$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: Z+rqfxZpRjnhCE/jfXQ4QaHWAPymYOTTyIAuY0d31ko= Subject key identifier: CB:34:68:DF:C2:18:8B:7D:D0:0F:EA:EE:E3:70:25:B7:12:84:88:EA Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 0171 Signing time: Thu 15 May 2025 03:15:19 +0000 Manifest this update: Thu 15 May 2025 03:15:18 +0000 Manifest next update: Thu 22 May 2025 03:15:18 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: 1+H36tdjgOb2euQwtKiTIdi7qEd6Lfn54tQNVrPwGrk=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Validity Not Before: May 15 03:15:18 2025 GMT Not After : May 22 03:15:18 2025 GMT Subject: CN=68255c47-2196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:28:64:89:a7:1a:34:7e:75:24:5a:c1:b5: 71:11:89:c9:2b:86:be:55:f6:af:f8:66:46:ba:65: cd:4a:3f:81:90:bc:f2:cb:b3:31:6e:cb:d0:bb:36: 9e:ab:9d:0b:19:6b:3d:b1:2e:4f:7a:d9:0c:ac:49: 0d:09:ce:f4:69:ad:d5:bf:d7:bd:d9:27:4b:88:83: 89:b8:00:f8:19:19:df:0a:df:43:78:a8:da:f6:7c: 9b:21:a6:ea:e3:ac:b5:b5:fb:53:ad:5c:99:05:be: cd:e7:31:ab:27:9e:0f:23:ac:81:5d:8e:3c:68:a7: 53:4a:b6:14:55:d8:9e:e1:c8:fc:5a:db:47:40:09: fb:6d:eb:da:58:2b:25:db:04:fd:64:ef:ed:b4:16: 9e:aa:55:81:b1:c6:b3:ba:5c:f8:0c:97:8d:d5:42: cb:a7:e8:aa:a0:86:7a:d6:77:f3:19:f3:36:3f:74: 3b:0d:2c:67:d7:0f:a8:7a:9e:c3:57:56:56:5a:6a: 91:23:14:25:dc:5b:38:47:f6:9f:ac:c7:0d:33:f1: 64:ea:70:13:d9:00:36:d7:f7:0b:74:2f:a0:1c:17: ac:eb:31:16:74:7b:3c:66:38:cb:ef:55:70:de:92: 2e:df:43:f2:4d:21:f3:17:2c:d6:38:21:47:ea:0f: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:34:68:DF:C2:18:8B:7D:D0:0F:EA:EE:E3:70:25:B7:12:84:88:EA X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a5:31:c9:57:b4:ec:3e:4d:3c:2c:7a:1a:10:22:21:ec:6d: c0:56:48:9a:78:07:ee:d0:7c:2b:c1:39:68:ab:cd:f9:dc:dd: 9e:cb:3a:ea:11:df:26:bf:a5:f2:c0:8c:cf:4f:80:a3:d0:ed: 14:83:8c:96:b8:52:54:79:ab:9e:8a:90:34:a4:83:99:51:57: d5:6e:20:15:90:7b:9a:4c:0d:1d:dc:4b:6b:7d:98:97:ea:89: 68:d8:59:67:82:c3:fc:60:65:41:39:ee:7c:40:dc:36:91:ec: 33:4a:67:65:69:94:11:73:64:c3:42:ad:8c:34:fc:7b:2b:53: 5d:60:06:fc:7a:40:29:25:32:87:1c:62:f8:05:b6:25:5d:34: 9f:9a:0a:34:7c:51:ae:4f:35:d8:fe:a5:8b:da:ef:c8:0c:0f: 9f:40:ff:c8:f8:99:dd:ed:18:87:4a:55:6e:a8:75:00:38:a4: d8:14:f3:86:e1:cf:09:3f:f9:7b:7d:d3:18:cc:4b:1d:f9:09: b3:3f:0a:0f:e6:0b:dd:04:71:fe:fe:9f:c8:eb:0f:46:f0:e3: 27:2e:a6:5b:ef:2d:fc:d2:24:fd:a9:03:de:82:b2:a4:68:d0: 5b:88:fe:b3:58:de:e1:b6:c4:0e:e1:4d:1b:6f:d5:6c:24:78: ed:a9:65:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjUwNTE1MDMxNTE4WhcNMjUwNTIyMDMxNTE4WjAYMRYwFAYD VQQDEw02ODI1NWM0Ny0yMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLQoZImnGjR+dSRawbVxEYnJK4a+Vfav+GZGumXNSj+BkLzyy7MxbsvQuzae q50LGWs9sS5PetkMrEkNCc70aa3Vv9e92SdLiIOJuAD4GRnfCt9DeKja9nybIabq 46y1tftTrVyZBb7N5zGrJ54PI6yBXY48aKdTSrYUVdie4cj8WttHQAn7bevaWCsl 2wT9ZO/ttBaeqlWBscazulz4DJeN1ULLp+iqoIZ61nfzGfM2P3Q7DSxn1w+oep7D V1ZWWmqRIxQl3Fs4R/afrMcNM/Fk6nAT2QA21/cLdC+gHBes6zEWdHs8ZjjL71Vw 3pIu30PyTSHzFyzWOCFH6g/rWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs0aN/C GIt90A/q7uNwJbcShIjqMB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCpTHJV7TsPk08LHoaECIh7G3AVkiaeAfu0HwrwTloq8353N2eyzrq Ed8mv6XywIzPT4Cj0O0Ug4yWuFJUeaueipA0pIOZUVfVbiAVkHuaTA0d3EtrfZiX 6olo2FlngsP8YGVBOe58QNw2kewzSmdlaZQRc2TDQq2MNPx7K1NdYAb8ekApJTKH HGL4BbYlXTSfmgo0fFGuTzXY/qWL2u/IDA+fQP/I+Jnd7RiHSlVuqHUAOKTYFPOG 4c8JP/l7fdMYzEsd+QmzPwoP5gvdBHH+/p/I6w9G8OMnLqZb7y380iT9qQPegrKk aNBbiP6zWN7htsQO4U0bb9VsJHjtqWXa -----END CERTIFICATE-----Generated at Thu May 15 10:12:06 2025 by rpki-client