$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: rDGJk5Lk8QA8OEjirgicyVNzFedekc5wea5RkNUEYGM= Subject key identifier: 92:45:AC:F7:14:5C:99:83:25:B2:D8:DD:88:B1:57:81:95:C4:94:10 Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: 01A3 Signing time: Thu 03 Jul 2025 03:24:06 +0000 Manifest this update: Thu 03 Jul 2025 03:24:06 +0000 Manifest next update: Thu 10 Jul 2025 03:24:05 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: U2P8ZDgvjnPCzqdyAst1KSm4RrwXEe3YAQuHdZnH0L0=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: wYBYO6Jcla4SoILvK2NaVJIBHB4Ha52WP5v+I/ZxS8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: Jul 3 03:24:06 2025 GMT Not After : Jul 10 03:24:05 2025 GMT Subject: CN=6865f7d6-3b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:ec:20:5a:2f:c9:76:60:20:00:76:81:25: ab:ad:c3:c0:6e:d2:a4:ac:39:cb:c6:5a:a8:bc:45: 1d:30:b6:ce:c2:5a:b5:b0:24:ab:7d:19:c0:ab:1c: d3:58:93:92:51:cb:29:e3:74:73:3e:a4:d0:39:a2: e4:9b:38:1f:73:30:17:c8:15:0c:ba:bd:32:ea:90: c9:7d:7d:b0:2d:64:70:72:58:2a:9d:41:ed:f2:85: e7:c4:7f:68:40:39:74:09:10:cc:2e:d7:c1:5d:51: b3:0d:c1:23:df:a5:9f:b3:59:2c:db:66:14:69:ff: b1:dc:3a:27:01:70:db:41:cb:74:82:f0:30:a6:29: 7c:3f:3e:12:56:5b:e2:52:ca:90:25:4c:c8:f3:18: ea:64:40:77:0a:fc:dc:32:eb:40:b5:4a:75:ab:4c: 43:54:3a:2a:cf:6c:4b:24:da:a6:fa:f5:56:d0:d3: f9:f1:de:68:9b:dc:b0:d8:9e:13:34:e7:b5:92:50: f4:04:df:18:e4:a7:f3:65:92:1c:ba:69:ca:a0:df: c1:4b:c2:64:60:75:1d:8c:8d:5c:1a:b6:de:d3:c1: c5:19:18:c3:13:7c:7a:91:17:31:50:d3:0b:00:32: d4:17:97:3b:17:6d:93:42:5e:33:8e:f2:f2:63:33: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:45:AC:F7:14:5C:99:83:25:B2:D8:DD:88:B1:57:81:95:C4:94:10 X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8e:8e:3e:5f:bd:3b:27:36:6a:15:89:07:f2:30:fa:b5:d5: 67:80:9c:88:3b:44:aa:28:8e:a3:25:15:8e:9b:5c:c9:6e:a6: 47:9a:32:ae:f6:9b:54:0f:ed:e3:4d:a0:e2:b0:9a:33:c2:f9: 93:80:88:d8:ba:6b:88:a2:93:f4:71:1a:c3:fb:81:66:90:9a: fd:f3:5d:6c:0c:98:81:2e:35:53:fb:8a:26:b5:0f:fb:2f:47: 42:7b:52:4e:9f:6b:f6:0b:4e:7a:e6:6a:31:ac:9f:f1:84:dd: 60:b3:9c:04:6e:db:51:bb:97:25:a7:f8:5e:98:dd:81:ca:63: 33:2d:2e:f8:7f:a3:6f:a2:8e:9a:31:72:f5:1f:ae:14:1d:89: 56:c6:de:da:ee:59:c3:5b:08:e3:be:97:59:a5:79:ee:1b:6c: b1:92:ef:76:8a:39:f8:4b:f5:a4:0b:6f:3a:f2:ed:52:fe:1e: 47:4f:77:d5:33:18:cf:5f:8f:15:30:6a:0a:4d:d8:5f:a6:09: bd:39:7e:91:bf:67:6a:08:ab:1b:91:3f:81:d9:fb:e1:b9:93: d8:0e:00:ee:1d:1a:d1:4b:48:a6:71:c1:d0:c7:ca:2d:ae:69: 97:5c:64:9d:1c:e2:24:bb:ef:c1:55:1a:8a:67:72:24:3f:a9: 00:a2:10:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjUwNzAzMDMyNDA2WhcNMjUwNzEwMDMyNDA1WjAYMRYwFAYD VQQDEw02ODY1ZjdkNi0zYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RnsIFovyXZgIAB2gSWrrcPAbtKkrDnLxlqovEUdMLbOwlq1sCSrfRnAqxzT WJOSUcsp43RzPqTQOaLkmzgfczAXyBUMur0y6pDJfX2wLWRwclgqnUHt8oXnxH9o QDl0CRDMLtfBXVGzDcEj36Wfs1ks22YUaf+x3DonAXDbQct0gvAwpil8Pz4SVlvi UsqQJUzI8xjqZEB3CvzcMutAtUp1q0xDVDoqz2xLJNqm+vVW0NP58d5om9yw2J4T NOe1klD0BN8Y5KfzZZIcumnKoN/BS8JkYHUdjI1cGrbe08HFGRjDE3x6kRcxUNML ADLUF5c7F22TQl4zjvLyYzPLvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJFrPcU XJmDJbLY3YixV4GVxJQQMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8jo4+X707JzZqFYkH8jD6tdVngJyIO0SqKI6jJRWOm1zJbqZHmjKu 9ptUD+3jTaDisJozwvmTgIjYumuIopP0cRrD+4FmkJr9811sDJiBLjVT+4omtQ/7 L0dCe1JOn2v2C0565moxrJ/xhN1gs5wEbttRu5clp/hemN2BymMzLS74f6Nvoo6a MXL1H64UHYlWxt7a7lnDWwjjvpdZpXnuG2yxku92ijn4S/WkC2868u1S/h5HT3fV MxjPX48VMGoKTdhfpgm9OX6Rv2dqCKsbkT+B2fvhuZPYDgDuHRrRS0imccHQx8ot rmmXXGSdHOIku+/BVRqKZ3IkP6kAohAA -----END CERTIFICATE-----Generated at Thu Jul 3 16:46:00 2025 by rpki-client