$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: wHOiFgg4JFNkVH4XfNsKsN5ltPWBI7jD16FqePTVCQk= Subject key identifier: 7D:82:5B:F4:3D:88:41:6F:50:5A:3C:CE:51:1E:56:19:35:19:12:BE Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: 019B Signing time: Tue 17 Jun 2025 02:31:17 +0000 Manifest this update: Tue 17 Jun 2025 02:31:17 +0000 Manifest next update: Tue 24 Jun 2025 02:31:17 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: FlLFzbknF9d3Qo0bpiSykee6Keic4weXKtc/on+HW+I=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: wYBYO6Jcla4SoILvK2NaVJIBHB4Ha52WP5v+I/ZxS8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: Jun 17 02:31:17 2025 GMT Not After : Jun 24 02:31:17 2025 GMT Subject: CN=6850d375-1582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:f7:9f:05:d2:68:e4:24:c9:be:cf:47:4e: 44:4c:08:68:b3:77:58:84:56:0c:a4:f3:9b:5c:ea: 99:e9:a3:ff:af:c5:28:a4:f5:1b:d0:71:aa:d4:61: 6a:0c:3a:71:a2:32:4b:90:f6:b9:75:a3:04:ac:c6: 15:a0:8f:fc:3e:e5:1a:a2:10:52:ce:f5:0f:8b:f5: c1:fc:b7:7b:1f:55:9e:40:5f:ae:06:cd:f4:64:bf: 3c:b7:3d:2e:b4:aa:4d:07:cf:dd:7f:77:3b:99:01: 30:6f:27:82:80:1c:9c:5e:fb:27:8e:41:53:8b:12: 49:93:b7:3a:a6:8e:6f:1d:c5:a0:2c:c7:95:52:da: b1:77:f9:91:65:26:18:28:77:3f:fe:5e:0f:78:19: b9:d4:6b:a8:c9:98:6e:cc:a4:6d:8f:2e:73:66:3e: 00:68:a7:29:68:1a:c3:56:85:92:2d:fd:ba:10:10: 17:06:d5:13:89:46:3b:11:70:9b:28:82:b6:98:9a: f8:09:b6:ee:0d:8f:72:b1:54:9f:c4:5b:42:62:8c: 0f:89:89:0f:24:4d:22:f3:28:20:13:03:e9:ad:47: 0f:4d:1a:7d:1c:44:85:a9:bf:db:0e:81:cf:49:c3: 73:b5:4a:7b:81:d2:bb:73:18:a7:01:04:1b:d0:94: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:82:5B:F4:3D:88:41:6F:50:5A:3C:CE:51:1E:56:19:35:19:12:BE X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:39:23:70:ff:fd:04:36:52:aa:0e:17:62:c5:96:70:3e:5f: 8f:34:f0:2a:93:d4:6c:64:d7:74:61:e2:23:7b:20:73:4b:ea: 41:7e:b9:2d:03:4c:4e:0a:a9:16:9d:ad:95:85:01:65:3d:ce: 6f:5a:33:f6:b8:bd:9a:de:61:86:33:9e:c0:aa:03:a2:3b:8a: af:9b:22:37:45:38:9e:36:d2:2f:98:3d:97:e4:04:45:af:ec: 03:f4:3a:2e:e5:93:80:f6:fe:f1:f4:3b:e6:7f:9e:eb:ce:39: 95:a1:4c:3f:8f:ec:46:8e:47:39:0d:01:2a:c9:09:0c:20:22: 45:2f:52:35:ab:62:0c:0e:85:00:12:d8:a3:75:bb:b4:44:86: cc:4e:90:e5:90:3d:9d:9a:a0:81:6d:1e:23:e0:f6:37:d7:df: 3e:39:30:9c:2c:3c:d2:d5:1c:c6:17:3b:d3:27:7c:4c:25:4c: 0f:bc:e8:92:27:e6:4a:30:56:e5:75:03:37:77:1f:b9:17:6e: 1e:da:e6:39:5f:b3:96:30:76:eb:4f:a1:07:0c:0e:0e:1c:35: 55:00:db:dd:95:ef:98:18:1e:85:67:28:fe:06:fe:83:29:3e: ee:72:6a:f8:a7:cb:10:bf:15:e9:fa:b1:48:7c:b6:48:b6:1a: 48:4a:8d:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjUwNjE3MDIzMTE3WhcNMjUwNjI0MDIzMTE3WjAYMRYwFAYD VQQDEw02ODUwZDM3NS0xNTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXX3nwXSaOQkyb7PR05ETAhos3dYhFYMpPObXOqZ6aP/r8UopPUb0HGq1GFq DDpxojJLkPa5daMErMYVoI/8PuUaohBSzvUPi/XB/Ld7H1WeQF+uBs30ZL88tz0u tKpNB8/df3c7mQEwbyeCgBycXvsnjkFTixJJk7c6po5vHcWgLMeVUtqxd/mRZSYY KHc//l4PeBm51GuoyZhuzKRtjy5zZj4AaKcpaBrDVoWSLf26EBAXBtUTiUY7EXCb KIK2mJr4CbbuDY9ysVSfxFtCYowPiYkPJE0i8yggEwPprUcPTRp9HESFqb/bDoHP ScNztUp7gdK7cxinAQQb0JQ2rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2CW/Q9 iEFvUFo8zlEeVhk1GRK+MB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfOSNw//0ENlKqDhdixZZwPl+PNPAqk9RsZNd0YeIjeyBzS+pBfrkt A0xOCqkWna2VhQFlPc5vWjP2uL2a3mGGM57AqgOiO4qvmyI3RTieNtIvmD2X5ARF r+wD9Dou5ZOA9v7x9Dvmf57rzjmVoUw/j+xGjkc5DQEqyQkMICJFL1I1q2IMDoUA Etijdbu0RIbMTpDlkD2dmqCBbR4j4PY3198+OTCcLDzS1RzGFzvTJ3xMJUwPvOiS J+ZKMFbldQM3dx+5F24e2uY5X7OWMHbrT6EHDA4OHDVVANvdle+YGB6FZyj+Bv6D KT7ucmr4p8sQvxXp+rFIfLZIthpISo33 -----END CERTIFICATE-----Generated at Wed Jun 18 21:17:56 2025 by rpki-client