$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft File: swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json) Hash identifier: fqeNACdtO022vRfTd8CktLDRnIfgRxDnuFrvyNNuKZc= Subject key identifier: 13:62:E0:75:87:39:4C:48:15:E0:D2:55:73:80:03:4D:D3:A8:87:C6 Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 Certificate issuer: /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Certificate serial: 0D2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft Manifest number: 0D2E Signing time: Wed 20 Aug 2025 18:06:37 +0000 Manifest this update: Wed 20 Aug 2025 18:06:37 +0000 Manifest next update: Wed 27 Aug 2025 18:06:37 +0000 Files and hashes: 1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: ynWAHjYh7CdAZDX8Z9EjGkM6GzR4TwSdzgcNo82/uqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3375 (0xd2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Validity Not Before: Aug 20 18:06:37 2025 GMT Not After : Aug 27 18:06:37 2025 GMT Subject: CN=68a60ead-67fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:06:49:af:f2:2d:32:4a:8e:aa:02:85:bf: 03:43:32:ad:2a:c5:1e:0d:6d:69:d5:3c:ab:58:8f: 1a:f8:ca:14:98:93:6f:30:af:b5:dd:8a:30:93:76: 5c:19:83:81:fe:66:7f:d9:64:49:95:ff:77:15:11: 4e:ed:93:32:a8:b2:35:72:5a:51:60:a2:3c:d8:b3: 4a:2d:36:9f:81:46:25:79:56:ff:fe:9a:21:b1:d8: 82:de:e2:a8:a9:cb:e4:89:27:09:2b:5a:a0:fb:b8: 6c:39:bb:70:a7:e1:dd:e4:af:e4:67:20:a8:e0:c4: f6:af:15:52:25:ff:c4:0c:84:26:3a:0a:6e:bb:49: 05:9e:88:1a:27:25:94:c8:32:99:06:b2:d7:9e:2e: 56:70:6a:c2:58:be:70:65:c0:34:38:53:40:cb:2f: a8:09:74:21:8b:29:ca:82:03:7f:1c:0c:da:fc:0a: f6:51:1d:d4:ff:67:e6:b7:e8:7d:42:bd:5d:bf:55: 24:79:25:63:7f:63:82:dc:47:56:9e:7f:87:32:1e: 5b:ad:42:fc:07:77:e1:55:5f:62:50:37:22:ce:dd: f4:d4:2a:9b:cf:b0:71:f2:85:5f:86:6d:66:f0:ef: 13:e6:d7:be:97:db:e7:14:93:1b:d8:26:e7:72:71: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:62:E0:75:87:39:4C:48:15:E0:D2:55:73:80:03:4D:D3:A8:87:C6 X509v3 Authority Key Identifier: keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:fc:bf:4e:3d:a0:f8:32:4d:ab:01:23:5c:35:3d:97:dd:af: f5:1b:32:1f:78:a9:b4:d7:0e:cb:ef:9d:77:23:82:57:bf:34: 9d:52:bf:38:51:8d:63:bd:13:b6:98:1a:8c:fd:50:f8:c5:39: 00:5d:13:c4:5d:a5:f0:f3:d8:b0:cc:df:df:4e:3d:69:94:c5: eb:8e:d3:0e:c0:a1:80:cd:ec:1d:58:92:07:30:7c:1c:d3:84: 6c:74:d2:89:22:7b:80:a3:fd:3f:5a:99:b0:40:c1:f7:d9:02: 2d:8c:5a:1a:97:e5:77:c3:28:8b:4b:43:1b:c4:93:f1:50:5a: 9a:9b:1e:b2:3e:eb:a0:b4:f2:b7:aa:d5:d5:9e:9e:40:d0:8f: 91:4a:a1:e1:1b:7e:14:cd:c1:5a:67:ff:ab:3f:93:5a:e2:0b: 21:35:ca:d4:be:e1:22:f4:28:52:6f:f3:f0:6a:c4:ca:be:4f: e8:c6:a2:5e:57:c2:5f:53:e9:45:9d:97:9e:9e:e3:76:6b:de: 25:81:d2:45:c4:5f:51:44:4f:7a:58:d2:d3:97:cf:53:35:8d: 5b:08:17:c5:f3:30:55:b0:0b:46:e5:bc:b8:3c:3e:07:93:55: 49:da:61:f1:a9:6d:90:32:9a:85:e8:c1:50:74:bb:14:00:c5: 70:f2:65:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw NkM1QzUzQTkwHhcNMjUwODIwMTgwNjM3WhcNMjUwODI3MTgwNjM3WjAYMRYwFAYD VQQDEw02OGE2MGVhZC02N2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/0GSa/yLTJKjqoChb8DQzKtKsUeDW1p1TyrWI8a+MoUmJNvMK+13Yowk3Zc GYOB/mZ/2WRJlf93FRFO7ZMyqLI1clpRYKI82LNKLTafgUYleVb//pohsdiC3uKo qcvkiScJK1qg+7hsObtwp+Hd5K/kZyCo4MT2rxVSJf/EDIQmOgpuu0kFnogaJyWU yDKZBrLXni5WcGrCWL5wZcA0OFNAyy+oCXQhiynKggN/HAza/Ar2UR3U/2fmt+h9 Qr1dv1UkeSVjf2OC3EdWnn+HMh5brUL8B3fhVV9iUDcizt301Cqbz7Bx8oVfhm1m 8O8T5te+l9vnFJMb2CbncnGo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNi4HWH OUxIFeDSVXOAA03TqIfGMB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1 Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4/L9OPaD4Mk2rASNcNT2X3a/1GzIfeKm01w7L7513I4JXvzSdUr84 UY1jvRO2mBqM/VD4xTkAXRPEXaXw89iwzN/fTj1plMXrjtMOwKGAzewdWJIHMHwc 04RsdNKJInuAo/0/WpmwQMH32QItjFoal+V3wyiLS0MbxJPxUFqamx6yPuugtPK3 qtXVnp5A0I+RSqHhG34UzcFaZ/+rP5Na4gshNcrUvuEi9ChSb/PwasTKvk/oxqJe V8JfU+lFnZeenuN2a94lgdJFxF9RRE96WNLTl89TNY1bCBfF8zBVsAtG5by4PD4H k1VJ2mHxqW2QMpqF6MFQdLsUAMVw8mXW -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:30 2025 by rpki-client