$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft File: swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json) Hash identifier: At+84Y/EJK1t9eo87eTIB23SlngVSj5KyZlmbZzy2fw= Subject key identifier: 1C:FE:70:4D:54:CC:86:7B:AA:58:18:63:73:1C:BA:F9:87:64:F3:25 Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 Certificate issuer: /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Certificate serial: 0D56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft Manifest number: 0D55 Signing time: Tue 04 Nov 2025 18:05:19 +0000 Manifest this update: Tue 04 Nov 2025 18:05:19 +0000 Manifest next update: Tue 11 Nov 2025 18:05:19 +0000 Files and hashes: 1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: jPzS+hV9aD22MsT+qUlQ5KU0meLxNaJe01noJ88DiBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3414 (0xd56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Validity Not Before: Nov 4 18:05:19 2025 GMT Not After : Nov 11 18:05:19 2025 GMT Subject: CN=690a405f-b323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2a:8a:51:25:64:8d:50:56:e6:4f:bf:06:76: fe:20:8c:2a:09:f7:93:f5:22:01:57:11:6e:fb:c6: b5:07:00:aa:e9:14:6c:df:f4:90:89:1d:2c:76:68: 24:94:8a:4d:d9:28:29:04:a0:09:69:64:08:f8:2a: 5c:d5:f5:99:ed:fd:49:d8:2b:7e:2a:7f:8f:53:18: 9a:c2:c8:c9:a7:ca:88:e8:c0:7f:f9:7e:48:31:f2: e8:08:9a:74:7e:36:16:78:a4:95:18:6f:5d:90:f2: 20:36:eb:fe:47:45:5d:51:ad:61:a3:1d:23:48:bb: 83:d2:b2:d2:a0:16:5c:8b:5b:be:c5:a1:34:57:19: e4:76:a4:7a:68:93:aa:69:dc:85:fc:7f:f5:75:1a: 73:88:44:d7:12:b1:49:4d:37:10:24:8a:37:a6:78: e4:5d:a6:85:e2:69:e4:d6:3c:72:07:f6:06:ce:6a: fc:16:e5:40:18:4d:2b:d3:41:fc:89:dc:45:c9:d4: 16:32:e7:4a:92:1d:b1:57:71:1c:8e:c1:b0:ee:6d: 6f:b0:d1:d7:e4:f3:31:89:f1:6b:4d:68:03:95:f1: f2:27:f5:a6:39:a2:86:76:a3:a4:4b:e4:ac:6e:a1: d7:69:b7:01:8d:21:3f:3a:1e:ed:19:02:1c:42:5f: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FE:70:4D:54:CC:86:7B:AA:58:18:63:73:1C:BA:F9:87:64:F3:25 X509v3 Authority Key Identifier: keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3d:aa:0f:07:3f:42:0c:db:ff:d8:08:dd:49:21:f0:01:4a: 09:58:64:d1:ef:0d:cc:0a:8c:a7:81:a8:ec:6d:62:ba:c9:ff: fd:0f:94:15:fa:f4:08:33:f9:f0:2f:66:3d:46:57:47:3c:1c: e2:d9:78:2f:6b:d6:32:aa:d6:35:d3:60:25:d3:91:c2:4b:35: 5a:63:42:50:f2:f9:65:27:56:95:9e:a2:4a:c9:0b:a0:a9:4d: 45:2d:42:f0:ac:d4:ff:1d:09:22:fc:0e:24:86:58:8f:47:ea: 3c:26:f4:24:a3:6d:fc:3c:66:07:c2:52:8f:5e:d9:1c:32:b8: 02:af:39:06:14:85:56:4a:c1:d0:bb:f7:40:53:4d:44:e7:d2: a8:4c:0b:7c:0f:2f:51:3a:a3:21:01:b4:75:16:ae:bc:be:95: dd:9e:d3:e6:fd:3c:80:8e:0d:01:c5:07:4e:bb:6b:c6:95:fa: 6b:b3:94:e7:4c:f6:4b:d8:c2:91:f5:f1:94:8d:d0:1c:a4:89: 16:09:45:3c:57:bd:7b:dd:0b:8b:a8:93:cf:c6:7a:8c:62:32: f0:cd:54:0a:db:f9:50:54:0d:f4:3f:2c:87:6b:1d:ba:cc:ed: 0e:83:e9:5a:d1:31:20:50:05:e7:bb:08:d4:f5:04:11:3a:a1: 33:59:b8:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw NkM1QzUzQTkwHhcNMjUxMTA0MTgwNTE5WhcNMjUxMTExMTgwNTE5WjAYMRYwFAYD VQQDEw02OTBhNDA1Zi1iMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CqKUSVkjVBW5k+/Bnb+IIwqCfeT9SIBVxFu+8a1BwCq6RRs3/SQiR0sdmgk lIpN2SgpBKAJaWQI+Cpc1fWZ7f1J2Ct+Kn+PUxiawsjJp8qI6MB/+X5IMfLoCJp0 fjYWeKSVGG9dkPIgNuv+R0VdUa1hox0jSLuD0rLSoBZci1u+xaE0VxnkdqR6aJOq adyF/H/1dRpziETXErFJTTcQJIo3pnjkXaaF4mnk1jxyB/YGzmr8FuVAGE0r00H8 idxFydQWMudKkh2xV3EcjsGw7m1vsNHX5PMxifFrTWgDlfHyJ/WmOaKGdqOkS+Ss bqHXabcBjSE/Oh7tGQIcQl/kzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz+cE1U zIZ7qlgYY3McuvmHZPMlMB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1 Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqPaoPBz9CDNv/2AjdSSHwAUoJWGTR7w3MCoyngajsbWK6yf/9D5QV +vQIM/nwL2Y9RldHPBzi2Xgva9YyqtY102Al05HCSzVaY0JQ8vllJ1aVnqJKyQug qU1FLULwrNT/HQki/A4khliPR+o8JvQko238PGYHwlKPXtkcMrgCrzkGFIVWSsHQ u/dAU01E59KoTAt8Dy9ROqMhAbR1Fq68vpXdntPm/TyAjg0BxQdOu2vGlfprs5Tn TPZL2MKR9fGUjdAcpIkWCUU8V7173QuLqJPPxnqMYjLwzVQK2/lQVA30PyyHax26 zO0Og+la0TEgUAXnuwjU9QQROqEzWbhi -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:40 2025 by rpki-client