$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: bzfuXxlhEeODmqnuZuWMApBfHISNDJ0C0Rj42C5gTMg= Subject key identifier: C8:84:62:DF:9B:F5:C9:96:09:70:A3:79:93:8A:36:0E:43:2D:13:79 Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 0483 Signing time: Thu 15 May 2025 00:05:59 +0000 Manifest this update: Thu 15 May 2025 00:05:59 +0000 Manifest next update: Thu 22 May 2025 00:05:59 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: o+WOQulY4w41K77K2Axo4u8+0JWkOzQ8AvkW46G8cV0=) 2: 3DDAFD5EA2B811ED8FED0B6EC4F9AE02.roa (hash: njD1iNph4a79Pk80u6vCYjOqwamg0LYQyJ5AqgrkM20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: May 15 00:05:59 2025 GMT Not After : May 22 00:05:59 2025 GMT Subject: CN=68252fe7-5778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:3e:3e:60:19:92:cf:17:16:eb:40:c0:77: 42:a3:61:60:c4:33:49:34:91:22:8c:e1:22:c7:0f: b9:16:2d:0b:a4:50:fb:77:98:a9:94:c5:52:75:66: fc:29:3b:ce:dc:a9:a0:73:b3:da:61:58:58:bf:34: ea:01:db:1e:b8:af:ae:8b:67:82:9c:34:d9:48:7c: 0f:36:ea:a7:06:d0:fc:94:91:39:4a:32:d9:45:53: f2:0d:cd:33:78:ff:d9:8c:56:d2:cf:ab:b8:2d:7b: 3b:3f:7b:a1:bc:56:23:82:e6:62:54:fe:34:14:c5: 47:0f:12:ea:4a:d3:b9:c2:e5:27:2f:60:a1:e5:06: a1:4b:34:7e:9a:ce:c4:dc:17:64:6c:36:a1:c9:39: 4f:b3:01:f2:3c:a6:5a:43:e4:1c:d1:04:cc:e4:50: ef:78:63:00:7f:23:90:9d:12:35:76:ab:6f:e0:72: 60:da:c1:af:11:7b:9a:80:7b:54:a0:92:b0:b0:81: 77:9e:68:c8:9d:16:a6:6f:ad:58:ac:06:af:3a:46: da:9e:1a:bd:ef:35:9e:ea:37:1c:e9:ca:c7:8c:86: d5:13:4f:73:82:b4:61:69:f2:10:4e:b5:b3:fd:1c: e8:5f:e8:d7:05:2f:40:42:ba:9a:12:5e:5e:1b:49: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:62:DF:9B:F5:C9:96:09:70:A3:79:93:8A:36:0E:43:2D:13:79 X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7f:e4:68:b3:44:b7:64:75:66:0f:f7:83:f5:0b:78:f3:a1: b3:b7:53:bf:be:17:37:c0:c9:72:26:be:97:fc:5b:f7:17:12: 80:34:1d:41:1c:b3:1e:d1:42:92:a3:e6:a1:9d:89:5b:ee:d0: b1:5b:5a:77:2a:7f:78:47:7a:73:fc:db:6b:3a:28:7d:20:26: 63:41:71:ab:eb:4f:a6:92:93:54:c6:94:72:14:71:e7:39:c4: a3:de:76:71:ba:84:b9:17:9f:8c:4f:85:6b:28:8c:34:4c:07: ff:c6:07:bc:b9:00:7e:66:84:3f:bf:68:bf:ed:47:05:74:84: 7e:f8:5e:fe:7b:c2:7c:bd:57:b2:e9:bb:f2:a0:fd:38:d9:35: 13:47:4b:6c:26:3c:7e:89:3c:19:61:8f:09:c0:6b:2a:2a:6d: 17:0e:84:22:aa:37:7e:9d:f2:1c:fe:f4:81:bf:24:0e:e0:c5: 01:5e:9b:c6:d7:fd:41:c2:1e:99:c6:e8:2f:cf:b5:90:37:62: 0a:3a:71:82:dd:29:98:a7:f9:6c:18:3a:89:e2:b2:4a:94:d0: 8e:56:2a:67:83:1c:61:47:54:b9:ed:2e:09:04:96:78:0a:ee: 63:e2:a2:20:fa:ca:5d:b4:3a:21:26:16:ea:f8:a5:31:47:79: 1b:ec:7d:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjUwNTE1MDAwNTU5WhcNMjUwNTIyMDAwNTU5WjAYMRYwFAYD VQQDEw02ODI1MmZlNy01Nzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjA+PmAZks8XFutAwHdCo2FgxDNJNJEijOEixw+5Fi0LpFD7d5iplMVSdWb8 KTvO3Kmgc7PaYVhYvzTqAdseuK+ui2eCnDTZSHwPNuqnBtD8lJE5SjLZRVPyDc0z eP/ZjFbSz6u4LXs7P3uhvFYjguZiVP40FMVHDxLqStO5wuUnL2Ch5QahSzR+ms7E 3BdkbDahyTlPswHyPKZaQ+Qc0QTM5FDveGMAfyOQnRI1dqtv4HJg2sGvEXuagHtU oJKwsIF3nmjInRamb61YrAavOkbanhq97zWe6jcc6crHjIbVE09zgrRhafIQTrWz /RzoX+jXBS9AQrqaEl5eG0lU1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiEYt+b 9cmWCXCjeZOKNg5DLRN5MB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMf+Ros0S3ZHVmD/eD9Qt486Gzt1O/vhc3wMlyJr6X/Fv3FxKANB1B HLMe0UKSo+ahnYlb7tCxW1p3Kn94R3pz/NtrOih9ICZjQXGr60+mkpNUxpRyFHHn OcSj3nZxuoS5F5+MT4VrKIw0TAf/xge8uQB+ZoQ/v2i/7UcFdIR++F7+e8J8vVey 6bvyoP042TUTR0tsJjx+iTwZYY8JwGsqKm0XDoQiqjd+nfIc/vSBvyQO4MUBXpvG 1/1Bwh6Zxugvz7WQN2IKOnGC3SmYp/lsGDqJ4rJKlNCOVipngxxhR1S57S4JBJZ4 Cu5j4qIg+spdtDohJhbq+KUxR3kb7H1i -----END CERTIFICATE-----Generated at Thu May 15 22:22:07 2025 by rpki-client