$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json) Hash identifier: tMhTKekiHDFFuI92JEorqRqFpI8SK/lthoVkcSzEtQk= Subject key identifier: 21:B8:2E:CA:D8:D2:F2:70:1A:7A:54:FC:EA:8D:FA:0F:19:75:FF:AD Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft Manifest number: 05CF Signing time: Mon 30 Jun 2025 23:26:05 +0000 Manifest this update: Mon 30 Jun 2025 23:26:04 +0000 Manifest next update: Mon 07 Jul 2025 23:26:04 +0000 Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: /j1UB/z5lf4ooPk1uoW/cNMSSrlQ66jtfHGLAtRCM2U=) 2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: Jun 30 23:26:04 2025 GMT Not After : Jul 7 23:26:04 2025 GMT Subject: CN=68631d0c-0a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:da:5d:d1:c8:07:24:e3:6d:23:44:7f:a4:f5: 6d:ff:8c:c0:9b:f5:3f:cc:27:73:91:f9:fb:e7:aa: 97:47:03:c1:d5:06:5a:4a:28:d7:74:62:e4:af:47: 91:92:5c:6d:a2:d6:91:7e:93:5d:29:c4:61:f6:bc: de:f0:cb:c7:a8:c8:2b:da:46:52:69:53:46:a4:a4: f3:c0:f7:eb:79:69:4f:a9:76:62:9e:1b:67:8f:73: 59:ca:5a:ed:c2:22:47:b5:99:81:f4:f3:8e:56:d1: 44:98:17:a1:0e:39:d3:97:27:01:87:93:4e:24:25: 81:7e:09:89:72:62:46:e9:cb:3c:ff:6e:71:9e:c1: 12:c5:d3:61:44:62:54:25:14:5a:4c:fd:2d:bd:11: 9b:ab:16:15:ef:83:a5:19:3f:ab:20:25:4d:26:59: 68:9e:20:c7:50:fb:cd:13:1d:52:52:43:91:85:49: ba:82:21:7e:3d:ba:cc:88:03:18:5c:b9:1b:ff:ee: 13:26:34:68:fe:a1:dd:4b:7c:5b:7d:da:fc:56:f7: 1c:ff:b8:1d:bc:55:ec:41:77:36:9a:7d:28:9f:23: eb:89:8d:df:14:b5:f4:b8:e0:08:79:f3:7f:6b:f7: 12:eb:f1:a1:46:c5:02:af:de:67:2f:c8:b1:39:4f: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B8:2E:CA:D8:D2:F2:70:1A:7A:54:FC:EA:8D:FA:0F:19:75:FF:AD X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:66:97:53:13:06:23:83:4c:c6:4f:55:13:79:78:37:03:5f: 5d:ee:30:78:7d:c0:43:0e:66:c6:d4:e8:8c:17:99:f5:55:39: 08:00:04:75:2d:c6:80:30:ce:43:a6:42:75:4a:40:78:f0:4a: f0:b3:75:89:6d:b7:ec:2c:94:91:0b:9c:82:c2:da:a0:61:8e: 9f:bc:06:d7:ca:5e:25:68:db:df:98:d2:0e:32:37:cf:06:06: 82:0e:dd:17:27:4a:35:65:13:2e:3b:e5:04:37:89:4b:a6:3f: 1a:6c:09:51:38:cf:a7:3a:c1:24:aa:ca:31:7e:22:f4:80:c1: 91:6a:1b:9f:41:d7:9e:64:e0:0c:23:31:26:08:c0:34:9e:59: 18:bf:8a:69:0b:c3:aa:a8:d5:25:33:3a:ba:fe:05:76:0f:69: 10:fe:12:eb:53:44:ed:fa:86:1a:42:e9:f9:f1:03:b0:d0:8c: db:16:3e:49:c4:83:ce:99:32:24:10:d2:48:6f:dd:20:51:09: 5c:78:2d:98:9b:51:72:ec:84:4b:3b:6c:3d:da:81:3a:94:cd: 02:b0:d6:80:0c:cc:61:63:54:f8:25:66:02:4e:02:d8:86:00: e7:b7:f9:0e:40:6b:f2:ba:b8:ef:e7:12:02:9d:c0:e9:21:2d: 7b:bb:79:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjUwNjMwMjMyNjA0WhcNMjUwNzA3MjMyNjA0WjAYMRYwFAYD VQQDEw02ODYzMWQwYy0wYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69pd0cgHJONtI0R/pPVt/4zAm/U/zCdzkfn756qXRwPB1QZaSijXdGLkr0eR klxtotaRfpNdKcRh9rze8MvHqMgr2kZSaVNGpKTzwPfreWlPqXZinhtnj3NZylrt wiJHtZmB9POOVtFEmBehDjnTlycBh5NOJCWBfgmJcmJG6cs8/25xnsESxdNhRGJU JRRaTP0tvRGbqxYV74OlGT+rICVNJlloniDHUPvNEx1SUkORhUm6giF+PbrMiAMY XLkb/+4TJjRo/qHdS3xbfdr8Vvcc/7gdvFXsQXc2mn0onyPriY3fFLX0uOAIefN/ a/cS6/GhRsUCr95nL8ixOU+sZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG4LsrY 0vJwGnpU/OqN+g8Zdf+tMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012 MTdlNHNoZzB3RkdYYjRaR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnZpdTEwYjg0zGT1UTeXg3A19d7jB4fcBDDmbG1OiMF5n1VTkIAAR1 LcaAMM5DpkJ1SkB48Erws3WJbbfsLJSRC5yCwtqgYY6fvAbXyl4laNvfmNIOMjfP BgaCDt0XJ0o1ZRMuO+UEN4lLpj8abAlROM+nOsEkqsoxfiL0gMGRahufQdeeZOAM IzEmCMA0nlkYv4ppC8OqqNUlMzq6/gV2D2kQ/hLrU0Tt+oYaQun58QOw0IzbFj5J xIPOmTIkENJIb90gUQlceC2Ym1Fy7IRLO2w92oE6lM0CsNaADMxhY1T4JWYCTgLY hgDnt/kOQGvyurjv5xICncDpIS17u3kx -----END CERTIFICATE-----Generated at Tue Jul 1 18:15:11 2025 by rpki-client