$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: f//1ydt3Lq0Nkn5kOd/rVj1TQ9UVVw6vsu/WVQTm33k= Subject key identifier: FD:47:A9:9D:0A:4C:50:BD:78:8F:9B:42:53:0E:BE:1C:02:7A:DD:AA Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: 01DA Signing time: Sun 19 Oct 2025 05:11:16 +0000 Manifest this update: Sun 19 Oct 2025 05:11:15 +0000 Manifest next update: Sun 26 Oct 2025 05:11:15 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: RRfGoMoewoyVWxvUow1WFfw27FWIyTuHWJoeUiwZvKI=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: wYBYO6Jcla4SoILvK2NaVJIBHB4Ha52WP5v+I/ZxS8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: Oct 19 05:11:15 2025 GMT Not After : Oct 26 05:11:15 2025 GMT Subject: CN=68f472f4-c464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:4d:e2:ee:47:65:76:91:cc:ae:7e:9c:47: f7:de:c1:43:d5:d2:9c:f8:04:6d:85:c5:43:03:cb: 9c:6e:9d:72:d5:b4:d4:2f:af:44:6b:80:73:d7:99: 74:d4:0a:01:12:45:ba:46:3d:27:6a:a4:11:65:96: 2d:37:4b:ef:c9:7a:dc:93:49:62:10:15:4e:e1:d4: ce:33:e8:41:26:ea:ff:64:66:0b:67:b4:c3:16:93: ac:e5:7b:4c:1a:f0:f0:dc:2e:25:36:a9:62:de:70: 35:74:38:55:b8:3a:06:29:93:79:cb:bf:de:fe:67: ae:f0:0c:e0:57:47:bc:35:a0:a7:11:82:25:4e:9b: 7f:9b:6e:68:26:09:6e:2d:25:e0:a1:16:f1:dc:74: 44:a3:79:f2:a2:b5:57:2e:70:61:e5:a7:a4:9b:07: 67:9f:22:2b:0e:96:4d:20:16:3b:53:7a:98:da:03: 0a:c5:12:8f:ff:e4:ee:ee:7f:17:f5:cf:3f:70:8b: 4e:df:ab:72:10:dd:13:12:3a:49:6e:c1:1a:52:83: 5e:ea:39:fd:d0:91:65:57:8d:f0:a1:c9:e2:ac:e1: 0c:90:9d:e7:0e:94:4f:23:4e:02:47:b3:61:8f:e4: 94:9b:a9:a1:b5:17:0c:23:f6:c0:18:9e:e3:1e:f1: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:47:A9:9D:0A:4C:50:BD:78:8F:9B:42:53:0E:BE:1C:02:7A:DD:AA X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:16:60:b7:4c:da:ef:b9:65:39:f1:bc:83:2d:ad:8c:7e:a3: e8:40:9e:07:69:0e:e7:1d:48:49:44:e8:bd:e5:d2:6f:c3:d7: df:a3:22:82:61:c1:ef:37:00:5d:8b:35:6a:16:df:79:b9:a7: 9b:b2:0d:29:3d:e6:e4:35:9c:48:6a:f1:d8:21:62:72:2e:bc: 15:36:bc:09:b4:01:92:35:3a:4f:71:f0:92:75:49:ca:6f:11: 50:b8:9e:2e:89:2c:e8:ec:ec:ed:fa:7e:03:37:d8:05:af:65: e3:8e:65:1a:09:e1:de:77:b2:61:70:24:a1:f4:e4:3c:d6:4c: df:f4:be:59:43:52:76:0c:a8:aa:7a:25:27:c3:77:f5:9e:99: 8f:98:af:c8:d5:4c:e6:1a:1e:2a:e7:90:60:cf:fe:3c:60:7c: 1e:d3:91:f3:02:54:1d:54:37:7a:56:f1:8a:45:c2:50:fa:06: f1:06:51:26:b2:eb:7d:1e:4d:74:69:48:23:05:17:2f:b8:7a: 75:0d:00:12:55:ef:9a:ee:5b:f3:cd:82:c6:51:c3:e3:b2:9b: 9c:93:73:0d:02:e1:2e:a2:d3:a8:41:50:31:73:71:92:9a:e6: bd:43:fc:7c:63:a0:ac:e7:af:be:ce:cd:d6:ed:5d:32:a7:2f: 3d:89:00:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjUxMDE5MDUxMTE1WhcNMjUxMDI2MDUxMTE1WjAYMRYwFAYD VQQDEw02OGY0NzJmNC1jNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBBN4u5HZXaRzK5+nEf33sFD1dKc+ARthcVDA8ucbp1y1bTUL69Ea4Bz15l0 1AoBEkW6Rj0naqQRZZYtN0vvyXrck0liEBVO4dTOM+hBJur/ZGYLZ7TDFpOs5XtM GvDw3C4lNqli3nA1dDhVuDoGKZN5y7/e/meu8AzgV0e8NaCnEYIlTpt/m25oJglu LSXgoRbx3HREo3nyorVXLnBh5aekmwdnnyIrDpZNIBY7U3qY2gMKxRKP/+Tu7n8X 9c8/cItO36tyEN0TEjpJbsEaUoNe6jn90JFlV43wocnirOEMkJ3nDpRPI04CR7Nh j+SUm6mhtRcMI/bAGJ7jHvHP6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1HqZ0K TFC9eI+bQlMOvhwCet2qMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMFmC3TNrvuWU58byDLa2MfqPoQJ4HaQ7nHUhJROi95dJvw9ffoyKC YcHvNwBdizVqFt95uaebsg0pPebkNZxIavHYIWJyLrwVNrwJtAGSNTpPcfCSdUnK bxFQuJ4uiSzo7Ozt+n4DN9gFr2XjjmUaCeHed7JhcCSh9OQ81kzf9L5ZQ1J2DKiq eiUnw3f1npmPmK/I1UzmGh4q55Bgz/48YHwe05HzAlQdVDd6VvGKRcJQ+gbxBlEm sut9Hk10aUgjBRcvuHp1DQASVe+a7lvzzYLGUcPjspuck3MNAuEuotOoQVAxc3GS mua9Q/x8Y6Cs56++zs3W7V0ypy89iQAI -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:29 2025 by rpki-client