$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json) Hash identifier: /Ogz8SJYqCfEKDokEhdtDr5tkirbUgS84zMMwrpoXS8= Subject key identifier: 03:E3:7F:35:87:6C:AD:47:1E:8A:74:2F:A7:72:4A:E0:ED:35:BF:85 Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft Manifest number: 6D Signing time: Sat 19 Jul 2025 07:09:47 +0000 Manifest this update: Sat 19 Jul 2025 07:09:46 +0000 Manifest next update: Sat 26 Jul 2025 07:09:46 +0000 Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: Au28LBLuGMhrX9RW4+6Bclkxjgxdd6npOwBS7tBSHKY=) 2: DE72D5AEBED411EF835BB47AC4F9AE02.roa (hash: 5j81/BZOYpTkz0ooChEWGP+uFOoiaPO0/qxC0SgYzdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Validity Not Before: Jul 19 07:09:46 2025 GMT Not After : Jul 26 07:09:46 2025 GMT Subject: CN=687b44ba-cbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:3b:a1:c7:bb:60:f6:8a:36:a7:6e:e0:c1: 7a:aa:6c:e4:09:ee:1e:0c:ca:f6:7e:c5:27:bb:ef: 92:b2:54:53:ae:cd:4b:bf:12:2c:27:5f:d9:1b:de: 6d:67:65:98:12:be:84:ac:e7:10:80:65:1d:8a:62: a6:18:ba:23:7c:13:58:80:1d:8a:f3:37:be:52:46: 2a:e8:de:44:bf:3d:1b:d9:96:af:77:d3:fd:ce:30: 8f:00:0d:40:05:35:96:46:a1:5d:ef:40:ad:25:5e: 5b:9d:be:24:84:8b:da:9f:0a:82:6b:20:b5:0f:88: 35:b4:b6:aa:62:b0:1e:c2:e5:1b:d7:4c:87:c0:2e: e5:5d:09:ef:03:c4:f8:2f:43:85:e6:66:7a:1e:20: 99:4e:4f:ae:39:8e:97:3a:a7:1c:66:e7:7b:07:8f: 82:59:d0:a7:4d:10:90:00:d4:c3:0a:19:44:3b:24: de:fd:b3:d4:96:c5:1e:07:20:96:0f:72:35:fd:43: fa:1d:b8:2f:52:9b:e4:c9:ed:2d:15:3f:37:89:03: 9c:89:37:fd:82:0c:02:72:62:8f:72:c9:1a:96:7c: 9d:a7:9b:6f:b0:94:b1:53:29:2e:83:d5:44:6f:ae: e5:15:c3:a6:ff:b1:94:e3:38:9e:09:40:4d:95:f3: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E3:7F:35:87:6C:AD:47:1E:8A:74:2F:A7:72:4A:E0:ED:35:BF:85 X509v3 Authority Key Identifier: keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a6:65:b9:4d:44:48:9b:13:1f:43:07:53:4d:ce:cd:4d:cd: 29:b8:b2:ab:22:1c:9e:d5:ec:60:d6:22:18:e1:63:cb:1e:d0: 90:db:b5:85:11:ab:bb:e8:98:15:90:df:42:d1:b8:0e:9e:c1: 01:13:e4:88:b7:40:ba:d4:b1:3e:02:08:fd:66:6c:02:05:0b: 93:60:78:38:77:d2:64:71:8a:81:7c:94:65:7d:26:31:91:d7: 02:fd:f3:80:1d:8c:fa:8e:25:8b:69:54:da:ea:a1:6b:6a:25: 7a:a4:99:dd:16:c0:62:d8:43:b1:88:7c:36:49:6e:66:6e:3b: 16:08:6a:13:f8:f9:c5:84:4a:56:d8:68:f0:97:50:d0:a9:60: f7:27:4b:13:e4:60:c4:37:f2:f9:db:72:60:36:2a:22:93:da: 2c:f9:b7:aa:19:b1:1d:94:11:85:0b:d0:64:df:e8:0f:da:2c: ca:fe:e8:19:94:76:bf:61:1f:de:8b:af:4f:cd:52:ec:67:a7: 73:06:a3:93:4c:ce:b1:d6:a8:62:43:ce:01:a7:de:81:d9:f4: 6d:5f:3b:6e:65:06:e9:31:91:f8:fc:29:78:4a:56:f7:43:87: cd:85:2b:3c:0b:4c:f1:e2:66:5f:ed:c9:82:94:25:06:58:e8: a2:9b:87:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODMwNzExMC8GA1UEBRMoNEIwOTJERjEwNDI4MEY0NUJDM0YyNzk2RjQwMUNDMkI0 QzYxNDRFOTAeFw0yNTA3MTkwNzA5NDZaFw0yNTA3MjYwNzA5NDZaMBgxFjAUBgNV BAMTDTY4N2I0NGJhLWNiYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Qzuhx7tg9oo2p27gwXqqbOQJ7h4MyvZ+xSe775KyVFOuzUu/EiwnX9kb3m1n ZZgSvoSs5xCAZR2KYqYYuiN8E1iAHYrzN75SRiro3kS/PRvZlq930/3OMI8ADUAF NZZGoV3vQK0lXludviSEi9qfCoJrILUPiDW0tqpisB7C5RvXTIfALuVdCe8DxPgv Q4XmZnoeIJlOT645jpc6pxxm53sHj4JZ0KdNEJAA1MMKGUQ7JN79s9SWxR4HIJYP cjX9Q/oduC9Sm+TJ7S0VPzeJA5yJN/2CDAJyYo9yyRqWfJ2nm2+wlLFTKS6D1URv ruUVw6b/sZTjOJ4JQE2V8xAfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA+N/NYds rUceinQvp3JK4O01v4UwHwYDVR0jBBgwFoAUSwkt8QQoD0W8PyeW9AHMK0xhROkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MzA3LzJCQzkyNDUwQkVD RDExRUY5OEM3NDEzMkM0RjlBRTAyL1N3a3Q4UVFvRDBXOFB5ZVc5QUhNSzB4aFJP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3drdDhRUW9EMFc4UHllVzlBSE1LMHhoUk9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 MzA3LzJCQzkyNDUwQkVDRDExRUY5OEM3NDEzMkM0RjlBRTAyL1N3a3Q4UVFvRDBX OFB5ZVc5QUhNSzB4aFJPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKSmZblNREibEx9DB1NNzs1NzSm4sqsiHJ7V7GDWIhjhY8se0JDbtYUR q7vomBWQ30LRuA6ewQET5Ii3QLrUsT4CCP1mbAIFC5NgeDh30mRxioF8lGV9JjGR 1wL984AdjPqOJYtpVNrqoWtqJXqkmd0WwGLYQ7GIfDZJbmZuOxYIahP4+cWESlbY aPCXUNCpYPcnSxPkYMQ38vnbcmA2KiKT2iz5t6oZsR2UEYUL0GTf6A/aLMr+6BmU dr9hH96Lr0/NUuxnp3MGo5NMzrHWqGJDzgGn3oHZ9G1fO25lBukxkfj8KXhKVvdD h82FKzwLTPHiZl/tyYKUJQZY6KKbh1o= -----END CERTIFICATE-----Generated at Sun Jul 20 18:49:33 2025 by rpki-client