$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json) Hash identifier: BUXlQe7jmESN2m6NrXl7Ziw3bSiOb1pE4r2Sqp/own0= Subject key identifier: A8:B6:49:AF:E9:5F:C5:1B:05:61:02:5C:04:87:DE:45:FD:57:09:2B Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft Manifest number: 0607 Signing time: Sun 19 Oct 2025 00:29:36 +0000 Manifest this update: Sun 19 Oct 2025 00:29:35 +0000 Manifest next update: Sun 26 Oct 2025 00:29:35 +0000 Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: aQQOMniekMIEOeQ1qpwn7p3761rDwndik1H6zK0WiBw=) 2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: Oct 19 00:29:35 2025 GMT Not After : Oct 26 00:29:35 2025 GMT Subject: CN=68f430f0-2527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:3c:ac:cd:07:c4:58:a1:af:29:02:fa:cc: f9:bf:1a:f9:01:54:69:e5:74:97:31:38:92:85:b4: a2:0f:fc:4e:fc:b8:a4:21:c7:26:06:59:e9:6d:5f: 47:64:ec:80:86:95:82:46:1a:7a:1e:44:a7:39:61: 39:78:12:05:74:96:a5:a0:5d:33:52:df:1a:a7:4e: ca:fc:74:1c:ee:c9:4b:46:04:ba:0e:0e:9a:11:4e: a6:3f:35:e1:fa:c8:7d:98:f7:9b:37:43:48:62:31: 26:07:3e:ac:96:1d:30:72:1d:47:e3:c6:79:3a:f5: d9:fd:85:f4:4e:1e:f5:a6:61:13:d6:6e:e0:02:9f: b9:36:4a:0a:dd:50:97:eb:2e:0d:fe:e7:31:23:49: 12:57:c3:77:07:38:47:05:54:20:7f:25:b2:db:ec: 2f:16:a5:94:2a:66:34:8e:78:ff:42:a5:02:de:34: bd:27:a7:bc:b8:ee:4a:5f:e7:89:39:95:6a:39:69: 09:b6:b3:7b:1a:b7:09:be:8a:af:36:39:f4:89:2e: d4:e0:c1:96:6e:3a:5c:3c:26:dd:3d:8e:56:be:19: 49:a2:58:43:a3:5b:4c:45:4e:d1:bf:31:19:b7:b0: c7:bb:81:9b:64:5d:91:bf:97:1e:d6:eb:60:2f:bd: 01:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:49:AF:E9:5F:C5:1B:05:61:02:5C:04:87:DE:45:FD:57:09:2B X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:95:9d:43:1e:7f:f6:a7:e9:8a:91:5a:1d:57:eb:35:d0:97: 9f:a3:00:96:af:f9:16:df:bd:a3:a6:5c:d4:11:68:71:b4:23: a1:3a:01:11:79:d6:5e:7d:d6:9f:78:ae:42:d9:d5:85:f3:8f: 42:55:5d:f8:f1:27:9f:14:5f:d0:10:7d:dd:ea:f1:92:ba:cc: a1:2a:a3:9a:f8:19:4c:c1:e2:fb:ba:e4:37:07:42:a3:a4:c5: 76:47:31:5a:7d:fa:b9:13:fd:f5:c7:7c:92:6f:55:44:69:2d: 8a:59:08:3b:67:b8:e4:c9:4d:ac:88:3c:d7:ad:d7:62:6d:8d: 44:2b:b7:1b:b1:f3:17:42:51:ee:4b:ff:9c:dc:1f:36:34:9a: a6:80:21:28:9a:fa:07:75:52:49:c6:60:10:41:d5:03:e4:a1: 4a:c6:14:5b:dc:fd:b8:d1:4d:ec:8b:a5:c9:e5:be:57:42:85: 35:f4:f0:c8:dc:2b:a6:a0:77:5d:4b:d4:8d:8f:32:94:68:c8: 92:33:bd:69:a1:1c:71:28:86:cb:02:e9:08:72:48:39:18:52: 61:b7:3b:1f:22:ac:68:3b:6f:5f:23:bf:e8:1b:e8:31:03:da: 86:5e:d6:b7:e9:02:b7:2b:de:7e:05:08:3d:d4:d0:d4:cd:91: 28:47:89:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjUxMDE5MDAyOTM1WhcNMjUxMDI2MDAyOTM1WjAYMRYwFAYD VQQDEw02OGY0MzBmMC0yNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xQ8rM0HxFihrykC+sz5vxr5AVRp5XSXMTiShbSiD/xO/LikIccmBlnpbV9H ZOyAhpWCRhp6HkSnOWE5eBIFdJaloF0zUt8ap07K/HQc7slLRgS6Dg6aEU6mPzXh +sh9mPebN0NIYjEmBz6slh0wch1H48Z5OvXZ/YX0Th71pmET1m7gAp+5NkoK3VCX 6y4N/ucxI0kSV8N3BzhHBVQgfyWy2+wvFqWUKmY0jnj/QqUC3jS9J6e8uO5KX+eJ OZVqOWkJtrN7GrcJvoqvNjn0iS7U4MGWbjpcPCbdPY5WvhlJolhDo1tMRU7RvzEZ t7DHu4GbZF2Rv5ce1utgL70BKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKi2Sa/p X8UbBWECXASH3kX9VwkrMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012 MTdlNHNoZzB3RkdYYjRaR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMlZ1DHn/2p+mKkVodV+s10JefowCWr/kW372jplzUEWhxtCOhOgER edZefdafeK5C2dWF849CVV348SefFF/QEH3d6vGSusyhKqOa+BlMweL7uuQ3B0Kj pMV2RzFaffq5E/31x3ySb1VEaS2KWQg7Z7jkyU2siDzXrddibY1EK7cbsfMXQlHu S/+c3B82NJqmgCEomvoHdVJJxmAQQdUD5KFKxhRb3P240U3si6XJ5b5XQoU19PDI 3CumoHddS9SNjzKUaMiSM71poRxxKIbLAukIckg5GFJhtzsfIqxoO29fI7/oG+gx A9qGXta36QK3K95+BQg91NDUzZEoR4mb -----END CERTIFICATE-----Generated at Mon Oct 20 08:38:16 2025 by rpki-client