$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: VIaTn/eCXSw4i2hfBpgWYTybIdbN0U/jq330aQQaJyo= Subject key identifier: 71:4F:F5:0F:F1:40:C9:A5:59:A9:DA:B9:3A:1B:3B:97:CC:DC:67:D2 Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 049A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 0491 Signing time: Thu 12 Jun 2025 23:36:16 +0000 Manifest this update: Thu 12 Jun 2025 23:36:15 +0000 Manifest next update: Thu 19 Jun 2025 23:36:15 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: yiBPjQAcXr0snctPjhVuIyppZwyRqVgCES2IW1V+U3M=) 2: 3DDAFD5EA2B811ED8FED0B6EC4F9AE02.roa (hash: njD1iNph4a79Pk80u6vCYjOqwamg0LYQyJ5AqgrkM20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Jun 12 23:36:15 2025 GMT Not After : Jun 19 23:36:15 2025 GMT Subject: CN=684b6470-97b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:d1:96:99:e8:59:b3:b6:a5:2f:99:a3:86: 01:b0:40:69:fb:a8:72:06:7b:30:87:d5:d6:c2:18: a9:18:c9:1d:b6:0e:8b:3c:fc:ee:47:25:03:3c:d5: 3e:45:da:9d:22:f9:2c:75:0f:76:5d:b5:e8:1e:f9: b4:f1:25:3e:dd:86:94:78:18:17:c2:40:c4:57:3a: eb:d9:8f:de:49:00:ff:a8:3b:3e:32:b7:00:20:78: 72:0e:48:4d:c1:4e:11:d3:ba:07:69:6e:95:bf:be: 41:cb:4a:0c:b1:5b:73:65:14:2c:89:7a:38:5d:6d: 0c:4c:65:5c:36:f5:a1:3f:88:c0:40:76:f0:55:2f: c2:18:44:13:40:c5:ac:06:dd:fa:b3:68:33:bc:38: 7e:4e:72:e5:d0:b7:25:cc:1d:a0:6d:4a:63:44:2e: ba:7d:19:dd:60:68:a7:00:3a:1a:5d:85:8f:68:88: cc:12:f5:93:09:f4:f4:9a:07:62:3d:c4:15:cb:06: 78:26:3c:0f:31:f2:52:45:48:c3:22:10:a2:e5:42: 98:a1:1c:17:16:f1:54:4a:53:49:7b:1a:39:51:37: 64:56:f0:76:9c:a8:7b:c4:68:df:23:45:7b:47:ec: 03:c3:3e:6e:45:97:36:c1:39:d1:fd:09:76:71:86: 35:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4F:F5:0F:F1:40:C9:A5:59:A9:DA:B9:3A:1B:3B:97:CC:DC:67:D2 X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:af:3c:b8:17:83:0a:1f:71:67:ed:30:ac:88:f3:05:e3:cd: 20:eb:3f:e6:11:0b:c7:1e:f9:84:4c:0e:6b:3a:5f:67:84:3a: 6a:df:e6:a5:e1:9e:02:1d:52:94:96:a0:3d:ef:58:ca:35:ec: 93:76:cb:df:71:98:39:e1:c4:5a:64:90:23:d4:70:8a:dd:da: 31:3b:4e:d0:91:77:9d:73:71:87:d7:ce:52:23:40:d7:18:66: 1d:c7:2c:09:ee:e6:f8:a3:a7:42:cc:62:6d:4e:16:e4:97:00: 26:56:f3:5e:ee:0f:a6:1e:41:70:84:b4:1f:a5:17:bf:b4:df: 1d:c2:50:73:9e:06:30:82:18:fa:a6:76:a0:20:94:2e:f8:ac: 98:8d:18:31:08:1c:54:49:96:4f:b7:8a:58:c2:13:97:6b:d1: 3c:af:e4:97:d2:32:0f:45:6d:a8:b3:c9:14:52:7c:2b:25:03: 05:56:f6:22:a4:1a:7b:c0:77:82:49:2b:8a:f6:b8:9c:6b:e3: 77:e5:f6:22:40:af:2a:32:1c:15:f4:65:43:7f:8e:12:10:9c: c8:8c:11:94:e5:30:e9:37:a7:e2:95:40:27:9e:29:7d:56:82: ee:fe:9d:24:63:78:cc:76:bb:e2:78:e7:ee:dd:4d:b2:32:04: 94:32:2a:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjUwNjEyMjMzNjE1WhcNMjUwNjE5MjMzNjE1WjAYMRYwFAYD VQQDEw02ODRiNjQ3MC05N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv3RlpnoWbO2pS+Zo4YBsEBp+6hyBnswh9XWwhipGMkdtg6LPPzuRyUDPNU+ RdqdIvksdQ92XbXoHvm08SU+3YaUeBgXwkDEVzrr2Y/eSQD/qDs+MrcAIHhyDkhN wU4R07oHaW6Vv75By0oMsVtzZRQsiXo4XW0MTGVcNvWhP4jAQHbwVS/CGEQTQMWs Bt36s2gzvDh+TnLl0LclzB2gbUpjRC66fRndYGinADoaXYWPaIjMEvWTCfT0mgdi PcQVywZ4JjwPMfJSRUjDIhCi5UKYoRwXFvFUSlNJexo5UTdkVvB2nKh7xGjfI0V7 R+wDwz5uRZc2wTnR/Ql2cYY1RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFP9Q/x QMmlWanauTobO5fM3GfSMB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNrzy4F4MKH3Fn7TCsiPMF480g6z/mEQvHHvmETA5rOl9nhDpq3+al 4Z4CHVKUlqA971jKNeyTdsvfcZg54cRaZJAj1HCK3doxO07QkXedc3GH185SI0DX GGYdxywJ7ub4o6dCzGJtThbklwAmVvNe7g+mHkFwhLQfpRe/tN8dwlBzngYwghj6 pnagIJQu+KyYjRgxCBxUSZZPt4pYwhOXa9E8r+SX0jIPRW2os8kUUnwrJQMFVvYi pBp7wHeCSSuK9rica+N35fYiQK8qMhwV9GVDf44SEJzIjBGU5TDpN6filUAnnil9 VoLu/p0kY3jMdrvieOfu3U2yMgSUMip1 -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:51 2025 by rpki-client