$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft File: SMXbWhu96yIRBYwH0nZwtCtth2o.mft (raw, json) Hash identifier: ZY6k9P7HU4ZRZmFN+H5N0q1kLV9bV5a5Nq33XctloEw= Subject key identifier: 0D:EA:59:9B:47:60:E5:62:DD:D8:F7:80:C7:F5:5B:3A:AB:41:ED:0D Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft Manifest number: 04B1 Signing time: Sat 09 Aug 2025 00:25:04 +0000 Manifest this update: Sat 09 Aug 2025 00:25:02 +0000 Manifest next update: Sat 16 Aug 2025 00:25:02 +0000 Files and hashes: 1: SMXbWhu96yIRBYwH0nZwtCtth2o.crl (hash: A7IrxgfwWPWu3qw4QyiG1ymHUVkqhLKw7kJ/o+fMvLc=) 2: 34788E285FD711F0AE80057FC4F9AE02.roa (hash: NHQlMr+Fs6uSbsfQLgv2iNTEsZYm+SpOv0roctNIT7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1CB, serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A Validity Not Before: Aug 9 00:25:02 2025 GMT Not After : Aug 16 00:25:02 2025 GMT Subject: CN=6896955f-a3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:e8:1f:e9:03:47:fb:08:11:e7:05:3c:38: 68:0c:51:f8:46:58:2f:9f:00:fa:c7:78:80:df:e0: a7:f7:be:e5:3f:fc:da:bc:a4:cc:19:df:1b:75:7e: b8:5e:bd:d0:3a:8c:8c:c4:88:7d:55:9c:4c:b1:eb: 5f:5f:29:17:26:00:25:8b:4b:72:ac:96:ea:70:71: 88:9b:ec:5d:c1:71:88:85:2d:81:ee:e4:2c:cb:fc: 59:8d:4f:19:b8:af:a4:fe:6b:1f:64:5d:4f:f5:6d: 8f:c8:54:38:95:ee:a6:92:c7:46:8e:3d:ce:fe:ca: 7b:89:3b:e8:19:de:94:eb:ae:e5:7a:55:73:aa:59: 1e:b6:12:9c:48:f6:1b:8c:05:c2:50:56:72:d2:e6: 4c:07:c5:a4:bf:14:14:28:b1:a5:47:78:d9:08:6d: 22:f8:4f:8a:c4:a5:f1:49:54:03:63:10:60:d2:45: 7b:31:97:1a:f2:03:77:b8:e8:a8:9f:77:ce:38:56: fb:24:cf:6c:2f:e2:ce:7b:7b:3e:ec:e5:e0:b6:c8: d9:ff:89:0d:ab:6b:e7:6c:c6:e5:15:94:79:d3:2d: 4c:8e:84:c4:6e:2d:40:27:ff:f9:89:7e:44:3e:2a: cb:0f:f3:c9:d1:3d:28:e2:40:57:88:ea:92:6e:5c: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EA:59:9B:47:60:E5:62:DD:D8:F7:80:C7:F5:5B:3A:AB:41:ED:0D X509v3 Authority Key Identifier: keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:27:2e:45:06:c5:4e:38:95:dc:50:d8:e7:ff:81:86:4a:82: 02:7c:f8:b5:89:ef:62:38:9f:9f:97:1f:eb:6a:52:49:67:1b: 25:a7:54:42:92:c9:6d:03:7c:6f:37:f4:9d:39:d9:fe:5c:11: 96:e2:19:6e:ef:8c:29:13:7c:4f:1a:26:56:ec:44:19:65:7e: 58:ab:67:ae:26:8c:9b:78:93:8d:42:d3:69:5f:80:ed:c6:2f: 55:e1:84:f2:71:15:e8:8a:c3:a3:ca:f1:b1:03:77:43:1a:4a: 4f:6f:96:9e:e2:b9:46:ee:06:e7:76:fb:1f:23:41:5b:2d:a5: af:ee:7e:cc:45:f3:b2:fb:69:01:c4:ec:d4:a3:95:5c:fd:a2: 5f:40:ef:56:8a:25:45:7a:87:78:c4:e7:b1:ce:ca:40:b2:f4: 87:36:7d:f4:a1:20:15:49:5b:6c:04:bf:13:92:5f:12:ae:f2: e7:10:a3:0b:21:7f:b8:1f:cb:43:77:9f:68:d6:38:98:d2:2d: e8:0d:4c:15:6d:be:3d:04:e1:6d:4e:d7:79:2e:d7:e8:d6:f5: 0b:6e:b2:ab:3f:2b:44:bc:e8:fa:82:a8:c4:32:a6:dc:52:10: a2:87:ce:d7:09:0a:33:90:f1:be:85:8e:d8:3a:6e:0f:b0:6a: 91:96:77:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxQ0IxMTAvBgNVBAUTKDQ4QzVEQjVBMUJCREVCMjIxMTA1OEMwN0QyNzY3MEI0 MkI2RDg3NkEwHhcNMjUwODA5MDAyNTAyWhcNMjUwODE2MDAyNTAyWjAYMRYwFAYD VQQDEw02ODk2OTU1Zi1hM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuToH+kDR/sIEecFPDhoDFH4RlgvnwD6x3iA3+Cn977lP/zavKTMGd8bdX64 Xr3QOoyMxIh9VZxMsetfXykXJgAli0tyrJbqcHGIm+xdwXGIhS2B7uQsy/xZjU8Z uK+k/msfZF1P9W2PyFQ4le6mksdGjj3O/sp7iTvoGd6U667lelVzqlkethKcSPYb jAXCUFZy0uZMB8WkvxQUKLGlR3jZCG0i+E+KxKXxSVQDYxBg0kV7MZca8gN3uOio n3fOOFb7JM9sL+LOe3s+7OXgtsjZ/4kNq2vnbMblFZR50y1MjoTEbi1AJ//5iX5E PirLD/PJ0T0o4kBXiOqSblyzIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3qWZtH YOVi3dj3gMf1WzqrQe0NMB8GA1UdIwQYMBaAFEjF21obvesiEQWMB9J2cLQrbYdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFDQi9FMzhFMzI4MDQw NUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5SVJCWXdIMG5ad3RDdHRo Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNWGJXaHU5NnlJUkJZd0gwblp3dEN0dGgyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFDQi9FMzhFMzI4MDQwNUMxMUVDQjE3RjY4MTlDNEY5QUUwMi9TTVhiV2h1OTZ5 SVJCWXdIMG5ad3RDdHRoMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPJy5FBsVOOJXcUNjn/4GGSoICfPi1ie9iOJ+flx/ralJJZxslp1RC ksltA3xvN/SdOdn+XBGW4hlu74wpE3xPGiZW7EQZZX5Yq2euJoybeJONQtNpX4Dt xi9V4YTycRXoisOjyvGxA3dDGkpPb5ae4rlG7gbndvsfI0FbLaWv7n7MRfOy+2kB xOzUo5Vc/aJfQO9WiiVFeod4xOexzspAsvSHNn30oSAVSVtsBL8Tkl8SrvLnEKML IX+4H8tDd59o1jiY0i3oDUwVbb49BOFtTtd5Ltfo1vULbrKrPytEvOj6gqjEMqbc UhCih87XCQozkPG+hY7YOm4PsGqRlncR -----END CERTIFICATE-----Generated at Sun Aug 10 05:49:57 2025 by rpki-client