$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft File: swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json) Hash identifier: /w/DEt9yrQPBYGd6P8X01KB7u1ZB4fNgMlr1d4srMRc= Subject key identifier: 43:46:0D:76:BF:F4:27:A2:2B:53:A3:CD:20:F0:A2:AF:D5:77:E9:28 Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 Certificate issuer: /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft Manifest number: 0CF1 Signing time: Thu 24 Apr 2025 18:03:30 +0000 Manifest this update: Thu 24 Apr 2025 18:03:30 +0000 Manifest next update: Thu 01 May 2025 18:03:30 +0000 Files and hashes: 1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: ygmrXSurIwlvtJYfoyzAYTMLRbXszo9sdVPPKgr9m30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9 Validity Not Before: Apr 24 18:03:30 2025 GMT Not After : May 1 18:03:30 2025 GMT Subject: CN=680a7cf2-d698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7c:20:6a:ff:84:14:9d:02:19:27:6f:29:b0: 50:9d:21:c1:89:be:a3:e0:0d:ed:0e:2f:a0:17:52: 02:b6:82:b5:e9:25:fb:7a:e9:51:10:79:e8:c6:c2: 2d:51:b2:18:a5:ed:c3:81:8f:e7:65:fc:fb:04:1c: 42:5a:1e:46:a9:e4:29:e0:e2:a0:73:0b:1f:7b:fb: e7:fe:fd:e9:24:7d:ff:3c:c6:ba:92:c7:ee:d2:d8: 18:b0:8f:c8:8b:56:60:21:a9:91:fa:aa:2b:4e:6e: ee:2c:9d:36:e9:82:4d:8e:bd:d5:48:20:8a:63:dc: ac:8d:91:42:c3:e6:ec:66:53:f4:a3:d2:36:66:15: 34:9a:87:c6:32:08:d1:ab:6f:26:4a:1a:3d:8a:1f: bf:a6:fe:64:d5:1d:a1:ff:2d:1a:7a:49:cd:8a:4c: a5:b9:8c:95:93:e2:45:32:da:4b:e7:77:46:57:4e: 3f:17:4b:b8:93:c7:ec:e3:2a:95:33:fb:79:61:30: 1c:79:7e:52:84:55:c7:01:b0:14:53:e4:c6:2f:c1: 30:3e:10:b3:24:df:e4:0b:01:90:26:ef:54:19:b0: c7:6e:dd:f9:f6:bc:af:d8:9d:a0:4f:45:45:fe:e5: 2c:bb:79:cf:3a:69:0f:2b:bc:01:f4:3c:f0:b3:41: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:0D:76:BF:F4:27:A2:2B:53:A3:CD:20:F0:A2:AF:D5:77:E9:28 X509v3 Authority Key Identifier: keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ca:72:3d:43:3f:b8:ab:b5:92:fb:d7:d8:7d:f1:0b:17:1e: f4:ef:e3:3b:73:84:07:41:de:25:f5:3d:0d:df:97:f5:0b:19: aa:75:7f:c1:05:e2:4b:9e:17:b3:f4:25:c0:f5:d0:82:9e:bc: 03:52:b3:cc:73:28:99:49:2d:57:95:43:e1:af:01:ed:b5:7c: ca:c4:17:cb:4d:6c:ee:00:a9:20:39:91:7e:5b:38:12:3f:a4: 65:af:70:83:1b:01:18:35:57:0d:69:24:16:a4:fc:4a:e1:87: c9:fa:95:cc:6e:24:66:8c:8a:de:56:b4:54:31:2e:79:7c:7c: 09:f6:fd:b8:41:9f:7e:d0:22:ae:e9:6c:11:8d:ea:93:19:66: a1:ae:38:33:5a:84:0a:61:bc:e1:ac:66:82:06:16:0d:b9:c8: 54:62:61:c2:ac:7b:14:66:66:6f:e0:93:69:da:50:f7:f3:5c: c6:28:ec:c9:72:34:3f:5b:c2:c6:71:fe:fb:d3:da:72:83:45: 99:c2:6a:85:0b:97:32:83:7e:03:5f:16:27:e0:07:57:91:e8: c3:6f:38:d1:69:40:6c:8f:72:99:a5:7b:80:9b:d8:fe:b2:b0: da:f4:53:35:ab:5f:d0:05:fb:c9:eb:f6:e2:74:92:d6:9e:3f: 81:12:a2:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw NkM1QzUzQTkwHhcNMjUwNDI0MTgwMzMwWhcNMjUwNTAxMTgwMzMwWjAYMRYwFAYD VQQDEw02ODBhN2NmMi1kNjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13wgav+EFJ0CGSdvKbBQnSHBib6j4A3tDi+gF1ICtoK16SX7eulREHnoxsIt UbIYpe3DgY/nZfz7BBxCWh5GqeQp4OKgcwsfe/vn/v3pJH3/PMa6ksfu0tgYsI/I i1ZgIamR+qorTm7uLJ026YJNjr3VSCCKY9ysjZFCw+bsZlP0o9I2ZhU0mofGMgjR q28mSho9ih+/pv5k1R2h/y0aeknNikyluYyVk+JFMtpL53dGV04/F0u4k8fs4yqV M/t5YTAceX5ShFXHAbAUU+TGL8EwPhCzJN/kCwGQJu9UGbDHbt359ryv2J2gT0VF /uUsu3nPOmkPK7wB9Dzws0H6PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENGDXa/ 9CeiK1OjzSDwoq/Vd+koMB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1 Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEynI9Qz+4q7WS+9fYffELFx707+M7c4QHQd4l9T0N35f1CxmqdX/B BeJLnhez9CXA9dCCnrwDUrPMcyiZSS1XlUPhrwHttXzKxBfLTWzuAKkgOZF+WzgS P6Rlr3CDGwEYNVcNaSQWpPxK4YfJ+pXMbiRmjIreVrRUMS55fHwJ9v24QZ9+0CKu 6WwRjeqTGWahrjgzWoQKYbzhrGaCBhYNuchUYmHCrHsUZmZv4JNp2lD381zGKOzJ cjQ/W8LGcf7709pyg0WZwmqFC5cyg34DXxYn4AdXkejDbzjRaUBsj3KZpXuAm9j+ srDa9FM1q1/QBfvJ6/bidJLWnj+BEqIg -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:39 2025 by rpki-client