$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: UzQPSC9RB+3+/NKw2ldgUlnAOvTSEZAbGCc72528134= Subject key identifier: DF:7F:75:F3:59:5E:92:0E:6E:02:AF:0B:CB:B4:AE:F7:BA:0A:12:7E Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 01C8 Signing time: Wed 05 Nov 2025 03:02:37 +0000 Manifest this update: Wed 05 Nov 2025 03:02:37 +0000 Manifest next update: Wed 12 Nov 2025 03:02:36 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: ecSLZLUXXUAfkCR2/BhNblm8bZy29m7EtMifvYYyl5s=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Validity Not Before: Nov 5 03:02:37 2025 GMT Not After : Nov 12 03:02:36 2025 GMT Subject: CN=690abe4d-0174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:c0:b7:6b:fb:af:9a:c1:fb:c5:ba:d1:64: a6:bd:69:12:b9:71:47:81:b0:30:c3:c0:8e:67:47: 5a:d6:29:cd:0d:b6:ab:95:65:39:14:d4:1a:24:d6: 5a:28:d4:01:bb:df:1e:f7:96:41:bd:36:19:31:1a: c0:b2:20:7a:b8:e8:3c:69:d4:0c:17:d3:b1:99:66: 4f:23:21:4c:33:16:32:2c:f7:75:ff:9a:29:cf:72: fd:f9:ff:f5:0f:af:8d:34:06:8b:e5:7a:12:af:40: 9c:3e:c7:59:5a:a9:2c:83:c9:7e:b5:35:ac:1f:a6: af:54:7c:bc:7a:9a:01:93:50:a6:33:b1:15:b3:ec: 15:73:27:fa:e1:35:a5:ce:21:bc:f1:b1:eb:4f:2c: 82:8f:c7:bf:5f:85:25:70:0a:c9:a8:a2:fe:af:1d: f3:f7:b3:90:b7:a7:26:6f:87:04:e7:b5:17:66:f0: 76:e4:8b:d3:d1:88:7b:d3:90:b5:99:c4:d7:78:03: 1f:0a:ff:18:52:48:b5:a5:38:14:69:30:42:ea:04: bc:6b:96:a8:b7:d1:23:22:74:eb:4a:2a:ec:82:7e: 4b:f3:8f:9a:14:13:93:d3:a3:92:84:74:7e:95:82: 45:dd:1c:75:8d:b4:44:68:b5:64:ec:92:0c:aa:a8: fb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7F:75:F3:59:5E:92:0E:6E:02:AF:0B:CB:B4:AE:F7:BA:0A:12:7E X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:09:40:a3:dd:bf:f6:93:a0:be:d0:cc:f9:24:d7:3b:ff:eb: 18:90:5e:3e:54:b1:a7:81:db:be:8d:91:45:d2:7b:ae:2f:e3: d3:91:70:5b:17:fe:b5:30:b7:d4:28:8f:bb:f0:13:4b:33:f8: db:9b:15:b4:fe:86:9a:b6:ac:18:3e:4e:f9:88:2d:3c:c7:b5: eb:ca:1f:e6:6c:0a:ab:d7:a3:49:71:30:ed:68:1e:e0:54:be: 5f:11:c4:08:69:7a:ed:0d:15:7e:11:55:01:fe:f7:4d:8c:e6: 51:5a:83:1f:62:35:32:65:d7:cc:80:ed:aa:d8:c5:96:3f:38: f0:c8:13:36:99:a7:e8:b2:8c:7b:c8:b8:a5:83:57:43:53:86: 20:a0:5f:bc:66:73:65:c9:33:88:cc:6d:b9:98:02:b7:69:b7: 98:9e:d7:d4:b6:9e:f3:f9:07:26:83:5b:b1:0c:ae:e1:ec:a9: 9a:c5:10:99:a5:03:e6:3d:fb:84:bc:6b:56:a7:e7:2a:9f:6c: 5e:a7:45:bd:b1:4a:bc:cc:5a:f7:08:39:ce:94:8b:31:e1:ca: 7c:a1:5a:b1:59:2b:a2:62:41:54:74:34:e9:e5:9d:90:4f:27: 01:d2:ea:ac:eb:13:f1:fe:e5:ff:1f:2c:0d:25:a9:41:80:41: c6:c9:1d:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjUxMTA1MDMwMjM3WhcNMjUxMTEyMDMwMjM2WjAYMRYwFAYD VQQDEw02OTBhYmU0ZC0wMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWfAt2v7r5rB+8W60WSmvWkSuXFHgbAww8COZ0da1inNDbarlWU5FNQaJNZa KNQBu98e95ZBvTYZMRrAsiB6uOg8adQMF9OxmWZPIyFMMxYyLPd1/5opz3L9+f/1 D6+NNAaL5XoSr0CcPsdZWqksg8l+tTWsH6avVHy8epoBk1CmM7EVs+wVcyf64TWl ziG88bHrTyyCj8e/X4UlcArJqKL+rx3z97OQt6cmb4cE57UXZvB25IvT0Yh705C1 mcTXeAMfCv8YUki1pTgUaTBC6gS8a5aot9EjInTrSirsgn5L84+aFBOT06OShHR+ lYJF3Rx1jbREaLVk7JIMqqj7gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9/dfNZ XpIObgKvC8u0rve6ChJ+MB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeCUCj3b/2k6C+0Mz5JNc7/+sYkF4+VLGngdu+jZFF0nuuL+PTkXBb F/61MLfUKI+78BNLM/jbmxW0/oaatqwYPk75iC08x7Xryh/mbAqr16NJcTDtaB7g VL5fEcQIaXrtDRV+EVUB/vdNjOZRWoMfYjUyZdfMgO2q2MWWPzjwyBM2mafosox7 yLilg1dDU4YgoF+8ZnNlyTOIzG25mAK3abeYntfUtp7z+Qcmg1uxDK7h7KmaxRCZ pQPmPfuEvGtWp+cqn2xep0W9sUq8zFr3CDnOlIsx4cp8oVqxWSuiYkFUdDTp5Z2Q TycB0uqs6xPx/uX/HywNJalBgEHGyR33 -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:25 2025 by rpki-client