$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft File: swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json) Hash identifier: HTBIFbLWvfaoD9LF6njnyKNZs72jF6yT6xE9VHw8L00= Subject key identifier: AA:45:B0:D2:C3:09:47:C2:FE:35:A0:CA:61:47:9F:EA:F5:E8:4B:4E Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 Certificate issuer: /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Certificate serial: 0D30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft Manifest number: 0D2F Signing time: Fri 22 Aug 2025 18:08:35 +0000 Manifest this update: Fri 22 Aug 2025 18:08:34 +0000 Manifest next update: Fri 29 Aug 2025 18:08:34 +0000 Files and hashes: 1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: Hshl7aKYLuy3fnixBSQWGkLNU33oq/8PE5maoQKw+5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3376 (0xd30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Validity Not Before: Aug 22 18:08:34 2025 GMT Not After : Aug 29 18:08:34 2025 GMT Subject: CN=68a8b222-98e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:c3:1d:c9:01:b3:eb:82:e8:f6:e9:0a:b0: 46:2e:56:70:d4:c1:39:64:c9:f0:1d:da:3f:16:16: 0d:15:b2:10:a2:13:9e:5b:01:b3:4c:7d:4e:e9:aa: 2d:0a:a7:9a:0d:94:c4:a1:fa:50:6b:bb:17:13:c3: 75:b0:a5:a2:01:9f:a8:79:c8:fd:83:87:a8:b2:9a: 26:e7:0b:19:46:90:f9:b6:1e:50:ba:68:41:70:da: f8:d6:5e:90:f2:3d:13:95:3f:bc:cf:96:c7:80:0f: fe:92:26:67:35:ff:55:3e:4a:6c:af:67:ec:e1:0f: 0e:a7:d7:1b:65:0a:95:4a:3b:f0:8b:6b:a2:8a:f7: a4:f0:c2:bf:87:ba:2e:25:06:f3:f8:df:38:0b:01: 93:56:6f:bf:c4:59:cf:c1:a8:c8:88:b1:26:3a:95: 11:a8:cb:76:16:35:2d:8c:8b:81:df:aa:13:1b:66: d1:90:25:87:b9:45:48:4e:d9:05:c3:68:37:f4:e9: 57:5b:c5:95:a4:ed:b8:03:0d:bb:35:bb:43:d3:60: 2d:f8:71:95:6c:9d:37:ac:45:31:5b:a0:5c:9d:9b: d0:5c:2e:7e:e1:06:da:e9:d8:da:cd:85:79:34:e7: 11:1a:28:35:c2:0e:a4:94:77:14:18:27:d2:4a:74: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:45:B0:D2:C3:09:47:C2:FE:35:A0:CA:61:47:9F:EA:F5:E8:4B:4E X509v3 Authority Key Identifier: keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:47:7c:80:8f:bd:be:fd:6b:82:94:f1:d3:bf:47:04:0d:e1: f3:c7:56:6e:10:0c:d6:6d:f5:1c:dd:ee:d6:ae:33:5a:8f:76: 40:3b:12:43:5c:1f:5f:9c:ae:9b:f1:60:08:78:a0:3e:4c:6c: 37:b5:98:4b:35:d6:b2:c4:63:b4:13:e5:42:4a:51:39:f2:f9: 6d:74:14:a4:04:84:30:8e:be:33:e5:ba:84:ae:88:08:9f:4f: 20:63:e4:18:0b:57:0c:69:2e:bb:3e:15:3c:b6:7a:7c:52:37: ff:65:73:8f:61:5b:13:ae:d3:8d:4e:b2:26:22:65:be:cd:11: b2:45:97:3c:44:f7:cd:4e:f5:73:6d:3e:69:67:ef:d6:89:3b: 54:55:2a:ee:6d:ed:5a:a0:b9:04:c6:5e:42:f0:07:2c:18:56: 24:1c:33:80:56:2f:a9:be:5c:ee:d7:22:04:20:a8:3c:97:77: 6a:db:ff:7a:43:81:c7:a4:87:44:a8:f1:d2:4f:70:c5:fc:eb: 59:30:7a:53:ac:25:5d:de:bf:25:58:87:1b:b2:62:18:9e:23: 6b:31:3a:ab:88:6b:f5:67:a8:3d:d4:07:2c:b4:a5:6a:40:63: 2e:ac:13:0e:51:00:b2:e9:0a:8d:79:9e:9b:de:02:c2:c5:96: 33:1f:85:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw NkM1QzUzQTkwHhcNMjUwODIyMTgwODM0WhcNMjUwODI5MTgwODM0WjAYMRYwFAYD VQQDEw02OGE4YjIyMi05OGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgPDHckBs+uC6PbpCrBGLlZw1ME5ZMnwHdo/FhYNFbIQohOeWwGzTH1O6aot CqeaDZTEofpQa7sXE8N1sKWiAZ+oecj9g4eospom5wsZRpD5th5QumhBcNr41l6Q 8j0TlT+8z5bHgA/+kiZnNf9VPkpsr2fs4Q8Op9cbZQqVSjvwi2uiivek8MK/h7ou JQbz+N84CwGTVm+/xFnPwajIiLEmOpURqMt2FjUtjIuB36oTG2bRkCWHuUVITtkF w2g39OlXW8WVpO24Aw27NbtD02At+HGVbJ03rEUxW6BcnZvQXC5+4Qba6djazYV5 NOcRGig1wg6klHcUGCfSSnRWowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpFsNLD CUfC/jWgymFHn+r16EtOMB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1 Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHR3yAj72+/WuClPHTv0cEDeHzx1ZuEAzWbfUc3e7WrjNaj3ZAOxJD XB9fnK6b8WAIeKA+TGw3tZhLNdayxGO0E+VCSlE58vltdBSkBIQwjr4z5bqErogI n08gY+QYC1cMaS67PhU8tnp8Ujf/ZXOPYVsTrtONTrImImW+zRGyRZc8RPfNTvVz bT5pZ+/WiTtUVSrube1aoLkExl5C8AcsGFYkHDOAVi+pvlzu1yIEIKg8l3dq2/96 Q4HHpIdEqPHST3DF/OtZMHpTrCVd3r8lWIcbsmIYniNrMTqriGv1Z6g91AcstKVq QGMurBMOUQCy6QqNeZ6b3gLCxZYzH4UH -----END CERTIFICATE-----Generated at Sat Aug 23 22:36:57 2025 by rpki-client