$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: NpB9BJC7QuQaHorBDZmoNH6ce0w4zSdhC7T3LPElMkw= Subject key identifier: 39:B2:C2:7C:FC:75:47:78:52:B6:31:8B:74:B6:3D:D8:CD:BE:F0:3E Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 04D5 Signing time: Sun 19 Oct 2025 01:37:37 +0000 Manifest this update: Sun 19 Oct 2025 01:37:37 +0000 Manifest next update: Sun 26 Oct 2025 01:37:37 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: V+OZLAl5jC2XTw7Pgl/8VQgu1OVIG8mPYF0wQ4CoGzA=) 2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: NHQlMr+Fs6uSbsfQLgv2iNTEsZYm+SpOv0roctNIT7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Oct 19 01:37:37 2025 GMT Not After : Oct 26 01:37:37 2025 GMT Subject: CN=68f440e1-09f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:ec:9a:05:03:ab:77:63:02:f2:74:6b:bb: 16:57:c6:f8:4c:35:0c:34:6b:a9:e7:93:32:38:3d: cc:e1:55:f2:74:a5:89:0e:01:8f:92:e9:ab:27:4d: 52:6b:16:07:17:23:46:87:12:52:49:ff:95:ba:7f: fd:97:88:1d:21:6c:d1:a1:d1:3c:7f:7d:af:ff:a5: 4d:27:3d:4d:0e:f2:8b:28:f7:07:64:09:04:dd:9a: 18:eb:e3:a4:23:de:63:f7:e7:b7:36:b8:ca:51:8a: 96:31:ee:67:de:88:dc:e7:b1:87:8a:c6:23:11:54: 23:e7:b6:a2:15:4b:ec:db:a3:d0:4d:a3:e6:0b:a5: a2:da:60:28:a4:18:f3:23:e6:d3:78:b4:91:29:01: b8:90:74:44:32:53:e9:f5:f2:67:d0:6b:85:fb:ee: 00:bf:d8:bc:48:44:dc:6b:10:6b:92:03:2e:2f:8e: 2b:52:56:9b:72:05:e5:eb:c8:3d:65:80:21:da:1d: 70:ef:fc:db:71:c4:38:ac:33:82:7d:92:4b:c5:83: 19:41:2e:16:fd:c1:39:8e:66:c6:4e:c2:31:3f:3d: ab:15:69:b6:b7:ff:8c:47:4e:8f:85:ae:39:f3:b8: da:30:90:48:a4:6f:76:df:95:e8:87:fb:4f:e2:f4: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B2:C2:7C:FC:75:47:78:52:B6:31:8B:74:B6:3D:D8:CD:BE:F0:3E X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9e:92:b5:a8:0c:e2:a8:e9:0e:81:41:da:69:90:c4:c1:c6: 7f:b2:b8:46:54:ec:6c:a3:a5:e7:11:94:95:32:63:4a:cb:8b: 34:8b:ac:01:66:37:37:06:cb:b5:e6:6b:28:64:f3:9e:b5:3d: 05:83:26:cd:c7:e5:10:c3:c5:73:f1:e7:a4:9d:92:90:17:7c: ea:b3:01:63:7a:55:b8:06:8f:8d:1d:74:8f:d4:cb:11:01:45: aa:cd:29:3f:2a:16:6d:8a:6d:d2:dc:5e:92:a0:4a:ea:63:18: c0:9a:91:df:24:08:bc:b2:8d:d2:53:b6:30:f8:66:40:21:33: 15:40:1f:2f:ed:04:b7:22:9e:46:6e:e6:f7:3d:6d:f7:49:bc: 3d:75:df:e8:e1:30:d1:f6:93:93:c8:68:83:85:b8:53:ac:5e: f3:75:9a:83:ff:89:c9:dc:04:6e:db:b7:1c:00:7a:77:64:03: 0a:2c:f5:ac:73:bb:a1:3d:20:d2:f7:64:dd:4e:22:d8:fe:17: 01:47:f6:f5:79:48:d5:6a:09:52:2e:38:aa:db:ef:3f:0c:28: 74:d8:2c:b4:65:f4:c0:a2:b1:15:21:d3:d6:f9:be:49:96:de: 1a:2b:ab:e7:65:18:cf:30:ed:0f:53:ab:4a:2e:6f:12:18:86: d3:dd:d1:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjUxMDE5MDEzNzM3WhcNMjUxMDI2MDEzNzM3WjAYMRYwFAYD VQQDEw02OGY0NDBlMS0wOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr7smgUDq3djAvJ0a7sWV8b4TDUMNGup55MyOD3M4VXydKWJDgGPkumrJ01S axYHFyNGhxJSSf+Vun/9l4gdIWzRodE8f32v/6VNJz1NDvKLKPcHZAkE3ZoY6+Ok I95j9+e3NrjKUYqWMe5n3ojc57GHisYjEVQj57aiFUvs26PQTaPmC6Wi2mAopBjz I+bTeLSRKQG4kHREMlPp9fJn0GuF++4Av9i8SETcaxBrkgMuL44rUlabcgXl68g9 ZYAh2h1w7/zbccQ4rDOCfZJLxYMZQS4W/cE5jmbGTsIxPz2rFWm2t/+MR06Pha45 87jaMJBIpG9235Xoh/tP4vQn7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmywnz8 dUd4UrYxi3S2PdjNvvA+MB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPnpK1qAziqOkOgUHaaZDEwcZ/srhGVOxso6XnEZSVMmNKy4s0i6wB Zjc3Bsu15msoZPOetT0FgybNx+UQw8Vz8eeknZKQF3zqswFjelW4Bo+NHXSP1MsR AUWqzSk/KhZtim3S3F6SoErqYxjAmpHfJAi8so3SU7Yw+GZAITMVQB8v7QS3Ip5G bub3PW33Sbw9dd/o4TDR9pOTyGiDhbhTrF7zdZqD/4nJ3ARu27ccAHp3ZAMKLPWs c7uhPSDS92TdTiLY/hcBR/b1eUjVaglSLjiq2+8/DCh02Cy0ZfTAorEVIdPW+b5J lt4aK6vnZRjPMO0PU6tKLm8SGIbT3dGR -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:25 2025 by rpki-client