$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft File: swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json) Hash identifier: XI7qLKNwvdcdHFFsJt/YEyyYrZqgeWuNI5phFimRB7U= Subject key identifier: C9:B9:A6:5E:75:A0:D6:A5:5F:D4:FB:50:D1:0E:FD:1C:EC:11:78:3A Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 Certificate issuer: /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Certificate serial: 0D29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft Manifest number: 0D28 Signing time: Fri 08 Aug 2025 18:14:48 +0000 Manifest this update: Fri 08 Aug 2025 18:14:47 +0000 Manifest next update: Fri 15 Aug 2025 18:14:47 +0000 Files and hashes: 1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: xFGt2qC/Jb4Nt5uD6VznHNFPvg1rV8qQmtp9P0a9NZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Validity Not Before: Aug 8 18:14:47 2025 GMT Not After : Aug 15 18:14:47 2025 GMT Subject: CN=68963e97-a4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:d4:70:31:42:39:29:c6:e0:5d:66:4a:c3: 46:fd:75:4f:9e:06:c5:98:9a:75:d1:e2:a8:39:21: fd:86:e3:c9:61:ba:65:ea:a4:05:30:07:3e:50:2f: 90:cb:7d:43:89:7d:fa:cc:20:ef:93:62:8e:ac:c1: bd:2a:84:49:13:4d:a7:c8:9e:93:32:b9:d0:44:61: 56:ab:d1:3c:79:c4:3a:3d:94:fe:08:8a:c4:77:82: d0:58:6f:e5:e1:60:f6:5c:21:73:33:b4:46:8b:ca: 15:0a:a3:3f:cb:5d:bd:14:e4:3e:aa:20:06:01:86: 10:ea:de:0f:60:c5:d1:fe:7d:2d:1f:4e:c4:cc:0e: f4:7e:24:7a:0b:b6:ba:2c:27:4e:e5:03:fe:c5:9d: db:d1:2f:fa:33:5b:36:5a:9b:ea:1a:8f:8d:24:19: e5:66:d0:2a:72:c5:57:ab:aa:97:64:1d:29:52:29: 2e:5e:00:19:8f:93:f8:3f:03:df:cc:8e:0b:f8:af: eb:1e:bd:15:ce:f6:cc:bf:ac:2e:a2:40:8b:26:d1: 7c:70:be:74:b8:cc:51:b1:aa:99:e4:c6:c8:47:32: 2d:e5:18:9c:1e:7e:c1:14:6a:f9:e6:94:36:89:31: bf:18:1f:54:0b:48:ab:c4:09:ae:41:48:64:3e:b0: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B9:A6:5E:75:A0:D6:A5:5F:D4:FB:50:D1:0E:FD:1C:EC:11:78:3A X509v3 Authority Key Identifier: keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:80:07:5e:ea:20:41:17:fc:69:51:5a:78:ff:e6:96:ad:8c: 1c:f7:ab:eb:89:83:aa:f9:0f:e8:f4:57:d3:20:bc:ec:a2:11: da:39:1b:4a:18:b1:09:d9:cb:58:3f:47:b9:56:b9:35:4e:95: 41:55:09:ff:ba:77:dd:d2:59:66:db:c2:24:b5:d6:5c:25:6e: de:64:df:52:c0:2b:9c:dc:c6:3f:23:40:76:df:cb:a4:0f:61: ab:a7:6b:8c:a2:67:79:1e:b4:92:5c:fa:72:3a:87:72:5c:76: 49:8c:1f:9f:78:b9:86:7c:79:a6:05:b1:9f:54:f6:bc:2f:7d: 04:4c:84:0e:41:4a:26:d2:a5:40:a4:41:a0:44:b3:8a:f6:43: e2:d1:07:09:30:81:6b:36:7a:fc:bc:96:a7:92:2f:ee:1b:3c: 5f:00:f7:06:a9:fd:e1:1a:a5:a3:93:35:86:71:b4:95:03:0f: f8:0a:ab:9d:d6:9a:f5:cc:e5:f0:5f:6e:ec:fe:ff:56:37:0d: 8c:7a:1f:fe:21:f0:31:85:7d:76:7a:a7:dd:68:22:12:60:c4: cb:e9:ae:8a:a8:42:6d:34:bf:63:4e:00:dc:36:c8:28:4d:b6: e7:ae:22:f3:58:f7:63:65:06:67:09:12:ca:e1:14:99:4c:9e: 64:fb:5e:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw NkM1QzUzQTkwHhcNMjUwODA4MTgxNDQ3WhcNMjUwODE1MTgxNDQ3WjAYMRYwFAYD VQQDEw02ODk2M2U5Ny1hNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt43UcDFCOSnG4F1mSsNG/XVPngbFmJp10eKoOSH9huPJYbpl6qQFMAc+UC+Q y31DiX36zCDvk2KOrMG9KoRJE02nyJ6TMrnQRGFWq9E8ecQ6PZT+CIrEd4LQWG/l 4WD2XCFzM7RGi8oVCqM/y129FOQ+qiAGAYYQ6t4PYMXR/n0tH07EzA70fiR6C7a6 LCdO5QP+xZ3b0S/6M1s2WpvqGo+NJBnlZtAqcsVXq6qXZB0pUikuXgAZj5P4PwPf zI4L+K/rHr0VzvbMv6wuokCLJtF8cL50uMxRsaqZ5MbIRzIt5RicHn7BFGr55pQ2 iTG/GB9UC0irxAmuQUhkPrDUVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMm5pl51 oNalX9T7UNEO/RzsEXg6MB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1 Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvgAde6iBBF/xpUVp4/+aWrYwc96vriYOq+Q/o9FfTILzsohHaORtK GLEJ2ctYP0e5Vrk1TpVBVQn/unfd0llm28IktdZcJW7eZN9SwCuc3MY/I0B238uk D2Grp2uMomd5HrSSXPpyOodyXHZJjB+feLmGfHmmBbGfVPa8L30ETIQOQUom0qVA pEGgRLOK9kPi0QcJMIFrNnr8vJanki/uGzxfAPcGqf3hGqWjkzWGcbSVAw/4Cqud 1pr1zOXwX27s/v9WNw2Meh/+IfAxhX12eqfdaCISYMTL6a6KqEJtNL9jTgDcNsgo TbbnriLzWPdjZQZnCRLK4RSZTJ5k+16L -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:37 2025 by rpki-client