$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft File: swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json) Hash identifier: bl9FUOWCCQSpuOeUOKbG/1tHpm06AlSw+lyZoW60XmU= Subject key identifier: 75:D4:F8:3B:81:10:ED:A6:98:1B:07:52:3C:AE:5B:06:28:39:F4:0B Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 Certificate issuer: /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Certificate serial: 0CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft Manifest number: 0CFA Signing time: Mon 12 May 2025 17:57:21 +0000 Manifest this update: Mon 12 May 2025 17:57:21 +0000 Manifest next update: Mon 19 May 2025 17:57:21 +0000 Files and hashes: 1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: ikD09jbRYxQJa9XElrNiUaaqrOIchmRF5cq+QkLtFs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Validity Not Before: May 12 17:57:21 2025 GMT Not After : May 19 17:57:21 2025 GMT Subject: CN=68223681-c080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3a:6d:6e:f6:7b:5f:9e:88:a9:49:42:81:e0: 8b:d2:25:c5:da:25:7f:55:f4:79:3a:be:bf:96:9b: 81:9d:18:0a:ac:de:bd:c4:e4:b1:b5:c2:4f:17:34: 65:a8:ef:d0:d8:a4:c2:f7:84:13:71:3b:4c:52:fe: 39:55:d7:8b:d1:87:78:80:05:62:ac:19:44:11:ee: b5:ea:c7:1b:94:23:44:84:c2:a0:8d:9c:f6:c8:59: 35:86:06:14:a9:a5:c4:2a:d2:15:2f:4c:08:b4:13: 1a:a2:7b:6e:ab:2e:e1:37:98:f7:28:36:fb:7d:4b: 65:ed:2a:61:69:b8:4d:7e:2e:20:bc:9c:b3:47:06: 1a:f4:44:34:45:d1:42:b5:b7:f9:fa:bf:92:a6:8a: 67:a3:e2:41:10:5e:a7:ea:e7:a5:8a:4b:64:36:e5: b1:04:80:6c:8a:83:7b:d9:86:3f:7c:29:84:bc:e6: 11:49:6d:e0:44:51:8b:a3:6b:dd:b0:5e:38:9e:47: ee:8b:c6:ae:be:fe:98:20:96:ee:80:14:5a:0c:82: 56:d0:bb:b2:b9:c2:71:ec:3c:82:71:2f:ab:3d:77: bb:2c:d2:43:2b:29:89:ed:47:8e:64:87:ea:e7:ae: 1d:b3:a5:64:1c:8b:e2:12:ab:f8:11:09:00:75:34: b4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:F8:3B:81:10:ED:A6:98:1B:07:52:3C:AE:5B:06:28:39:F4:0B X509v3 Authority Key Identifier: keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1e:28:bf:3a:cf:6a:c5:68:51:f7:ee:82:68:69:76:e8:34: 0d:32:eb:3a:a8:37:87:50:d7:1b:4f:44:d0:80:98:23:ce:d2: 0b:51:86:88:c6:61:06:a8:49:e1:b7:89:7f:f3:00:42:20:91: b7:0d:4e:09:48:dc:95:22:89:78:2f:a0:1a:d0:4a:82:fd:66: 95:dc:52:61:e5:3c:d3:32:03:36:d6:4f:df:29:9b:ea:61:7d: e8:80:ec:90:a0:1a:66:eb:c2:72:6d:10:e6:19:b3:83:53:a0: 26:53:d4:e8:91:80:41:dc:5e:10:03:b4:db:2e:f9:7d:fe:88: ac:2f:46:51:e0:c0:11:df:ab:89:3c:09:a4:ae:d0:fa:28:08: 84:1e:ae:43:89:bc:48:60:f4:6a:58:f5:28:a1:b7:77:fa:d4: ba:b2:c8:2d:69:86:e7:10:4b:ed:5f:96:fe:16:8e:ee:56:d7: d5:2a:66:b5:7d:83:ce:a3:16:6e:d5:18:83:fe:10:6c:f9:6e: fe:b4:41:be:1a:81:85:a1:5d:c0:b1:92:ff:b0:c8:94:59:4c: 9d:68:81:c4:f1:47:fb:5f:3f:c5:19:fd:0a:a1:7d:70:89:9a: 6e:21:53:99:c1:21:5b:66:1e:f7:b9:19:af:83:61:65:77:51: d3:cd:40:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw NkM1QzUzQTkwHhcNMjUwNTEyMTc1NzIxWhcNMjUwNTE5MTc1NzIxWjAYMRYwFAYD VQQDEw02ODIyMzY4MS1jMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DptbvZ7X56IqUlCgeCL0iXF2iV/VfR5Or6/lpuBnRgKrN69xOSxtcJPFzRl qO/Q2KTC94QTcTtMUv45VdeL0Yd4gAVirBlEEe616scblCNEhMKgjZz2yFk1hgYU qaXEKtIVL0wItBMaontuqy7hN5j3KDb7fUtl7SphabhNfi4gvJyzRwYa9EQ0RdFC tbf5+r+Spopno+JBEF6n6ueliktkNuWxBIBsioN72YY/fCmEvOYRSW3gRFGLo2vd sF44nkfui8auvv6YIJbugBRaDIJW0LuyucJx7DyCcS+rPXe7LNJDKymJ7UeOZIfq 564ds6VkHIviEqv4EQkAdTS0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXU+DuB EO2mmBsHUjyuWwYoOfQLMB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1 Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlHii/Os9qxWhR9+6CaGl26DQNMus6qDeHUNcbT0TQgJgjztILUYaI xmEGqEnht4l/8wBCIJG3DU4JSNyVIol4L6Aa0EqC/WaV3FJh5TzTMgM21k/fKZvq YX3ogOyQoBpm68JybRDmGbODU6AmU9TokYBB3F4QA7TbLvl9/oisL0ZR4MAR36uJ PAmkrtD6KAiEHq5DibxIYPRqWPUoobd3+tS6ssgtaYbnEEvtX5b+Fo7uVtfVKma1 fYPOoxZu1RiD/hBs+W7+tEG+GoGFoV3AsZL/sMiUWUydaIHE8Uf7Xz/FGf0KoX1w iZpuIVOZwSFbZh73uRmvg2Fld1HTzUC7 -----END CERTIFICATE-----Generated at Wed May 14 07:43:08 2025 by rpki-client