$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft File: -swzUrzjgChT2_SwQFJc_B4VLmA.mft (raw, json) Hash identifier: 4I4imFboC+NCdt4hNfVDBsBj4F9WE1S4FrbjiSIsWUM= Subject key identifier: 47:7C:2C:D6:28:3F:21:1E:97:00:02:84:99:D0:CA:19:8B:98:6E:2E Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60 Certificate issuer: /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft Manifest number: D1 Signing time: Mon 11 Aug 2025 05:49:10 +0000 Manifest this update: Mon 11 Aug 2025 05:49:09 +0000 Manifest next update: Mon 18 Aug 2025 05:49:09 +0000 Files and hashes: 1: -swzUrzjgChT2_SwQFJc_B4VLmA.crl (hash: FXO3UpPrt8VRxGukCVoaGhihsXpnxFDBygXGns04IBo=) 2: 164D3C32379711EF9ECC714EC4F9AE02.roa (hash: lQyGuB+L8Q0ZdMDNXQZ2OEDjjQlCXslq1mAc1K3qnWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E, serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60 Validity Not Before: Aug 11 05:49:09 2025 GMT Not After : Aug 18 05:49:09 2025 GMT Subject: CN=68998455-fe26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:f1:63:43:c5:e4:71:8e:2d:d3:3a:8a:3b: 4f:67:19:95:35:57:5d:b3:81:66:ef:9e:29:d5:62: e6:40:db:af:ef:8d:e7:34:a1:0f:61:19:4a:61:2a: d5:88:0b:17:7d:ad:ee:d9:05:fc:ff:f8:01:1e:e4: f4:db:de:82:b7:2c:64:90:04:5d:ea:5f:87:c2:a4: 8c:f3:99:f6:9f:7f:f8:4c:16:92:ea:60:e1:f2:04: 3e:fe:20:cd:23:e4:8f:9a:dc:ee:d0:4c:f5:38:d5: 83:32:a4:42:3e:47:9c:44:5f:3a:63:c6:61:4f:a6: 6e:38:3f:fb:3d:07:9c:45:cc:49:97:a4:ec:34:24: ff:03:23:9b:1a:2b:f7:63:40:5c:8f:47:78:40:80: 5b:d9:86:38:6d:35:10:00:b9:fb:33:f9:b3:5f:cb: 06:ba:3e:22:64:c1:44:74:a2:c5:d6:e8:be:87:c7: d1:18:f5:16:ee:90:4c:76:c4:ca:ca:a1:e9:5f:90: 46:92:ce:10:15:35:05:82:18:21:2d:3d:1f:c1:c9: d7:42:bf:72:0d:f5:e6:11:c6:e7:3a:d1:2f:5e:a4: 60:c0:34:06:fa:69:9b:3a:23:4a:e7:e9:91:c0:2d: 47:fd:09:f6:a7:e4:0c:1d:7d:b4:11:0a:84:f5:e4: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7C:2C:D6:28:3F:21:1E:97:00:02:84:99:D0:CA:19:8B:98:6E:2E X509v3 Authority Key Identifier: keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:84:ea:b3:f4:bc:56:61:a6:78:6a:4c:50:52:ea:26:90:0b: cd:05:c9:d6:bd:28:73:04:2d:ae:ef:46:60:a2:85:59:76:5b: 56:97:88:5f:ea:68:9a:f9:b6:81:96:d0:a2:db:3d:8a:2f:56: fe:ef:a1:71:9a:35:95:e1:a0:22:d5:1a:1f:da:42:01:fc:71: d9:b2:ba:1e:e9:60:66:f4:a3:82:0f:ac:2d:44:cd:4a:c1:dd: 58:f3:d7:ce:78:35:cb:71:60:56:80:e3:43:83:c8:02:4f:a9: d9:70:38:91:b0:da:ca:21:cb:bf:07:fd:f1:97:94:29:72:3e: 41:f2:28:69:32:56:f8:b1:7c:d3:d9:e2:fd:1b:66:c7:83:d6: f5:1f:4c:9b:1e:15:4c:d0:fb:a8:dc:48:f4:02:52:f7:70:ac: 39:77:96:a9:4e:0b:0d:57:c1:a2:8c:52:15:cd:5b:5a:6a:36: 72:65:19:f4:98:50:95:b6:3a:b7:33:b0:68:9b:59:23:6d:bc: 51:77:a7:79:c9:e3:81:cd:29:2b:27:13:ff:ed:21:f3:b4:15: 53:90:fd:57:0a:6f:53:b3:85:8e:fa:4b:57:7d:79:7c:eb:29: c3:d8:ba:aa:41:4f:e3:f8:86:56:17:c5:ba:16:64:62:ef:06: 3f:ba:54:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIyMkUxMTAvBgNVBAUTKEZBQ0MzMzUyQkNFMzgwMjg1M0RCRjRCMDQwNTI1Q0ZD MUUxNTJFNjAwHhcNMjUwODExMDU0OTA5WhcNMjUwODE4MDU0OTA5WjAYMRYwFAYD VQQDEw02ODk5ODQ1NS1mZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshvxY0PF5HGOLdM6ijtPZxmVNVdds4Fm754p1WLmQNuv743nNKEPYRlKYSrV iAsXfa3u2QX8//gBHuT0296CtyxkkARd6l+HwqSM85n2n3/4TBaS6mDh8gQ+/iDN I+SPmtzu0Ez1ONWDMqRCPkecRF86Y8ZhT6ZuOD/7PQecRcxJl6TsNCT/AyObGiv3 Y0Bcj0d4QIBb2YY4bTUQALn7M/mzX8sGuj4iZMFEdKLF1ui+h8fRGPUW7pBMdsTK yqHpX5BGks4QFTUFghghLT0fwcnXQr9yDfXmEcbnOtEvXqRgwDQG+mmbOiNK5+mR wC1H/Qn2p+QMHX20EQqE9eRyzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd8LNYo PyEelwAChJnQyhmLmG4uMB8GA1UdIwQYMBaAFPrMM1K844AoU9v0sEBSXPweFS5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84QkUxMDA4NDM3 OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi8tc3d6VXJ6amdDaFQyX1N3UUZKY19CNFZM bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1zd3pVcnpqZ0NoVDJfU3dRRkpjX0I0VkxtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84QkUxMDA4NDM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi8tc3d6VXJ6amdD aFQyX1N3UUZKY19CNFZMbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIhOqz9LxWYaZ4akxQUuomkAvNBcnWvShzBC2u70ZgooVZdltWl4hf 6mia+baBltCi2z2KL1b+76FxmjWV4aAi1Rof2kIB/HHZsroe6WBm9KOCD6wtRM1K wd1Y89fOeDXLcWBWgONDg8gCT6nZcDiRsNrKIcu/B/3xl5Qpcj5B8ihpMlb4sXzT 2eL9G2bHg9b1H0ybHhVM0Puo3Ej0AlL3cKw5d5apTgsNV8GijFIVzVtaajZyZRn0 mFCVtjq3M7Bom1kjbbxRd6d5yeOBzSkrJxP/7SHztBVTkP1XCm9Ts4WO+ktXfXl8 6ynD2LqqQU/j+IZWF8W6FmRi7wY/ulSC -----END CERTIFICATE-----Generated at Mon Aug 11 08:47:53 2025 by rpki-client