$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: 73uPSuxF5LQIdGA1R10gD/RXOr7dpy1XNAfZ12MJHeg= Subject key identifier: 69:F0:E4:D7:28:DA:C9:13:6F:39:24:6E:94:D8:57:17:E6:62:CF:1C Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 04B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 04A7 Signing time: Mon 21 Jul 2025 00:10:41 +0000 Manifest this update: Mon 21 Jul 2025 00:10:41 +0000 Manifest next update: Mon 28 Jul 2025 00:10:41 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: dpXOqtWtERHrIoGLtQNgt5/wMLdkJlHkeJWax3zozCk=) 2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: NHQlMr+Fs6uSbsfQLgv2iNTEsZYm+SpOv0roctNIT7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Jul 21 00:10:41 2025 GMT Not After : Jul 28 00:10:41 2025 GMT Subject: CN=687d8581-5ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:69:77:4b:56:9c:84:39:d9:e6:0e:26:a6: 87:03:c5:da:e0:df:3d:df:e8:01:75:44:6c:ff:a7: a9:f4:12:d1:5b:dd:64:8f:24:7d:f9:89:c9:df:4d: 58:12:77:1b:f1:3c:41:57:5c:c0:92:56:ff:6a:b2: ed:53:71:99:42:b8:43:f8:cf:33:83:22:f4:4e:2a: 54:d3:6b:9a:2b:a3:db:fa:6b:94:8d:37:bb:aa:94: 63:51:5e:44:26:dd:b5:4b:8c:08:c5:ed:d7:a1:99: 93:76:cf:2f:88:40:03:2e:b1:46:d9:57:4d:66:cb: 03:46:93:7b:ba:a9:1f:94:0d:45:c4:39:98:1c:ca: 94:5d:b0:19:9c:57:25:a6:2c:62:b9:b9:5a:5c:e0: 12:6c:1a:9a:7b:cd:5e:b9:a0:85:fb:39:35:0d:9d: 15:59:33:1d:61:eb:ac:6f:6b:46:b7:d3:65:cd:ad: ad:4f:a8:30:ef:ce:19:f0:20:27:4a:33:bb:68:b0: 30:21:a3:3d:c8:05:df:12:ac:66:78:3e:39:ba:27: 1d:70:f4:b5:54:c3:19:24:91:b0:9c:5d:76:b6:ec: 59:cc:fa:35:df:df:1a:4e:76:8c:2b:47:22:35:4c: 2a:68:d9:db:41:77:fd:06:15:5f:c6:0e:7d:99:67: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F0:E4:D7:28:DA:C9:13:6F:39:24:6E:94:D8:57:17:E6:62:CF:1C X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4e:81:3e:24:1d:f1:93:01:b8:9b:94:b0:e5:d7:1e:b9:d0: 3d:f6:23:25:c4:d5:59:71:a8:d8:f4:91:2e:7f:48:8f:b0:d5: 28:c7:fd:59:8e:a0:5c:ce:85:4b:b5:f9:56:fe:66:b2:e1:8c: 9c:5f:79:0b:04:a7:ad:08:82:eb:58:8b:b0:89:5f:77:e9:85: 8c:95:5e:d3:a8:5d:d0:48:79:8f:c6:0d:08:4d:7b:9e:f7:a4: fe:76:68:40:15:f1:88:f3:a0:0a:8c:31:44:57:ff:9f:df:00: 48:72:1d:39:4e:8f:70:71:91:78:ad:e2:56:74:d8:a1:59:8b: 6f:24:e9:2c:9f:93:3d:98:dd:f0:de:87:6b:98:81:5f:14:2a: 23:5f:54:28:3c:b6:f5:82:8e:d6:9e:ea:9c:ca:39:0b:c5:7d: b8:89:f3:44:d3:87:9f:7e:ac:c5:6c:37:68:f2:8e:06:85:b9: 1a:5e:15:8a:23:f0:b0:65:e2:27:fa:88:f8:e5:71:b4:95:02: 8d:f9:ad:b4:d1:28:54:2b:63:b4:2e:7a:fd:47:79:4c:60:ee: c5:4c:3b:53:2e:9e:70:b2:02:63:64:b9:90:f9:71:ed:8b:f9: 48:77:b9:aa:3e:c4:4c:b5:ad:10:18:15:4c:c5:1c:00:37:fc: 7b:77:5a:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjUwNzIxMDAxMDQxWhcNMjUwNzI4MDAxMDQxWjAYMRYwFAYD VQQDEw02ODdkODU4MS01Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4dpd0tWnIQ52eYOJqaHA8Xa4N893+gBdURs/6ep9BLRW91kjyR9+YnJ301Y Encb8TxBV1zAklb/arLtU3GZQrhD+M8zgyL0TipU02uaK6Pb+muUjTe7qpRjUV5E Jt21S4wIxe3XoZmTds8viEADLrFG2VdNZssDRpN7uqkflA1FxDmYHMqUXbAZnFcl pixiublaXOASbBqae81euaCF+zk1DZ0VWTMdYeusb2tGt9Nlza2tT6gw784Z8CAn SjO7aLAwIaM9yAXfEqxmeD45uicdcPS1VMMZJJGwnF12tuxZzPo1398aTnaMK0ci NUwqaNnbQXf9BhVfxg59mWd2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnw5Nco 2skTbzkkbpTYVxfmYs8cMB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuToE+JB3xkwG4m5Sw5dceudA99iMlxNVZcajY9JEuf0iPsNUox/1Z jqBczoVLtflW/may4YycX3kLBKetCILrWIuwiV936YWMlV7TqF3QSHmPxg0ITXue 96T+dmhAFfGI86AKjDFEV/+f3wBIch05To9wcZF4reJWdNihWYtvJOksn5M9mN3w 3odrmIFfFCojX1QoPLb1go7WnuqcyjkLxX24ifNE04effqzFbDdo8o4GhbkaXhWK I/CwZeIn+oj45XG0lQKN+a200ShUK2O0Lnr9R3lMYO7FTDtTLp5wsgJjZLmQ+XHt i/lId7mqPsRMta0QGBVMxRwAN/x7d1rd -----END CERTIFICATE-----Generated at Mon Jul 21 03:07:56 2025 by rpki-client