$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json) Hash identifier: NZGrXGjxkoedt4lCCQLO+e09oQyHK3IPAyCwyhkTQ5w= Subject key identifier: 68:2C:14:EE:08:03:B8:23:52:F9:37:70:C9:38:E8:6A:4F:40:3B:6B Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft Manifest number: 05C3 Signing time: Fri 06 Jun 2025 23:07:51 +0000 Manifest this update: Fri 06 Jun 2025 23:07:51 +0000 Manifest next update: Fri 13 Jun 2025 23:07:51 +0000 Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: eHbD3SsqKU5Yd4Z+/l8GTS4MtFwfFGYBPcIAd4bdvHw=) 2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: Jun 6 23:07:51 2025 GMT Not After : Jun 13 23:07:51 2025 GMT Subject: CN=684374c7-08d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b9:f2:4f:7b:26:91:5b:81:52:59:ee:19:9b: 0b:4c:c3:25:71:4d:8d:af:d6:ad:9b:d6:eb:fd:9d: e9:38:9f:95:3e:a8:5c:b1:c8:2b:35:84:ad:23:8b: dc:77:46:dd:aa:dd:e9:10:35:e8:c1:5b:72:71:cc: c7:84:4e:96:08:f6:1b:de:17:36:01:15:ca:66:88: 20:5c:fd:f7:49:04:2d:5c:58:cc:39:25:67:4d:3f: 10:9b:05:10:9b:33:35:aa:38:05:d6:ad:26:e5:d9: 4a:59:a1:2b:df:a7:4c:6d:e5:90:06:e4:fc:f8:e6: b5:3f:61:fb:d1:d0:8d:19:db:cf:aa:6d:d8:cd:bb: 94:4a:59:c4:31:f7:64:3b:72:fb:86:4f:7a:d8:29: dc:ea:1a:22:e2:67:ba:2d:f7:22:11:5e:36:e4:d1: f2:48:1c:bd:15:3c:01:48:5f:92:3e:a1:05:a2:81: df:8c:7c:e5:97:65:e4:da:99:1c:98:68:a3:6b:c9: 4c:46:96:40:36:52:e3:74:3d:88:09:19:3d:cc:90: ed:b1:36:6f:ce:e0:34:5c:55:1d:bd:75:09:ce:8e: ed:65:4f:91:65:39:15:42:6a:2e:19:0d:a2:ce:0b: 3c:96:02:f7:0c:61:77:ec:fc:34:51:49:5c:20:80: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2C:14:EE:08:03:B8:23:52:F9:37:70:C9:38:E8:6A:4F:40:3B:6B X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e8:5d:c0:e0:bd:98:c8:64:9d:07:30:53:de:af:70:45:bb: 2d:1b:e1:a8:50:e9:e9:d8:bf:1e:43:6f:15:a6:f3:bb:59:44: fc:d8:9d:00:9b:c2:f6:61:8a:9b:a7:c6:7d:d7:27:28:ef:98: 10:fe:14:9b:7c:2d:f2:96:66:bb:ea:1e:6d:37:92:23:e9:66: 5e:b3:08:10:b6:68:e8:81:6c:a1:da:32:e3:6f:5c:10:d6:38: 2a:7d:db:16:27:5a:d6:76:a7:4a:ff:fb:23:c2:42:83:70:19: c8:91:c7:aa:15:b1:cf:99:5b:65:cc:c0:9e:72:35:bc:08:7c: dd:18:c4:1e:27:36:1a:34:bd:48:c7:1c:f1:d0:81:80:e7:d7: a3:49:97:0b:2c:06:47:9a:79:da:45:60:ae:b5:8d:47:73:9e: d4:92:56:d9:dd:e2:8c:6b:b7:23:92:63:d3:f8:53:2a:db:99: 7f:04:27:24:f1:8f:28:2a:46:76:0a:51:9d:14:e9:a3:4b:cd: 10:83:15:bd:44:f1:39:71:01:6a:f5:0c:11:37:19:8e:04:6f: bd:77:27:c0:b5:0e:37:9b:59:21:4e:4c:57:45:c2:e7:4d:c9: fc:30:61:51:cb:80:dc:15:ef:5d:ea:2b:fc:5f:ab:57:d2:c0: e0:0e:d9:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjUwNjA2MjMwNzUxWhcNMjUwNjEzMjMwNzUxWjAYMRYwFAYD VQQDEw02ODQzNzRjNy0wOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rnyT3smkVuBUlnuGZsLTMMlcU2Nr9atm9br/Z3pOJ+VPqhcscgrNYStI4vc d0bdqt3pEDXowVtycczHhE6WCPYb3hc2ARXKZoggXP33SQQtXFjMOSVnTT8QmwUQ mzM1qjgF1q0m5dlKWaEr36dMbeWQBuT8+Oa1P2H70dCNGdvPqm3YzbuUSlnEMfdk O3L7hk962Cnc6hoi4me6LfciEV425NHySBy9FTwBSF+SPqEFooHfjHzll2Xk2pkc mGija8lMRpZANlLjdD2ICRk9zJDtsTZvzuA0XFUdvXUJzo7tZU+RZTkVQmouGQ2i zgs8lgL3DGF37Pw0UUlcIIAyxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgsFO4I A7gjUvk3cMk46GpPQDtrMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012 MTdlNHNoZzB3RkdYYjRaR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL6F3A4L2YyGSdBzBT3q9wRbstG+GoUOnp2L8eQ28VpvO7WUT82J0A m8L2YYqbp8Z91yco75gQ/hSbfC3ylma76h5tN5Ij6WZeswgQtmjogWyh2jLjb1wQ 1jgqfdsWJ1rWdqdK//sjwkKDcBnIkceqFbHPmVtlzMCecjW8CHzdGMQeJzYaNL1I xxzx0IGA59ejSZcLLAZHmnnaRWCutY1Hc57UklbZ3eKMa7cjkmPT+FMq25l/BCck 8Y8oKkZ2ClGdFOmjS80QgxW9RPE5cQFq9QwRNxmOBG+9dyfAtQ43m1khTkxXRcLn Tcn8MGFRy4DcFe9d6iv8X6tX0sDgDtkI -----END CERTIFICATE-----Generated at Sun Jun 8 20:40:26 2025 by rpki-client