$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: 9HMfN3UIY7L4890s1Rnemrh28wW7KeGP+Zs6oTqNyzI= Subject key identifier: 6C:F7:EE:32:06:D0:01:57:F8:DB:A0:5F:AA:0A:C6:4F:F5:B6:98:2D Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: 01CA Signing time: Wed 17 Sep 2025 03:24:46 +0000 Manifest this update: Wed 17 Sep 2025 03:24:46 +0000 Manifest next update: Wed 24 Sep 2025 03:24:45 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: WsgcA94bZyJ9dtYEz1uhfeDX1b/wDS3tN1h7lzldC4o=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: wYBYO6Jcla4SoILvK2NaVJIBHB4Ha52WP5v+I/ZxS8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: Sep 17 03:24:46 2025 GMT Not After : Sep 24 03:24:45 2025 GMT Subject: CN=68ca29fe-70b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:6f:37:42:5a:de:10:1f:8f:25:12:99:36: 00:f8:65:d3:7d:c5:27:9e:01:28:27:ef:c9:0b:2f: 48:59:d8:aa:fd:65:a9:8f:ae:8d:e9:4f:27:34:8e: cf:3d:0b:98:a5:7f:69:88:e5:ab:e5:3f:18:47:ff: f9:3a:03:25:cf:2c:72:80:96:41:11:11:b7:03:ab: b1:db:e7:c8:b8:20:4a:3b:f3:61:d5:50:09:c1:f7: 9d:fc:62:e8:1d:9c:bf:3b:89:f4:47:34:da:03:02: 2f:49:9e:a2:d6:1a:63:bf:ed:e6:02:d8:13:05:97: fc:3f:36:45:86:31:f5:07:93:6d:8a:18:8d:7f:aa: e4:3a:20:fe:2f:82:44:1a:fe:95:b7:50:5e:83:26: ed:ce:de:c2:c5:ff:99:53:36:b8:fe:c0:da:12:90: f2:5c:dd:e0:da:ba:e0:e4:94:52:6c:c6:db:dd:f9: 62:11:31:a9:bd:ac:55:47:82:1d:69:cd:7a:9c:48: bb:31:d0:92:d5:7a:aa:ce:aa:bf:66:a4:d8:39:e3: da:71:0f:ed:c3:42:bf:4d:eb:94:6a:c6:bb:5b:01: d2:e0:0e:92:6d:0e:92:06:c7:62:87:c0:3d:d6:59: d8:f5:22:dc:91:0e:f1:3a:00:98:c6:07:9e:ef:8c: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F7:EE:32:06:D0:01:57:F8:DB:A0:5F:AA:0A:C6:4F:F5:B6:98:2D X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b4:7a:ed:6c:9d:90:1a:d1:8a:61:12:1d:24:d0:78:20:48: 0c:3e:b8:fc:5c:b3:34:97:e2:92:0d:f5:72:3a:42:a4:3f:b6: 8d:f7:0b:ef:52:38:b1:55:5e:d4:b7:69:83:b2:fd:8b:8d:a2: 9e:6c:32:e6:a0:ad:29:7d:df:c4:1a:8b:d4:a6:d3:69:46:83: ff:e3:dc:d2:90:fc:be:58:db:86:ea:20:99:35:d8:66:86:7a: cf:39:b1:46:3f:9f:95:58:3a:28:d1:b4:10:3a:06:4b:d7:8a: ef:6d:3a:b1:81:5c:41:e7:21:dc:90:c7:91:08:ec:8e:3a:b2: 56:0d:65:30:3c:a5:4b:3f:bb:ca:6f:35:8e:ac:c6:e0:0c:31: 16:99:68:32:34:dd:c1:87:1e:dd:a2:2d:fc:c4:05:fa:98:5d: c5:4e:35:30:0b:dc:b6:13:35:80:11:7f:a7:58:8c:fd:28:b9: 9f:7c:9d:20:74:1c:b7:51:b1:b3:d2:cf:7c:88:61:13:80:3d: 9d:50:94:74:d1:40:b4:ed:e3:0a:06:1b:82:25:9f:1a:cf:5a: 31:6e:6a:57:04:ad:d6:10:17:6d:e8:f1:c3:8e:ce:90:83:89: 22:44:90:ea:3f:db:6d:c7:d8:e9:a4:e5:9c:20:e4:9f:4a:94: 1e:79:53:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjUwOTE3MDMyNDQ2WhcNMjUwOTI0MDMyNDQ1WjAYMRYwFAYD VQQDEw02OGNhMjlmZS03MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy1vN0Ja3hAfjyUSmTYA+GXTfcUnngEoJ+/JCy9IWdiq/WWpj66N6U8nNI7P PQuYpX9piOWr5T8YR//5OgMlzyxygJZBERG3A6ux2+fIuCBKO/Nh1VAJwfed/GLo HZy/O4n0RzTaAwIvSZ6i1hpjv+3mAtgTBZf8PzZFhjH1B5NtihiNf6rkOiD+L4JE Gv6Vt1Begybtzt7Cxf+ZUza4/sDaEpDyXN3g2rrg5JRSbMbb3fliETGpvaxVR4Id ac16nEi7MdCS1Xqqzqq/ZqTYOePacQ/tw0K/TeuUasa7WwHS4A6SbQ6SBsdih8A9 1lnY9SLckQ7xOgCYxgee74yrnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGz37jIG 0AFX+NugX6oKxk/1tpgtMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATtHrtbJ2QGtGKYRIdJNB4IEgMPrj8XLM0l+KSDfVyOkKkP7aN9wvv UjixVV7Ut2mDsv2LjaKebDLmoK0pfd/EGovUptNpRoP/49zSkPy+WNuG6iCZNdhm hnrPObFGP5+VWDoo0bQQOgZL14rvbTqxgVxB5yHckMeRCOyOOrJWDWUwPKVLP7vK bzWOrMbgDDEWmWgyNN3Bhx7doi38xAX6mF3FTjUwC9y2EzWAEX+nWIz9KLmffJ0g dBy3UbGz0s98iGETgD2dUJR00UC07eMKBhuCJZ8az1oxbmpXBK3WEBdt6PHDjs6Q g4kiRJDqP9ttx9jppOWcIOSfSpQeeVNp -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:51 2025 by rpki-client