$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: W4XN8F02GLkbb0k3O9U59Mx/7xBhvlp+9TVmiSo9rvQ= Subject key identifier: 8C:5D:22:42:4A:FF:EE:9D:B9:72:06:DD:F1:AD:38:5A:35:AA:23:FF Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 0136 Signing time: Fri 11 Apr 2025 03:44:01 +0000 Manifest this update: Fri 11 Apr 2025 03:44:01 +0000 Manifest next update: Fri 18 Apr 2025 03:44:01 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: R6qLZ6lynDYHlWuWnNNEydjIQZ5B96OnNK+itI3x2FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 03:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: Apr 11 03:44:01 2025 GMT Not After : Apr 18 03:44:01 2025 GMT Subject: CN=67f89001-e9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:da:53:38:b9:b1:a5:b9:b9:8e:c3:f1:2a: 0d:4d:66:e4:a6:39:98:08:cd:7e:b6:0f:7f:09:af: 55:7f:9d:a7:ea:d9:41:fe:30:76:9e:2e:a7:22:82: 97:6f:a2:09:65:03:3e:ed:4e:e3:1d:38:7d:65:6c: 6a:51:e6:70:96:e3:31:8d:c2:5b:4b:41:46:23:ea: 05:26:06:92:47:c9:e2:55:f8:c2:21:63:7a:3f:2b: 46:f8:6c:31:fa:6c:51:5f:1e:3a:03:51:bf:81:89: 51:f4:2b:9a:57:b6:1e:ca:2b:1e:c6:00:cd:58:15: e5:f9:1e:2b:41:90:51:26:c6:b5:02:3c:d9:a6:62: 72:28:e8:5d:53:65:32:b6:94:2b:d9:ff:e0:aa:ac: 24:b6:ba:32:b3:d1:aa:4e:6d:01:25:6f:0b:56:02: bc:04:bc:55:37:a8:92:01:9d:da:13:a9:8e:6b:c2: 24:ce:f4:42:73:34:33:6e:6b:fe:e2:d8:f8:c9:81: fc:bb:6a:32:d9:48:5d:4a:36:f8:25:ee:1c:40:eb: 47:67:dd:7d:9e:d0:47:9d:b7:46:15:51:19:6f:d8: 50:90:3b:67:b0:78:1c:39:70:05:88:65:3b:ed:c2: 1e:d1:f0:a5:61:ae:dd:1f:84:42:53:69:0a:2d:9c: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5D:22:42:4A:FF:EE:9D:B9:72:06:DD:F1:AD:38:5A:35:AA:23:FF X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:61:65:77:0a:5b:e3:3a:df:7b:5b:47:93:05:f0:f3:86:4b: 96:c2:b0:8c:35:bd:3a:b5:e6:03:bb:13:20:57:3e:8e:da:d7: c1:6c:e9:7b:8c:c7:e1:6f:8c:25:64:7d:48:a9:cb:dc:0d:f5: 0c:44:dc:b4:49:9c:10:2b:18:4d:07:b3:29:a3:c4:3e:d1:a8: 89:9a:25:78:00:af:1b:8d:5c:42:79:e8:cd:6e:a6:ad:76:08: 9c:da:e2:c8:65:7f:7a:ed:f5:7e:3b:09:da:ab:9f:2a:6f:83: 1f:6f:22:ed:fa:4d:5f:9b:21:24:0e:b5:26:60:24:7e:e2:9e: 19:9f:4c:42:2f:32:07:0b:6d:ee:8d:f2:4d:4d:49:d3:93:13: ff:d3:01:ab:ca:97:b9:e3:0d:57:7c:ec:01:62:19:fe:aa:1e: 95:30:b2:7c:3b:4c:d9:33:39:d5:4f:27:c0:5f:08:c4:ca:0b: 60:4c:85:49:5d:aa:a3:1b:cb:17:0d:34:ec:2e:ba:1b:d8:13: 1f:98:c4:a5:d2:c9:be:22:3c:3c:bd:ae:02:20:68:22:e1:e2: aa:6e:92:47:9e:ee:f7:0f:e6:d6:43:7f:c6:55:06:29:83:cf: 6d:27:76:a7:db:d3:f6:0d:00:1b:37:61:72:c5:f9:93:9d:5c: eb:87:3d:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwNDExMDM0NDAxWhcNMjUwNDE4MDM0NDAxWjAYMRYwFAYD VQQDEw02N2Y4OTAwMS1lOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUXaUzi5saW5uY7D8SoNTWbkpjmYCM1+tg9/Ca9Vf52n6tlB/jB2ni6nIoKX b6IJZQM+7U7jHTh9ZWxqUeZwluMxjcJbS0FGI+oFJgaSR8niVfjCIWN6PytG+Gwx +mxRXx46A1G/gYlR9CuaV7YeyisexgDNWBXl+R4rQZBRJsa1AjzZpmJyKOhdU2Uy tpQr2f/gqqwktroys9GqTm0BJW8LVgK8BLxVN6iSAZ3aE6mOa8IkzvRCczQzbmv+ 4tj4yYH8u2oy2UhdSjb4Je4cQOtHZ919ntBHnbdGFVEZb9hQkDtnsHgcOXAFiGU7 7cIe0fClYa7dH4RCU2kKLZyNxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxdIkJK /+6duXIG3fGtOFo1qiP/MB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHYWV3ClvjOt97W0eTBfDzhkuWwrCMNb06teYDuxMgVz6O2tfBbOl7 jMfhb4wlZH1IqcvcDfUMRNy0SZwQKxhNB7Mpo8Q+0aiJmiV4AK8bjVxCeejNbqat dgic2uLIZX967fV+Ownaq58qb4MfbyLt+k1fmyEkDrUmYCR+4p4Zn0xCLzIHC23u jfJNTUnTkxP/0wGrype54w1XfOwBYhn+qh6VMLJ8O0zZMznVTyfAXwjEygtgTIVJ XaqjG8sXDTTsLrob2BMfmMSl0sm+Ijw8va4CIGgi4eKqbpJHnu73D+bWQ3/GVQYp g89tJ3an29P2DQAbN2FyxfmTnVzrhz07 -----END CERTIFICATE-----Generated at Sat Apr 12 17:38:30 2025 by rpki-client