$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json) Hash identifier: UIGrbw4vmsAUSo71XUpuhWzBEcWVDMpGPwr1beINScI= Subject key identifier: 2B:7C:DC:66:EE:00:97:17:F3:DD:2F:65:DE:B1:FC:A5:5F:BF:84:6F Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft Manifest number: 65 Signing time: Thu 03 Jul 2025 07:15:20 +0000 Manifest this update: Thu 03 Jul 2025 07:15:20 +0000 Manifest next update: Thu 10 Jul 2025 07:15:20 +0000 Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: 7b4kyY1EBnB3lDmL6RF1t1T7uz2W5esZ5dQRmX1LXMo=) 2: DE72D5AEBED411EF835BB47AC4F9AE02.roa (hash: 5j81/BZOYpTkz0ooChEWGP+uFOoiaPO0/qxC0SgYzdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Validity Not Before: Jul 3 07:15:20 2025 GMT Not After : Jul 10 07:15:20 2025 GMT Subject: CN=68662e08-89e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:7a:98:69:cf:df:47:d8:d9:b9:0f:ec:62: 52:e7:55:82:ae:87:66:46:7a:82:98:b0:75:09:f9: 30:d1:a4:41:a9:32:12:04:9c:00:1c:22:d5:fd:d0: 05:50:e2:2d:ef:b1:e5:56:b6:17:48:cb:a5:c2:d3: d9:10:33:a2:52:b8:10:76:1c:85:13:cc:ae:06:1f: 28:e1:80:59:f1:b0:52:8d:c1:9e:47:69:30:89:c8: 57:e2:52:46:08:d9:40:d9:14:28:3f:c4:54:5a:a8: 33:c9:b1:d4:4e:a3:1b:ee:fb:26:b3:17:9d:da:40: 91:35:a0:6c:42:5b:50:be:44:50:41:9f:be:68:c2: f8:a9:2b:59:04:38:69:2e:bd:8b:4b:76:34:d6:23: ca:f5:55:11:5e:5d:90:09:a9:9f:d2:7f:bc:d0:80: ea:65:e0:17:9d:64:1e:7b:ec:8c:c0:e7:79:3e:ef: e7:59:88:28:67:22:02:18:e0:8b:5c:5b:cf:bc:ae: 28:5b:c9:54:d9:0d:af:b6:1b:fd:8c:54:2d:b3:8e: 64:dc:98:99:17:6b:c5:93:e1:c5:a9:b8:d0:b6:07: d5:2d:dc:66:66:3d:ad:56:78:7b:a6:14:ba:8a:1e: 2c:f3:74:35:69:6a:ed:2a:72:d5:84:16:70:ac:dc: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7C:DC:66:EE:00:97:17:F3:DD:2F:65:DE:B1:FC:A5:5F:BF:84:6F X509v3 Authority Key Identifier: keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:da:3b:97:b3:50:d5:96:18:b1:f3:1e:d1:42:f7:54:99:e5: 1d:de:03:1f:16:7d:6d:1a:f7:46:3c:a9:5d:33:f2:a4:e8:f4: 17:a9:cd:a9:06:93:a1:b8:89:66:06:67:a3:26:45:5d:c7:83: f3:b8:b1:be:73:9c:23:63:04:ea:79:31:3e:53:55:bd:5e:c9: 07:54:17:a7:71:8e:8e:ac:c4:72:54:67:fc:e4:0a:f1:bf:49: 26:4b:70:15:f7:a7:8b:87:1e:5c:1f:3a:79:01:9d:02:85:0e: 83:5d:cd:af:02:27:86:0e:82:c1:b0:13:a6:88:41:32:4e:52: ab:01:9a:42:0f:10:96:b2:eb:65:21:f7:d4:e3:ee:b8:00:0b: 66:a2:fe:8c:f5:65:08:38:e1:c8:cd:d1:c5:3a:10:80:59:44: fc:f4:5a:f3:44:cd:1d:47:ad:80:f1:39:bc:f7:57:36:70:48: 98:3b:2d:a3:75:68:86:93:0e:e8:28:1d:72:5a:af:87:b6:d8: d0:8a:35:24:16:f2:fd:89:9e:74:26:00:d9:57:a5:58:1a:da: 43:fc:1e:da:bd:93:cf:12:06:25:10:95:b3:3c:90:a2:12:d4: c0:e5:ec:34:ec:6c:39:76:50:d8:21:b1:8f:1c:91:b9:ac:91: b9:32:fa:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODMwNzExMC8GA1UEBRMoNEIwOTJERjEwNDI4MEY0NUJDM0YyNzk2RjQwMUNDMkI0 QzYxNDRFOTAeFw0yNTA3MDMwNzE1MjBaFw0yNTA3MTAwNzE1MjBaMBgxFjAUBgNV BAMTDTY4NjYyZTA4LTg5ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAnHqYac/fR9jZuQ/sYlLnVYKuh2ZGeoKYsHUJ+TDRpEGpMhIEnAAcItX90AVQ 4i3vseVWthdIy6XC09kQM6JSuBB2HIUTzK4GHyjhgFnxsFKNwZ5HaTCJyFfiUkYI 2UDZFCg/xFRaqDPJsdROoxvu+yazF53aQJE1oGxCW1C+RFBBn75owvipK1kEOGku vYtLdjTWI8r1VRFeXZAJqZ/Sf7zQgOpl4BedZB577IzA53k+7+dZiChnIgIY4Itc W8+8rihbyVTZDa+2G/2MVC2zjmTcmJkXa8WT4cWpuNC2B9Ut3GZmPa1WeHumFLqK HizzdDVpau0qctWEFnCs3KARAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK3zcZu4A lxfz3S9l3rH8pV+/hG8wHwYDVR0jBBgwFoAUSwkt8QQoD0W8PyeW9AHMK0xhROkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MzA3LzJCQzkyNDUwQkVD RDExRUY5OEM3NDEzMkM0RjlBRTAyL1N3a3Q4UVFvRDBXOFB5ZVc5QUhNSzB4aFJP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3drdDhRUW9EMFc4UHllVzlBSE1LMHhoUk9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 MzA3LzJCQzkyNDUwQkVDRDExRUY5OEM3NDEzMkM0RjlBRTAyL1N3a3Q4UVFvRDBX OFB5ZVc5QUhNSzB4aFJPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFPaO5ezUNWWGLHzHtFC91SZ5R3eAx8WfW0a90Y8qV0z8qTo9BepzakG k6G4iWYGZ6MmRV3Hg/O4sb5znCNjBOp5MT5TVb1eyQdUF6dxjo6sxHJUZ/zkCvG/ SSZLcBX3p4uHHlwfOnkBnQKFDoNdza8CJ4YOgsGwE6aIQTJOUqsBmkIPEJay62Uh 99Tj7rgAC2ai/oz1ZQg44cjN0cU6EIBZRPz0WvNEzR1HrYDxObz3VzZwSJg7LaN1 aIaTDugoHXJar4e22NCKNSQW8v2JnnQmANlXpVga2kP8Htq9k88SBiUQlbM8kKIS 1MDl7DTsbDl2UNghsY8ckbmskbky+uw= -----END CERTIFICATE-----Generated at Thu Jul 3 23:23:35 2025 by rpki-client