$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: uhKlg9DB3AlSVxbROzzybNya0oy/zjFgTGde54WmdCw= Subject key identifier: 71:FC:81:D8:74:58:BD:28:C3:65:9F:FC:76:09:91:CF:09:2D:7C:40 Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 0191 Signing time: Sat 19 Jul 2025 03:40:38 +0000 Manifest this update: Sat 19 Jul 2025 03:40:37 +0000 Manifest next update: Sat 26 Jul 2025 03:40:37 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: dNSXpM/C+ck80zhuQZrqm/irqnQi+3qlNVMHeYShyuM=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Validity Not Before: Jul 19 03:40:37 2025 GMT Not After : Jul 26 03:40:37 2025 GMT Subject: CN=687b13b6-206e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:01:e6:95:f7:d3:61:45:e0:91:6c:79:0c: 39:bd:5c:46:ea:38:7a:c5:fe:c8:c2:ff:39:6e:f2: bc:d1:5f:81:0c:bc:85:3e:35:bf:8d:1f:a1:33:75: 2b:e4:49:60:35:68:c1:a0:ce:27:d8:c5:6e:f1:b4: 9d:39:45:a3:9d:9e:10:1b:65:07:76:f7:8c:71:05: ae:dd:b5:e3:ff:6d:84:da:5b:20:01:99:3b:be:c5: 5c:02:90:82:cd:cb:eb:ad:09:71:06:3f:17:73:90: e7:ba:4c:b5:43:dc:3e:f9:de:3c:4e:df:63:67:f5: b4:7c:f7:b2:06:ea:db:56:37:1f:44:aa:8f:19:74: 24:53:72:bc:5c:a3:df:ec:08:32:38:97:ac:b7:75: 63:8f:de:ec:a1:8d:da:a0:e7:8c:28:5e:1d:47:a4: ff:73:0f:85:a3:4f:11:d6:09:d9:b3:16:a0:a5:d7: cf:30:e8:59:bf:3e:91:07:07:51:e7:22:27:77:5e: d8:d4:3c:8e:73:73:3e:bc:10:c1:ea:02:2e:9e:2d: dc:c3:e5:35:aa:8b:bb:78:91:ab:c8:93:66:68:b2: a4:c7:08:df:62:e1:4a:31:2a:de:23:ae:92:e9:d7: c6:35:df:ca:04:a2:f5:79:ad:ff:b3:20:be:01:85: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FC:81:D8:74:58:BD:28:C3:65:9F:FC:76:09:91:CF:09:2D:7C:40 X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:db:fc:18:e7:94:64:4c:5a:85:8a:86:30:5b:7f:c9:44:c5: 22:17:ff:10:d4:b5:74:48:5e:89:84:bb:d9:26:7b:eb:d0:fa: 88:44:02:c7:49:6a:95:b7:1b:99:cf:1b:53:91:7e:bb:9f:28: 33:4e:34:1d:9c:dd:6e:d6:85:72:85:02:95:29:b5:e1:ac:db: a6:ea:8b:84:b6:4d:71:91:15:da:6f:bd:ec:f6:ac:50:da:b8: 8c:65:2c:05:4d:91:0e:45:da:d2:a6:a5:d9:f9:b1:81:d2:c1: 69:b9:29:8a:6d:b5:5d:95:81:1b:c1:a7:bc:53:f6:d5:4a:64: 9a:69:5d:68:55:a6:3b:07:f3:79:bf:3b:3f:83:ba:7d:be:27: 39:73:c2:9d:86:9c:d1:3b:27:de:7e:5d:43:32:06:8c:3e:8a: a1:af:f2:73:34:22:06:8b:f9:47:5a:47:8c:1d:32:e3:46:f0: 2b:93:75:fe:7c:a6:26:db:71:da:01:6e:ee:c1:8a:d3:8a:77: 5c:bf:d1:0d:2e:5a:7d:4d:98:19:f8:65:ca:93:a3:2b:be:27: e9:27:38:c0:9c:81:3e:48:f8:7c:55:56:6f:1a:c1:a4:63:f1: 29:d2:c6:ae:d6:fd:9b:20:04:f6:e2:52:9b:63:ca:be:a8:c5: 04:a2:ee:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjUwNzE5MDM0MDM3WhcNMjUwNzI2MDM0MDM3WjAYMRYwFAYD VQQDEw02ODdiMTNiNi0yMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlkB5pX302FF4JFseQw5vVxG6jh6xf7Iwv85bvK80V+BDLyFPjW/jR+hM3Ur 5ElgNWjBoM4n2MVu8bSdOUWjnZ4QG2UHdveMcQWu3bXj/22E2lsgAZk7vsVcApCC zcvrrQlxBj8Xc5Dnuky1Q9w++d48Tt9jZ/W0fPeyBurbVjcfRKqPGXQkU3K8XKPf 7AgyOJest3Vjj97soY3aoOeMKF4dR6T/cw+Fo08R1gnZsxagpdfPMOhZvz6RBwdR 5yInd17Y1DyOc3M+vBDB6gIuni3cw+U1qou7eJGryJNmaLKkxwjfYuFKMSreI66S 6dfGNd/KBKL1ea3/syC+AYVzNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHH8gdh0 WL0ow2Wf/HYJkc8JLXxAMB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh2/wY55RkTFqFioYwW3/JRMUiF/8Q1LV0SF6JhLvZJnvr0PqIRALH SWqVtxuZzxtTkX67nygzTjQdnN1u1oVyhQKVKbXhrNum6ouEtk1xkRXab73s9qxQ 2riMZSwFTZEORdrSpqXZ+bGB0sFpuSmKbbVdlYEbwae8U/bVSmSaaV1oVaY7B/N5 vzs/g7p9vic5c8KdhpzROyfefl1DMgaMPoqhr/JzNCIGi/lHWkeMHTLjRvArk3X+ fKYm23HaAW7uwYrTindcv9ENLlp9TZgZ+GXKk6MrvifpJzjAnIE+SPh8VVZvGsGk Y/Ep0sau1v2bIAT24lKbY8q+qMUEou6R -----END CERTIFICATE-----Generated at Sun Jul 20 10:22:07 2025 by rpki-client