$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json) Hash identifier: GCX9OLix1UZ6bDuoUiX7I/YtZHtFvE2qBus6syHW7Uw= Subject key identifier: AD:14:DC:88:A8:71:62:C8:BD:B1:2C:DD:B6:5B:FE:6A:3C:18:1F:6F Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 05EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft Manifest number: 05EA Signing time: Fri 22 Aug 2025 23:08:59 +0000 Manifest this update: Fri 22 Aug 2025 23:08:59 +0000 Manifest next update: Fri 29 Aug 2025 23:08:59 +0000 Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: 2zBbl6wgacpZM1SDQZ5M3dU+hLTsHI+Go9g1hsxCi1w=) 2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1519 (0x5ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: Aug 22 23:08:59 2025 GMT Not After : Aug 29 23:08:59 2025 GMT Subject: CN=68a8f88b-11a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a1:0a:8f:3e:46:f7:a0:3f:c7:f1:d1:ba:65: 92:4a:e9:f9:f2:69:34:55:62:09:32:33:d5:4e:b0: a3:eb:4c:7c:14:d7:06:22:1d:3f:89:57:6f:ab:15: d6:ff:2c:c5:8c:df:b8:05:c4:22:a3:12:21:9a:c1: 2f:3d:f8:dd:4f:a9:d8:82:fe:7d:11:8c:a2:01:6c: 6a:3b:c7:aa:13:4b:69:be:68:4a:d8:61:f6:8f:6c: dd:0c:ac:bb:4e:6d:a6:5a:dc:b8:e7:c3:68:54:52: 0b:cb:8b:5e:f8:72:77:ca:e4:51:7b:d8:84:77:cf: 5f:39:ec:0a:d5:4d:d7:e5:2a:e7:e6:bd:25:1a:d3: 72:1f:7b:40:cf:b6:31:eb:1a:9c:b8:ce:17:07:2e: ae:da:54:51:bf:2e:e8:e9:ca:b8:e3:03:1d:c2:20: 95:b2:20:a5:f3:91:00:19:db:c7:3a:b6:a9:bf:5e: 1e:56:da:9d:ec:af:e5:0f:ae:40:3b:85:b5:a6:ee: c1:fb:68:b7:25:43:33:62:7b:54:10:5b:70:f7:1d: 42:a2:d7:c8:b3:b2:8c:d0:51:f1:fc:0f:28:a4:b5: 3e:4a:bf:e4:f6:58:b5:ea:dd:16:d6:ae:42:2d:bd: 43:c4:0d:ea:87:de:50:6d:21:3e:27:b0:10:9d:83: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:14:DC:88:A8:71:62:C8:BD:B1:2C:DD:B6:5B:FE:6A:3C:18:1F:6F X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:56:28:d8:71:b7:46:6f:72:80:4a:47:94:58:3e:bb:e9:dc: e5:4d:b3:3e:d8:34:01:32:8a:d7:27:b7:04:32:52:0e:e6:68: 0c:62:c7:e1:d6:3b:86:94:13:37:b4:05:55:5e:4f:bc:cf:ed: 0e:72:fe:2b:98:04:9f:6a:89:f7:5f:5f:53:35:b8:10:d7:ee: 67:9d:17:0e:4c:b8:a3:15:74:8b:39:34:22:9b:83:e6:a5:54: e2:73:60:6d:6d:d6:c1:e0:d4:c9:1d:da:4d:4e:77:9d:c1:12: f1:9f:9d:00:33:3d:1d:f7:2e:21:70:d9:94:f9:32:a9:eb:50: 5c:0b:08:18:fa:dd:dc:68:14:35:32:85:1c:b2:57:de:02:49: e4:ac:b0:cc:61:25:6f:f1:a5:b4:d0:42:83:43:13:1d:b3:93: 47:04:18:3f:80:5d:b1:16:20:38:80:86:b4:a1:42:f5:d0:ee: e8:03:5d:28:20:27:43:c6:f4:0a:c0:f3:59:d9:12:e7:b7:3e: 24:20:02:1d:96:a0:56:6b:c4:14:7a:00:fb:ae:31:00:57:c0: 13:13:79:81:f5:5f:4a:ae:35:9d:42:6d:db:e0:a7:c0:ca:60: 1c:a3:15:af:f1:c6:a0:7e:f6:9d:48:d7:a6:e7:b8:1b:7c:7e: 12:a3:10:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjUwODIyMjMwODU5WhcNMjUwODI5MjMwODU5WjAYMRYwFAYD VQQDEw02OGE4Zjg4Yi0xMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KEKjz5G96A/x/HRumWSSun58mk0VWIJMjPVTrCj60x8FNcGIh0/iVdvqxXW /yzFjN+4BcQioxIhmsEvPfjdT6nYgv59EYyiAWxqO8eqE0tpvmhK2GH2j2zdDKy7 Tm2mWty458NoVFILy4te+HJ3yuRRe9iEd89fOewK1U3X5Srn5r0lGtNyH3tAz7Yx 6xqcuM4XBy6u2lRRvy7o6cq44wMdwiCVsiCl85EAGdvHOrapv14eVtqd7K/lD65A O4W1pu7B+2i3JUMzYntUEFtw9x1CotfIs7KM0FHx/A8opLU+Sr/k9li16t0W1q5C Lb1DxA3qh95QbSE+J7AQnYP+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0U3Iio cWLIvbEs3bZb/mo8GB9vMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012 MTdlNHNoZzB3RkdYYjRaR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQVijYcbdGb3KASkeUWD676dzlTbM+2DQBMorXJ7cEMlIO5mgMYsfh 1juGlBM3tAVVXk+8z+0Ocv4rmASfaon3X19TNbgQ1+5nnRcOTLijFXSLOTQim4Pm pVTic2BtbdbB4NTJHdpNTnedwRLxn50AMz0d9y4hcNmU+TKp61BcCwgY+t3caBQ1 MoUcslfeAknkrLDMYSVv8aW00EKDQxMds5NHBBg/gF2xFiA4gIa0oUL10O7oA10o ICdDxvQKwPNZ2RLntz4kIAIdlqBWa8QUegD7rjEAV8ATE3mB9V9KrjWdQm3b4KfA ymAcoxWv8cagfvadSNem57gbfH4SoxAQ -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:41 2025 by rpki-client