$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: /h56HCJAii3RKv6m3Zk2ijBOXspkwdTJzTJGuoy2Lr0= Subject key identifier: D3:4F:6F:45:C4:FD:45:B3:0A:4E:86:CD:5C:A2:42:D1:B6:99:61:0B Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 0178 Signing time: Sat 31 May 2025 03:26:28 +0000 Manifest this update: Sat 31 May 2025 03:26:27 +0000 Manifest next update: Sat 07 Jun 2025 03:26:27 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: UeUv9ROQ5AyVuomSxCWw1E+ka+OLaiDRva8Cu75pObM=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Validity Not Before: May 31 03:26:27 2025 GMT Not After : Jun 7 03:26:27 2025 GMT Subject: CN=683a76e3-e3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:9f:81:16:e1:e7:d0:66:0a:6d:a0:7d:54: 9a:14:f9:09:9c:8c:52:6e:23:f9:bd:d7:cc:ac:d2: 0f:51:d7:5f:07:9d:9a:b8:bb:dc:3b:0c:67:b2:2f: 29:d4:b5:f3:41:e3:ac:4b:60:0a:4a:d4:27:6f:a6: ba:b7:c0:01:dd:9e:4c:9b:ec:a6:01:27:3e:77:7e: 4a:60:56:07:b6:af:e7:3a:78:d6:c6:fc:39:e0:4c: a2:fd:04:cb:8b:27:68:01:63:aa:e7:3d:0c:fa:a0: ba:48:79:ca:25:f7:32:ac:8e:81:25:3f:47:2b:5a: 4c:45:cb:50:3b:28:64:44:a1:6e:0d:35:35:3d:fa: 16:46:1a:66:55:ce:1e:ab:16:fd:91:f3:a6:86:ff: 21:1b:e7:42:6b:e2:2d:63:a4:0f:df:2d:17:ee:a7: 3b:bd:e0:f0:bc:ef:e4:50:7e:e9:82:51:4d:e7:00: 41:54:7f:4c:28:f6:12:e8:df:e6:90:8b:4e:82:d5: 55:a2:17:1a:ae:a6:bb:7b:a4:4f:05:16:f5:58:07: 74:5f:63:e0:dc:b9:c4:50:ba:94:0f:21:95:7b:62: 2b:7f:1a:80:ea:f0:ed:6d:38:73:f5:8f:59:41:5b: c7:31:27:18:c9:f9:e5:f2:57:3c:1f:3b:b5:91:f9: 64:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4F:6F:45:C4:FD:45:B3:0A:4E:86:CD:5C:A2:42:D1:B6:99:61:0B X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:0b:e1:8e:bc:ab:a4:e7:ea:ed:41:16:94:c8:2c:69:8d:9b: 6a:c7:18:d8:e5:b4:3c:0f:62:3a:0e:c2:32:1d:df:00:e2:d3: 99:22:35:29:56:09:51:78:6d:34:0a:a2:22:67:11:66:56:3f: bb:57:57:38:81:0e:55:ef:e3:39:26:2e:5e:2c:fb:07:c0:c8: de:3b:2f:fd:50:51:70:17:37:a3:59:0c:63:93:5b:17:1d:8e: 2c:b8:51:a3:5f:81:39:97:aa:0c:6e:93:35:d0:dc:8b:ec:67: 45:5d:cb:7b:85:d3:75:2b:95:62:55:c6:2d:32:6c:a7:05:99: b0:8b:db:fb:66:2d:32:2f:29:29:2f:fb:5e:1d:6c:e7:7e:d1: 03:ee:fa:f6:2c:ea:38:71:a5:6d:27:53:02:54:0f:72:8f:1b: d3:99:00:5d:62:a5:e9:83:3d:50:0c:a1:05:7a:f9:75:0e:47: 07:df:32:99:25:8b:65:78:57:34:e6:c8:84:e6:2b:81:15:84: ad:74:0d:b5:fd:4b:05:26:e6:e7:23:78:b5:81:39:a6:f0:d3: c5:92:7f:c2:20:c4:95:42:dc:77:61:40:35:cb:37:a1:b2:20: fe:5f:14:dc:b5:c4:a1:d8:e6:db:02:2d:9b:d0:9f:7d:87:46: fb:eb:08:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjUwNTMxMDMyNjI3WhcNMjUwNjA3MDMyNjI3WjAYMRYwFAYD VQQDEw02ODNhNzZlMy1lM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaafgRbh59BmCm2gfVSaFPkJnIxSbiP5vdfMrNIPUddfB52auLvcOwxnsi8p 1LXzQeOsS2AKStQnb6a6t8AB3Z5Mm+ymASc+d35KYFYHtq/nOnjWxvw54Eyi/QTL iydoAWOq5z0M+qC6SHnKJfcyrI6BJT9HK1pMRctQOyhkRKFuDTU1PfoWRhpmVc4e qxb9kfOmhv8hG+dCa+ItY6QP3y0X7qc7veDwvO/kUH7pglFN5wBBVH9MKPYS6N/m kItOgtVVohcarqa7e6RPBRb1WAd0X2Pg3LnEULqUDyGVe2IrfxqA6vDtbThz9Y9Z QVvHMScYyfnl8lc8Hzu1kflkkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNPb0XE /UWzCk6GzVyiQtG2mWELMB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqC+GOvKuk5+rtQRaUyCxpjZtqxxjY5bQ8D2I6DsIyHd8A4tOZIjUp VglReG00CqIiZxFmVj+7V1c4gQ5V7+M5Ji5eLPsHwMjeOy/9UFFwFzejWQxjk1sX HY4suFGjX4E5l6oMbpM10NyL7GdFXct7hdN1K5ViVcYtMmynBZmwi9v7Zi0yLykp L/teHWznftED7vr2LOo4caVtJ1MCVA9yjxvTmQBdYqXpgz1QDKEFevl1DkcH3zKZ JYtleFc05siE5iuBFYStdA21/UsFJubnI3i1gTmm8NPFkn/CIMSVQtx3YUA1yzeh siD+XxTctcSh2ObbAi2b0J99h0b76wjO -----END CERTIFICATE-----Generated at Sat May 31 17:30:14 2025 by rpki-client