$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: ByenvbrvFGTinqQbM0xd3kAYuRbqcugYcPhgJT8YaOk= Subject key identifier: 31:4C:1B:5E:35:97:C3:A2:9C:C6:7C:54:E6:61:3C:03:74:A7:05:59 Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: 0189 Signing time: Sun 11 May 2025 02:32:19 +0000 Manifest this update: Sun 11 May 2025 02:32:18 +0000 Manifest next update: Sun 18 May 2025 02:32:18 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: dHDzhGM4PTNk4jdcbA+dPoqwJRSyLOHaXGtWqN27r+A=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: wYBYO6Jcla4SoILvK2NaVJIBHB4Ha52WP5v+I/ZxS8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: May 11 02:32:18 2025 GMT Not After : May 18 02:32:18 2025 GMT Subject: CN=68200c33-9902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:40:bd:9a:d7:f5:d3:e9:5b:61:c2:0e:a1: 4b:ad:2f:d3:22:1d:68:87:31:a0:f7:1e:1a:a4:8d: 89:c6:83:63:70:a6:8d:6f:b1:24:ef:97:6d:ec:ef: 7a:cd:fb:c0:7d:09:80:53:db:e4:76:c0:5f:9f:09: f5:12:1e:73:fa:ff:f0:65:ef:74:1f:60:02:36:61: c1:79:53:87:5f:ad:3f:2c:38:f7:73:56:99:06:fb: cf:54:f4:25:cb:4c:e0:f8:23:d8:a7:f1:a5:41:c7: c5:e4:37:66:aa:31:dd:dd:4f:fa:1c:64:d1:ba:c9: 95:94:77:1b:49:23:e9:b7:8d:58:84:57:ff:bf:47: 1f:5c:1e:64:76:94:fd:35:81:ad:d2:25:16:37:c5: 34:a7:4f:aa:89:67:33:00:76:0c:5a:ae:7c:e2:ac: 2c:02:40:f0:a8:2f:2f:aa:3b:fb:a2:3d:fd:76:b2: 72:c4:84:ad:14:9d:e8:91:fa:e7:4b:4b:83:b2:4f: be:b7:cc:60:1c:7a:6f:5c:b7:0c:fc:6c:79:08:b2: e5:6d:55:49:9a:b7:46:76:b3:c7:8c:b8:a8:3c:16: c9:e0:cc:ea:9e:ee:d7:0c:7b:1f:90:a3:96:83:94: af:ea:7c:19:b2:69:4b:a9:78:90:49:f1:6a:cc:7e: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4C:1B:5E:35:97:C3:A2:9C:C6:7C:54:E6:61:3C:03:74:A7:05:59 X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d1:b8:f0:7a:ec:13:07:95:1a:e8:7b:01:43:cd:d8:7d:d1: 94:32:d6:68:fb:6b:a6:83:c4:51:3d:0f:9c:26:e2:a5:bb:4c: 2c:de:e9:db:68:4f:29:4a:c0:bb:5f:35:ad:6f:85:14:1d:e5: f6:ad:ec:eb:0e:67:e7:9e:5e:d3:1b:7c:6e:bb:58:db:85:97: 24:7f:2a:6c:ab:38:63:50:4f:5d:04:65:31:e4:28:3a:38:33: ab:23:fc:e4:a7:b5:9c:93:34:1d:aa:fa:14:47:83:20:a1:bf: c3:ed:7c:6d:91:d6:e7:b0:68:66:8c:4d:b1:13:48:90:e4:9a: 4e:80:c2:03:90:41:0a:eb:2c:8e:c0:f9:f8:12:b3:c1:eb:d8: 40:d2:48:c0:a7:67:65:5d:4a:b1:a0:04:fb:9b:bc:c1:3a:3e: ec:0c:eb:a3:ff:ba:6a:f9:e0:38:52:04:20:33:0c:21:6a:87: 17:dc:b0:95:c0:56:3a:d7:1b:da:91:16:5a:e3:10:0d:10:59: 63:6c:9b:23:61:b8:e8:e5:32:de:34:05:bb:53:e8:c8:3b:8b: 70:25:2e:ee:00:dd:3c:d0:3b:20:12:aa:22:11:91:a4:0d:47: 1f:8d:b0:cf:d7:d6:f9:bf:42:63:02:04:b0:48:58:0b:ba:f4: e6:ae:ee:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjUwNTExMDIzMjE4WhcNMjUwNTE4MDIzMjE4WjAYMRYwFAYD VQQDEw02ODIwMGMzMy05OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqdAvZrX9dPpW2HCDqFLrS/TIh1ohzGg9x4apI2JxoNjcKaNb7Ek75dt7O96 zfvAfQmAU9vkdsBfnwn1Eh5z+v/wZe90H2ACNmHBeVOHX60/LDj3c1aZBvvPVPQl y0zg+CPYp/GlQcfF5DdmqjHd3U/6HGTRusmVlHcbSSPpt41YhFf/v0cfXB5kdpT9 NYGt0iUWN8U0p0+qiWczAHYMWq584qwsAkDwqC8vqjv7oj39drJyxIStFJ3okfrn S0uDsk++t8xgHHpvXLcM/Gx5CLLlbVVJmrdGdrPHjLioPBbJ4Mzqnu7XDHsfkKOW g5Sv6nwZsmlLqXiQSfFqzH5aVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFMG141 l8OinMZ8VOZhPAN0pwVZMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM0bjweuwTB5Ua6HsBQ83YfdGUMtZo+2umg8RRPQ+cJuKlu0ws3unb aE8pSsC7XzWtb4UUHeX2rezrDmfnnl7TG3xuu1jbhZckfypsqzhjUE9dBGUx5Cg6 ODOrI/zkp7WckzQdqvoUR4Mgob/D7XxtkdbnsGhmjE2xE0iQ5JpOgMIDkEEK6yyO wPn4ErPB69hA0kjAp2dlXUqxoAT7m7zBOj7sDOuj/7pq+eA4UgQgMwwhaocX3LCV wFY61xvakRZa4xANEFljbJsjYbjo5TLeNAW7U+jIO4twJS7uAN080DsgEqoiEZGk DUcfjbDP19b5v0JjAgSwSFgLuvTmru6I -----END CERTIFICATE-----Generated at Mon May 12 04:41:17 2025 by rpki-client