$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: q3o1FgHWQJK2qes3e1yjYddvuD7nD+0b9vK7U8i7V+o= Subject key identifier: DC:8D:59:80:55:16:15:E8:5B:3D:56:5B:71:84:B9:35:C4:AA:9B:DA Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 04C2 Signing time: Thu 11 Sep 2025 00:08:02 +0000 Manifest this update: Thu 11 Sep 2025 00:08:01 +0000 Manifest next update: Thu 18 Sep 2025 00:08:01 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: wPgQqIEsAZLyi+BXMwoEi7HFE4F+BpNT+gbvMCTOdFE=) 2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: NHQlMr+Fs6uSbsfQLgv2iNTEsZYm+SpOv0roctNIT7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 00:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Sep 11 00:08:01 2025 GMT Not After : Sep 18 00:08:01 2025 GMT Subject: CN=68c212e1-cf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:0b:41:01:be:3a:4e:47:84:18:c3:c7:04: b1:bc:61:b8:b6:1b:c9:55:8f:9c:32:28:a8:4d:07: 1c:ca:66:d6:c5:10:9c:06:de:a4:36:14:b5:95:32: 78:8e:1d:ad:36:85:87:93:58:3d:4b:2b:d0:92:65: 81:06:0d:32:6a:d9:da:57:33:b9:16:42:81:ae:76: 56:5e:33:56:b6:36:a2:a6:c2:9e:11:d1:90:c8:9a: 6e:db:f5:45:ab:98:68:20:42:dc:0c:14:c6:e6:99: b9:16:f8:57:2f:0c:32:7e:6c:58:0f:d8:26:65:d6: b2:5c:16:ec:8e:c0:0f:25:31:d3:8d:a0:5d:54:63: ab:24:04:4c:17:d6:d7:1b:35:41:2b:26:03:b3:43: 5b:f5:a3:b3:df:4e:90:10:74:1a:77:44:47:d5:65: 47:6e:9c:36:bd:b1:0d:29:5c:aa:86:76:a3:c4:f8: d4:31:49:2f:cd:5a:de:d6:7a:a5:f7:3d:cf:2e:fa: 66:12:20:a2:b7:72:cc:35:6b:5f:9f:8b:7a:8f:4b: 53:b3:a0:f7:5c:a3:5d:1e:84:2f:11:5d:03:8c:b9: 35:12:a3:82:59:f3:72:40:cf:2e:54:11:19:b5:7c: 70:0c:41:38:55:99:b1:3e:95:04:99:15:8f:22:17: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8D:59:80:55:16:15:E8:5B:3D:56:5B:71:84:B9:35:C4:AA:9B:DA X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:42:2f:cd:02:66:22:63:37:80:5a:84:8a:2d:02:a5:0c:4a: 42:d8:65:7b:b6:ca:85:36:2c:53:18:7e:88:3e:90:e3:3a:0f: 77:6a:9d:14:f4:b7:57:4f:0e:03:a3:99:0c:13:b8:8b:ae:ce: 44:cd:ef:48:2c:91:38:a3:e9:5a:59:d9:06:ee:eb:25:28:d7: 0d:62:9b:c3:78:ff:ba:82:f6:7d:c9:f8:2e:e2:ca:c0:fc:7e: 21:95:a0:8c:ab:ba:e3:a5:8f:d6:0c:3b:55:60:bc:46:32:0f: fb:f6:8c:5b:84:f2:a5:85:bd:d2:79:9d:40:88:84:ec:2d:1e: 6f:72:48:8d:16:d3:53:d7:65:ef:31:be:e3:80:a8:fc:6d:c1: e3:1e:c7:7b:5a:0d:16:be:04:d4:bd:51:0e:36:24:05:3c:1b: fa:0b:02:a3:e2:05:ef:e1:21:21:03:51:9f:fe:d0:23:47:f4: c2:63:07:00:b5:d9:90:77:01:8c:1e:d8:c4:aa:62:d7:bf:78: e3:bd:19:a7:4f:0e:8a:4e:43:bb:5a:a2:60:f1:f9:3a:6a:df: 51:dd:30:61:91:1a:52:9c:6f:de:3f:f4:45:50:a1:de:eb:06: 44:d2:93:f8:2b:2f:af:7b:27:f2:02:b1:7a:aa:2f:f0:7e:91: c9:86:19:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjUwOTExMDAwODAxWhcNMjUwOTE4MDAwODAxWjAYMRYwFAYD VQQDEw02OGMyMTJlMS1jZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPULQQG+Ok5HhBjDxwSxvGG4thvJVY+cMiioTQccymbWxRCcBt6kNhS1lTJ4 jh2tNoWHk1g9SyvQkmWBBg0yatnaVzO5FkKBrnZWXjNWtjaipsKeEdGQyJpu2/VF q5hoIELcDBTG5pm5FvhXLwwyfmxYD9gmZdayXBbsjsAPJTHTjaBdVGOrJARMF9bX GzVBKyYDs0Nb9aOz306QEHQad0RH1WVHbpw2vbENKVyqhnajxPjUMUkvzVre1nql 9z3PLvpmEiCit3LMNWtfn4t6j0tTs6D3XKNdHoQvEV0DjLk1EqOCWfNyQM8uVBEZ tXxwDEE4VZmxPpUEmRWPIhdyZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyNWYBV FhXoWz1WW3GEuTXEqpvaMB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcQi/NAmYiYzeAWoSKLQKlDEpC2GV7tsqFNixTGH6IPpDjOg93ap0U 9LdXTw4Do5kME7iLrs5Eze9ILJE4o+laWdkG7uslKNcNYpvDeP+6gvZ9yfgu4srA /H4hlaCMq7rjpY/WDDtVYLxGMg/79oxbhPKlhb3SeZ1AiITsLR5vckiNFtNT12Xv Mb7jgKj8bcHjHsd7Wg0WvgTUvVEONiQFPBv6CwKj4gXv4SEhA1Gf/tAjR/TCYwcA tdmQdwGMHtjEqmLXv3jjvRmnTw6KTkO7WqJg8fk6at9R3TBhkRpSnG/eP/RFUKHe 6wZE0pP4Ky+veyfyArF6qi/wfpHJhhmi -----END CERTIFICATE-----Generated at Thu Sep 11 22:08:27 2025 by rpki-client