$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: KCl8dY62dvUU2jwl2Bv7M1C8PEBnvOteh1vLa+PDHh4= Subject key identifier: BC:FD:F2:FA:5E:5F:42:EA:DF:2A:2C:B8:B1:80:DC:51:E9:65:70:18 Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 0479 Signing time: Thu 24 Apr 2025 23:52:08 +0000 Manifest this update: Thu 24 Apr 2025 23:52:08 +0000 Manifest next update: Thu 01 May 2025 23:52:08 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: T9hs8ZDhOKl1dlbVBB8LK2tNZmccLoWYORNo7k455VE=) 2: 3DDAFD5EA2B811ED8FED0B6EC4F9AE02.roa (hash: njD1iNph4a79Pk80u6vCYjOqwamg0LYQyJ5AqgrkM20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Apr 24 23:52:08 2025 GMT Not After : May 1 23:52:08 2025 GMT Subject: CN=680acea8-685a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:22:3c:2d:a6:a5:97:64:24:e2:c5:60:a2: 4e:f5:55:e6:08:49:d9:3a:d8:13:ca:66:ae:dc:df: c9:39:13:51:0c:e0:a5:00:4b:ad:4e:09:2f:f8:62: a5:44:5b:a5:ec:7d:c3:1d:c8:ff:91:88:44:84:5d: 03:99:b2:1b:91:f6:77:1f:87:42:2f:ed:ed:dd:46: 4c:bd:30:18:a5:b4:4e:71:62:4d:44:5c:13:7c:70: f1:82:fb:b5:e5:6d:53:a5:35:b4:aa:88:73:2b:3c: 7f:69:cb:c5:4c:3d:b2:93:58:a1:74:70:ff:47:e4: 30:4d:c9:bc:da:96:b1:03:f1:33:06:9b:14:63:aa: d3:b3:e8:26:b6:51:bb:41:9a:40:80:40:f3:a3:69: f0:91:c8:1d:6c:16:a1:12:a1:b9:0f:50:02:11:8e: 5b:5e:24:f6:e7:76:d7:e8:de:79:a8:b6:cd:db:d4: 96:cd:69:50:cb:7a:57:09:de:fc:48:bf:c9:b0:eb: b4:dc:7d:b2:ac:6b:d4:57:a9:76:41:40:49:e2:9d: 86:ad:dc:15:63:64:68:2c:dd:63:8b:91:c4:40:03: 83:f2:e3:4d:e0:72:a2:15:9e:af:8c:9a:da:48:6b: 43:c0:ca:ef:44:fa:22:ea:00:2b:35:31:1f:9a:b3: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FD:F2:FA:5E:5F:42:EA:DF:2A:2C:B8:B1:80:DC:51:E9:65:70:18 X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9a:08:7b:e8:1f:9b:82:e6:62:50:67:ad:0a:87:38:c8:48: 20:14:82:e4:dd:22:4f:89:6f:21:92:48:bd:97:ec:e2:23:2f: 91:72:a0:55:4c:2f:06:1a:9b:cd:7d:63:8c:76:a6:97:b2:8d: 44:fc:59:2f:dc:83:49:71:9b:46:79:04:69:42:eb:54:b3:da: 4e:ec:3a:08:38:78:a1:a5:4e:15:ae:48:d1:54:f3:b7:31:07: 36:db:36:b1:8f:08:92:8c:2b:6b:b6:ae:4b:b1:49:26:dc:ef: 12:be:c1:2f:21:d0:46:3e:e8:2d:06:b7:7f:39:64:bc:43:63: 8d:1e:12:18:c3:9a:f2:66:2a:d1:4c:a2:21:a9:9d:88:a1:27: 22:1c:4b:fe:1a:7c:ac:81:73:dd:aa:d1:73:43:cc:d9:0c:04: ed:a2:5d:94:64:6a:3c:e1:13:14:d1:97:ca:86:d2:c2:8b:b5: ae:e6:a7:44:0f:d1:d4:39:d0:51:fc:0d:f3:e1:5d:74:6b:c3: a1:85:8a:3b:bb:f3:af:cd:5d:1a:75:40:75:d8:93:97:f7:ba: 36:cb:a9:9f:6e:52:ce:5c:17:42:9e:ef:ed:a8:06:35:d9:a1: fc:4b:c5:26:8f:21:a8:33:d9:54:fa:59:af:16:48:ce:7a:bd: 8c:d4:10:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjUwNDI0MjM1MjA4WhcNMjUwNTAxMjM1MjA4WjAYMRYwFAYD VQQDEw02ODBhY2VhOC02ODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0YiPC2mpZdkJOLFYKJO9VXmCEnZOtgTymau3N/JORNRDOClAEutTgkv+GKl RFul7H3DHcj/kYhEhF0DmbIbkfZ3H4dCL+3t3UZMvTAYpbROcWJNRFwTfHDxgvu1 5W1TpTW0qohzKzx/acvFTD2yk1ihdHD/R+QwTcm82paxA/EzBpsUY6rTs+gmtlG7 QZpAgEDzo2nwkcgdbBahEqG5D1ACEY5bXiT253bX6N55qLbN29SWzWlQy3pXCd78 SL/JsOu03H2yrGvUV6l2QUBJ4p2GrdwVY2RoLN1ji5HEQAOD8uNN4HKiFZ6vjJra SGtDwMrvRPoi6gArNTEfmrPqnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz98vpe X0Lq3yosuLGA3FHpZXAYMB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKmgh76B+bguZiUGetCoc4yEggFILk3SJPiW8hkki9l+ziIy+RcqBV TC8GGpvNfWOMdqaXso1E/Fkv3INJcZtGeQRpQutUs9pO7DoIOHihpU4VrkjRVPO3 MQc22zaxjwiSjCtrtq5LsUkm3O8SvsEvIdBGPugtBrd/OWS8Q2ONHhIYw5ryZirR TKIhqZ2IoSciHEv+GnysgXPdqtFzQ8zZDATtol2UZGo84RMU0ZfKhtLCi7Wu5qdE D9HUOdBR/A3z4V10a8OhhYo7u/OvzV0adUB12JOX97o2y6mfblLOXBdCnu/tqAY1 2aH8S8UmjyGoM9lU+lmvFkjOer2M1BAX -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:30 2025 by rpki-client