$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json) Hash identifier: mmpnOHwpuJPqEbtTSuU/5LNnVNeR32/wog0SM306K8Q= Subject key identifier: FF:92:4E:41:5E:81:81:04:E9:B1:8E:B1:89:B9:0C:A0:26:C1:56:4A Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft Manifest number: A0 Signing time: Sun 19 Oct 2025 09:34:54 +0000 Manifest this update: Sun 19 Oct 2025 09:34:53 +0000 Manifest next update: Sun 26 Oct 2025 09:34:53 +0000 Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: 7JhT7uoH0EClgbrmfls+hvrJ55reV0WXkxjkyJoZ3uI=) 2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: TmQjJA9MkbzXubDuYe9ot48CH91CXeYRqJHt5RQNZcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Validity Not Before: Oct 19 09:34:53 2025 GMT Not After : Oct 26 09:34:53 2025 GMT Subject: CN=68f4b0bd-4c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:00:f5:27:79:1c:d0:a8:e1:18:c5:7f:bf: 4f:a2:f7:83:f2:48:57:46:19:26:ca:8e:d3:50:07: a0:9b:29:f6:9b:2b:68:41:54:f6:7b:8d:1a:01:71: b4:0f:51:13:5e:ed:63:d8:c7:fb:cb:e2:49:41:40: 90:f0:3a:16:da:6c:3a:c6:ed:7a:d2:8d:f8:d2:e7: 74:fb:e1:0a:b1:65:5f:7d:7c:f1:ba:cb:24:17:17: 78:8d:55:1a:ed:8d:3b:40:49:73:d9:ff:5b:f4:ea: c4:29:b1:3a:d8:87:c7:6b:34:89:2c:d9:c9:8c:0a: 04:f5:5e:21:52:62:3d:7b:32:47:60:8f:7b:2f:6e: 2f:24:1b:0b:16:01:30:22:64:a4:c6:b3:76:9d:e1: e7:48:51:54:5c:e4:44:42:65:c6:30:e8:9a:4d:9f: b5:b9:3e:fc:c6:1f:a8:02:1c:9f:bd:f2:e6:2f:04: 36:b8:95:9d:9c:79:ce:e9:49:ee:97:e4:89:c5:86: e6:6e:ad:1e:b7:d1:f7:0f:6c:15:d9:37:fb:c0:ab: db:0d:91:20:d8:5c:75:20:57:ce:fc:46:cb:f9:4c: 73:56:44:fb:fa:38:39:32:06:8c:78:f6:e2:1c:22: 0c:4d:38:c9:97:46:f5:1f:40:55:fd:da:fd:a3:51: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:4E:41:5E:81:81:04:E9:B1:8E:B1:89:B9:0C:A0:26:C1:56:4A X509v3 Authority Key Identifier: keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b9:7b:6d:e3:72:cb:a1:2e:bb:42:ba:31:96:a1:f0:51:f8: f1:f5:e2:15:4c:84:ff:52:f2:d4:8c:37:ae:51:f4:62:ed:65: 1c:42:20:c5:b1:be:ab:51:58:a4:e9:41:42:9c:48:b1:66:c4: 23:c1:9d:7d:61:b1:4b:e4:1d:90:8d:01:d1:4e:10:64:ae:3d: 23:39:bc:f0:80:19:25:6e:c7:45:48:19:ff:64:9c:29:04:ca: 2a:7b:e4:85:9d:d1:cf:72:ba:fe:0a:69:89:8e:45:6c:12:dd: d1:ed:8f:f0:48:70:59:17:63:73:f9:ed:4f:45:47:dd:09:2a: bd:c4:2b:a7:41:4d:0f:a9:09:dc:b8:b0:a3:48:18:3d:b5:4c: c7:ff:2f:6e:e8:93:53:37:d0:44:38:d8:ea:5b:f6:bb:96:37: eb:57:b4:0d:f5:bc:99:d4:59:1c:ff:cf:f5:fd:fb:78:ee:0d: 05:a1:64:b2:38:15:02:da:60:af:1a:77:59:3c:d2:d2:93:7d: 8b:80:b0:72:3b:b0:6a:2e:76:b2:6f:b6:27:77:93:34:25:fa: 26:f3:be:05:85:14:55:aa:37:56:ab:87:0c:70:25:53:02:2e: 61:1f:d9:47:5e:2c:00:a5:9c:b6:e8:24:f2:12:d6:70:89:01: 2a:ff:7e:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzMDcxMTAvBgNVBAUTKDRCMDkyREYxMDQyODBGNDVCQzNGMjc5NkY0MDFDQzJC NEM2MTQ0RTkwHhcNMjUxMDE5MDkzNDUzWhcNMjUxMDI2MDkzNDUzWjAYMRYwFAYD VQQDEw02OGY0YjBiZC00YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlQA9Sd5HNCo4RjFf79PoveD8khXRhkmyo7TUAegmyn2mytoQVT2e40aAXG0 D1ETXu1j2Mf7y+JJQUCQ8DoW2mw6xu160o340ud0++EKsWVffXzxusskFxd4jVUa 7Y07QElz2f9b9OrEKbE62IfHazSJLNnJjAoE9V4hUmI9ezJHYI97L24vJBsLFgEw ImSkxrN2neHnSFFUXOREQmXGMOiaTZ+1uT78xh+oAhyfvfLmLwQ2uJWdnHnO6Unu l+SJxYbmbq0et9H3D2wV2Tf7wKvbDZEg2Fx1IFfO/EbL+UxzVkT7+jg5MgaMePbi HCIMTTjJl0b1H0BV/dr9o1EunQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+STkFe gYEE6bGOsYm5DKAmwVZKMB8GA1UdIwQYMBaAFEsJLfEEKA9FvD8nlvQBzCtMYUTp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODMwNy8yQkM5MjQ1MEJF Q0QxMUVGOThDNzQxMzJDNEY5QUUwMi9Td2t0OFFRb0QwVzhQeWVXOUFITUsweGhS T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N3a3Q4UVFvRDBXOFB5ZVc5QUhNSzB4aFJPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODMwNy8yQkM5MjQ1MEJFQ0QxMUVGOThDNzQxMzJDNEY5QUUwMi9Td2t0OFFRb0Qw VzhQeWVXOUFITUsweGhST2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyuXtt43LLoS67QroxlqHwUfjx9eIVTIT/UvLUjDeuUfRi7WUcQiDF sb6rUVik6UFCnEixZsQjwZ19YbFL5B2QjQHRThBkrj0jObzwgBklbsdFSBn/ZJwp BMoqe+SFndHPcrr+CmmJjkVsEt3R7Y/wSHBZF2Nz+e1PRUfdCSq9xCunQU0PqQnc uLCjSBg9tUzH/y9u6JNTN9BEONjqW/a7ljfrV7QN9byZ1Fkc/8/1/ft47g0FoWSy OBUC2mCvGndZPNLSk32LgLByO7BqLnayb7Ynd5M0Jfom874FhRRVqjdWq4cMcCVT Ai5hH9lHXiwApZy26CTyEtZwiQEq/35w -----END CERTIFICATE-----Generated at Tue Oct 21 07:48:27 2025 by rpki-client