35:ea:0f:51:73: ef:3e:6d:f9:4b:ff:b2:f5:75:cc:80:88:02:93:57:58:ca:21: 18:3c:21:dc:0a:3c:3a:d9:26:f0:0e:07:66:88:d9:f3:d2:5e: 1c:b4:a2:9d:43:86:8a:74:c2:e2:16:79:ac:b1:d3:42:b1:f4: dd:ba:1f:8b:04:8b:c5:81:54:dc:c2:ba:f7:d0:71:a8:6a:72: b2:f2:b4:c3:58:22:bd:c7:cb:2e:be:4f:05:e7:d5:00:35:d0: f0:2e:19:ee:8b:1b:ac:60:18:49:1e:d9:fe:e3:54:50:c1:4a: 8b:28:96:c6:1c:63:3e:f9:dc:9f:ef:af:ff:76:95:e3:32:5b: 07:a8:9f:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjUwODIzMDMyNDI4WhcNMjUwODMwMDMyNDI3WjAYMRYwFAYD VQQDEw02OGE5MzQ2Yy0yNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvQUHa5NBT1fa7zqKpeCcmSeL4Iug/DTBGjKfRlHx0lHh23yZuuZdBLGu7kT mAJrUu2aLZKQdvNV2fk0jGvrf7VZkCQu8/Q37OEA33EOciHY5OrYBmqgXQCe0NG8 HVqq696NgDg8GYMsE12XL3fWdYq6gdYKoGkIe//X5y9NYCVuRAlE0ZAvrfv9A/lB y8xOXUInuds8oWiwOxtKGHCCg1qo242h/sShpTPlzR+hF42EikpkKxlHOMfTJuwM sD26mSG16k9ITmobalf6rwe4ufdxAeDM3fbs7naLBFzXGSCiN+LW80WzkSfCiYWs 6bYxtvVYHzR3lPgwkWa2AJJEbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxaz4rJ 6yj+/1glyoH8R8VnY0AtMB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvAcQSitr5f4YOISoRa9AAB7ACKNXBSweafKlnIT8hnag/vWk8wgJH ETKiRAHblfjNj1CnXw4DbM2eFbOmS8FmIJUKvD1QdI3IKgKW+wHOeRx9+nBVgoDy un+eKlQNmXdwO7ygHBR6uvWWC+P8vEahoAHYMyQ8jSSJNeoPUXPvPm35S/+y9XXM gIgCk1dYyiEYPCHcCjw62SbwDgdmiNnz0l4ctKKdQ4aKdMLiFnmssdNCsfTduh+L BIvFgVTcwrr30HGoanKy8rTDWCK9x8suvk8F59UANdDwLhnuixusYBhJHtn+41RQ wUqLKJbGHGM++dyf76//dpXjMlsHqJ+U -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:31 2025 by rpki-client