$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: 94b1xvKWbVD4OrggAvWmQkUQpPdbdJ5MxfsAoLIx51M= Subject key identifier: A3:72:7A:5B:B3:46:66:68:84:A5:38:70:54:14:83:1F:35:D0:2A:7C Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 015C Signing time: Thu 03 Apr 2025 03:20:55 +0000 Manifest this update: Thu 03 Apr 2025 03:20:54 +0000 Manifest next update: Thu 10 Apr 2025 03:20:54 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: w/Akpk/dqVnoJL7j82KEUvw/kF6vI+XlTx/jag13hwg=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E Validity Not Before: Apr 3 03:20:54 2025 GMT Not After : Apr 10 03:20:54 2025 GMT Subject: CN=67edfe97-af73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:73:29:81:c2:66:ff:bd:0c:21:85:8f:b8: 9e:83:64:a2:a8:e0:4d:ef:94:41:73:31:2a:aa:42: ea:a6:7d:7b:bc:2a:67:51:c5:28:0c:ba:dc:68:14: a3:44:05:8b:85:25:72:68:8f:0e:f2:f2:bb:ca:88: d9:cc:56:5b:ea:59:a6:ef:b5:ee:83:93:7f:bc:3a: 82:dd:90:13:18:fa:43:3b:28:df:5c:d6:1c:d3:df: 90:9c:3e:2f:8c:6e:18:00:54:12:06:c1:07:a0:ab: 4e:0f:fa:48:a8:08:48:5e:d7:75:b7:8c:3c:ff:4f: 5b:7b:78:5e:0b:73:3d:87:6e:12:cf:e3:d7:eb:2d: 65:30:c7:25:4e:05:92:35:69:8d:b5:a7:66:15:d1: e2:6b:62:f1:23:33:45:ef:8d:d0:22:86:d5:61:05: 61:7a:f5:e6:da:d0:cc:8e:83:a5:78:a8:e2:ed:3a: 39:57:f7:27:78:74:be:ed:7f:03:76:d0:52:0b:be: d9:e1:ad:22:c3:b6:e7:bd:a8:96:7b:01:85:66:7f: 9f:e9:5c:53:59:8a:4f:5a:e1:df:8d:eb:5e:69:48: e0:94:2a:be:67:c6:8c:b4:ba:bd:a9:21:79:46:1a: e7:b2:1e:65:fb:26:aa:ee:e2:58:07:7c:a6:59:ba: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:72:7A:5B:B3:46:66:68:84:A5:38:70:54:14:83:1F:35:D0:2A:7C X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:61:bd:f6:08:d7:a9:31:49:45:cb:d8:0b:56:47:c4:75:96: 3a:0a:16:c4:51:0b:39:79:57:0e:dd:00:88:5f:c3:04:48:ee: 46:88:15:73:cd:79:46:21:e1:9d:b7:74:b7:ac:d9:01:1d:6e: e4:82:b9:1c:80:34:de:46:b2:8f:51:c0:dc:7e:f3:3e:3b:bd: de:d5:da:d2:71:ac:14:05:e0:ae:37:96:2e:6f:32:da:70:27: 50:e4:f4:40:85:6f:96:6e:19:6c:33:ef:39:90:30:68:11:9b: f6:19:d2:f7:c9:74:38:37:80:9c:53:0f:9f:c5:67:43:43:54: 11:c2:12:28:4d:b4:64:53:18:e5:86:22:67:8f:0a:a1:f0:d4: fd:eb:18:42:9a:44:fb:e4:1d:1c:6d:e5:f2:b3:16:b5:4d:f2: 75:5f:26:62:d2:81:aa:9c:8f:3e:bd:f7:f9:55:0f:60:a1:ed: 4d:e0:df:62:34:35:02:9e:65:f5:b0:2e:e0:57:ba:c9:83:07: b7:ea:b6:e6:9e:f6:49:f4:24:1f:3f:0c:96:16:43:24:0b:85: 13:51:83:4b:ae:5b:71:28:b4:ad:72:fb:a2:96:6e:7a:f3:14: d9:e5:79:1a:7c:38:f3:01:45:1f:26:5f:fb:8f:e7:db:bb:e2: ed:4d:3b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjUwNDAzMDMyMDU0WhcNMjUwNDEwMDMyMDU0WjAYMRYwFAYD VQQDEw02N2VkZmU5Ny1hZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T1zKYHCZv+9DCGFj7ieg2SiqOBN75RBczEqqkLqpn17vCpnUcUoDLrcaBSj RAWLhSVyaI8O8vK7yojZzFZb6lmm77Xug5N/vDqC3ZATGPpDOyjfXNYc09+QnD4v jG4YAFQSBsEHoKtOD/pIqAhIXtd1t4w8/09be3heC3M9h24Sz+PX6y1lMMclTgWS NWmNtadmFdHia2LxIzNF743QIobVYQVhevXm2tDMjoOleKji7To5V/cneHS+7X8D dtBSC77Z4a0iw7bnvaiWewGFZn+f6VxTWYpPWuHfjeteaUjglCq+Z8aMtLq9qSF5 Rhrnsh5l+yaq7uJYB3ymWboD6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNyeluz RmZohKU4cFQUgx810Cp8MB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Yb32CNepMUlFy9gLVkfEdZY6ChbEUQs5eVcO3QCIX8MESO5GiBVz zXlGIeGdt3S3rNkBHW7kgrkcgDTeRrKPUcDcfvM+O73e1drScawUBeCuN5YubzLa cCdQ5PRAhW+WbhlsM+85kDBoEZv2GdL3yXQ4N4CcUw+fxWdDQ1QRwhIoTbRkUxjl hiJnjwqh8NT96xhCmkT75B0cbeXysxa1TfJ1XyZi0oGqnI8+vff5VQ9goe1N4N9i NDUCnmX1sC7gV7rJgwe36rbmnvZJ9CQfPwyWFkMkC4UTUYNLrltxKLStcvuilm56 8xTZ5XkafDjzAUUfJl/7j+fbu+LtTTtu -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:48 2025 by rpki-client