$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft File: _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json) Hash identifier: 3bUSzfMxrCfSEMDJgjPTlDYEYuHLaCFCnj9UbiR3lqo= Subject key identifier: 46:C6:43:67:46:41:D6:6E:6C:34:72:B5:D6:B2:9E:1B:D7:E3:11:2A Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 Certificate issuer: /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Certificate serial: 0831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft Manifest number: 13ED Signing time: Sat 12 Jul 2025 18:56:35 +0000 Manifest this update: Sat 12 Jul 2025 18:56:34 +0000 Manifest next update: Sat 19 Jul 2025 18:56:34 +0000 Files and hashes: 1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: /picaXNIMt1cvvccwNGUgwwiAOGIeI6MMU7sPeIvozA=) 2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: rU8D6mpdC1BmC/amQMPPP7kqQ/zxbdarw0Ro6gKcd88=) 3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: IQeY/vSsnV7lGmsF5ET0EctBxomkDxr65Km/1S0yvs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Jul 2025 18:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Validity Not Before: Jul 12 18:56:34 2025 GMT Not After : Jul 19 18:56:34 2025 GMT Subject: CN=6872afe2-5ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:1e:5d:7b:79:30:19:3b:96:56:4e:ba:fb: a8:14:fd:5b:2e:c9:23:2b:5e:d1:b1:5d:f3:82:a5: 07:52:08:b6:ae:89:b8:ba:26:58:b5:a2:bf:f4:33: d6:43:02:fd:fc:87:5e:87:a0:76:3e:82:ed:15:87: ff:a9:bd:be:96:c9:11:03:02:e9:1e:10:4d:b4:46: 50:0d:26:ba:88:5a:0e:9d:1b:ed:88:da:82:82:ee: c3:7c:8c:2d:da:f8:00:44:1d:40:e9:e5:f1:a0:69: 8c:95:78:d6:28:0d:8d:36:9f:5c:17:d4:db:db:da: f3:52:44:fc:be:36:2e:18:d7:e8:c0:fb:05:eb:f4: cb:7e:c2:ce:ec:14:b1:b3:b2:c7:cf:24:7c:db:88: 2d:57:ff:1b:ba:55:14:78:5e:05:7a:af:8e:42:cd: 71:63:53:a6:c8:f9:8f:35:a8:73:e4:d7:be:9f:9c: ca:96:1e:d5:30:4f:a3:dd:93:b1:6c:6d:61:f7:1e: 36:22:7a:cd:c2:98:b4:9b:d3:15:9d:a2:a5:d4:cc: 66:58:04:4f:9f:b0:bd:36:dd:e7:f8:5b:be:6f:27: e6:54:0c:36:48:6a:1f:a0:5f:09:9f:70:6d:15:36: 9d:84:52:35:d6:f6:35:cb:c8:46:67:48:c1:77:53: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:43:67:46:41:D6:6E:6C:34:72:B5:D6:B2:9E:1B:D7:E3:11:2A X509v3 Authority Key Identifier: keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2d:81:33:33:3a:e1:3d:35:cf:46:40:4b:71:21:66:cf:8d: c6:32:7f:ab:4b:79:e1:fe:00:0f:32:ab:56:0f:93:05:84:20: 10:b5:21:3f:b2:20:ae:e3:de:1d:f3:e0:1d:11:18:c6:02:5a: 56:04:b5:91:17:c6:d8:37:74:31:37:ae:c2:1d:05:1c:f6:4f: ae:b0:3d:8b:a4:ae:77:54:d3:ab:4a:37:b3:1c:27:91:f6:d5: cc:fa:3d:58:6e:38:b0:db:f7:56:2d:cb:88:9f:5d:1f:94:b4: 8b:7c:c5:01:60:38:01:d3:a0:9c:9a:17:36:2e:08:59:01:b5: 77:65:60:38:3a:88:c1:3d:1b:5f:bd:28:1f:6e:e9:94:8b:ce: 2d:a5:df:9b:98:e2:73:59:7c:08:5d:5a:10:b1:08:a0:aa:e5: 49:5f:aa:1a:05:c2:22:96:c6:bc:02:7a:83:e0:10:e0:ed:b1: c3:8f:dd:2c:bb:b2:31:46:b7:96:34:47:ad:b8:d0:06:3d:3d: 6f:7a:42:7f:90:66:2c:95:34:9e:c3:02:6a:7c:4d:83:25:c7: af:5b:b4:bc:ff:de:40:e2:b9:66:8d:1e:34:d5:7f:5e:7a:b5: 59:cc:e1:a3:10:24:bf:e1:64:83:82:8c:ed:99:61:69:1d:79: 1f:26:ba:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKEZEMjVCQTk2MTEwMUI1Q0U2MDE0OTkzQ0U3NDg4RkRC NkYwOEE0MjMwHhcNMjUwNzEyMTg1NjM0WhcNMjUwNzE5MTg1NjM0WjAYMRYwFAYD VQQDEw02ODcyYWZlMi01ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyYeXXt5MBk7llZOuvuoFP1bLskjK17RsV3zgqUHUgi2rom4uiZYtaK/9DPW QwL9/Ideh6B2PoLtFYf/qb2+lskRAwLpHhBNtEZQDSa6iFoOnRvtiNqCgu7DfIwt 2vgARB1A6eXxoGmMlXjWKA2NNp9cF9Tb29rzUkT8vjYuGNfowPsF6/TLfsLO7BSx s7LHzyR824gtV/8bulUUeF4Feq+OQs1xY1OmyPmPNahz5Ne+n5zKlh7VME+j3ZOx bG1h9x42InrNwpi0m9MVnaKl1MxmWARPn7C9Nt3n+Fu+byfmVAw2SGofoF8Jn3Bt FTadhFI11vY1y8hGZ0jBd1ODCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbGQ2dG QdZubDRytdaynhvX4xEqMB8GA1UdIwQYMBaAFP0lupYRAbXOYBSZPOdIj9tvCKQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRjNWdGSms4NTBpUDIyOElw Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TVzZsaEVCdGM1Z0ZKazg1MGlQMjI4SXBDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRj NWdGSms4NTBpUDIyOElwQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANLYEzMzrhPTXPRkBLcSFmz43GMn+rS3nh/gAPMqtWD5MFhCAQtSE/ siCu494d8+AdERjGAlpWBLWRF8bYN3QxN67CHQUc9k+usD2LpK53VNOrSjezHCeR 9tXM+j1Ybjiw2/dWLcuIn10flLSLfMUBYDgB06Ccmhc2LghZAbV3ZWA4OojBPRtf vSgfbumUi84tpd+bmOJzWXwIXVoQsQigquVJX6oaBcIilsa8AnqD4BDg7bHDj90s u7IxRreWNEetuNAGPT1vekJ/kGYslTSewwJqfE2DJcevW7S8/95A4rlmjR401X9e erVZzOGjECS/4WSDgoztmWFpHXkfJrom -----END CERTIFICATE-----Generated at Sun Jul 13 14:31:48 2025 by rpki-client