$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: PcVpOeb+b6r8Patvg0rQBOpW7GCzDOQbxgvnnLJ95Ao= Subject key identifier: 88:28:93:F2:17:2B:B0:69:FA:00:19:EB:3B:EA:67:4B:26:9C:B5:F1 Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 0167 Signing time: Sat 19 Jul 2025 04:05:40 +0000 Manifest this update: Sat 19 Jul 2025 04:05:40 +0000 Manifest next update: Sat 26 Jul 2025 04:05:40 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: 7K6sewjfgvJGXUbEt1et+8bhCDLTcCBmfq+VdiYdrHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: Jul 19 04:05:40 2025 GMT Not After : Jul 26 04:05:40 2025 GMT Subject: CN=687b1994-c6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:43:49:58:d2:2c:6e:c8:da:df:f7:3f:e9: 6c:18:07:17:be:3c:9c:9c:f9:f6:dc:e3:b3:12:d2: 20:57:79:67:6e:b4:14:9a:c4:3d:36:47:6b:d0:a9: 05:19:e6:df:51:d2:6d:5f:e6:37:dd:4c:7e:22:6b: 8d:d0:2d:82:d1:33:56:4a:29:3e:6f:a9:30:bf:be: 18:3c:65:71:59:27:61:3e:e8:48:85:73:e7:75:c7: df:09:58:89:b8:0d:06:00:16:a2:44:57:d3:3e:35: 82:55:3b:47:26:c2:d9:05:7d:5b:29:a2:3c:cf:77: a8:a9:e8:45:fa:f6:09:77:28:c5:ef:cc:2f:78:fb: 26:fb:a5:40:14:1f:05:2e:df:60:62:3d:ac:de:a7: cb:55:66:37:b1:14:7d:aa:35:a6:4b:b9:90:30:00: 42:9d:91:70:24:f4:a5:08:93:bf:db:b1:bf:d1:10: 3b:a9:b3:6a:11:fe:7f:78:8d:e6:f5:d3:c9:eb:62: 7b:58:5c:e2:d2:76:67:d2:3d:69:94:b3:fd:b1:17: 56:35:cc:f1:c9:5d:4b:ef:68:04:82:62:c7:10:c1: 9a:83:bb:35:b3:64:e2:e1:f4:58:24:80:97:88:78: bf:fc:07:d2:3c:48:cf:47:1c:22:2d:62:5e:4d:8f: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:28:93:F2:17:2B:B0:69:FA:00:19:EB:3B:EA:67:4B:26:9C:B5:F1 X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:46:b2:03:a9:14:f6:67:99:92:69:7d:65:c0:9d:8e:47:ee: ed:00:2f:b4:b4:4d:83:0f:ef:7e:9e:62:61:37:83:7e:2f:ff: e7:24:27:dc:58:24:23:a8:da:7a:c3:87:0f:77:48:a3:e6:97: f2:96:d6:4f:25:e9:f2:24:ef:e2:92:99:bc:16:7e:08:f5:f2: 3b:e4:5a:3d:39:6b:ea:e1:89:26:84:7a:e3:f1:22:bf:1d:6e: 15:70:88:81:c6:38:c4:e0:8a:8f:7a:6a:3a:9b:02:6d:57:fc: df:9c:a4:2e:0c:6d:57:92:4c:11:df:58:10:61:26:8c:1b:8e: 08:ac:b7:f9:5f:4f:f9:d2:d7:d9:3d:72:ad:e0:1a:38:74:0e: f2:92:b1:37:55:48:33:8c:91:d3:5f:f6:ab:ca:9d:60:1f:fc: 82:b5:28:f2:b3:dd:81:c2:5e:4d:2f:08:eb:fb:f9:62:48:ee: 6e:08:a6:af:76:30:5e:c6:23:47:e8:27:77:d8:cf:c6:8d:76: dd:4b:ff:83:4c:f8:24:27:64:68:72:08:ad:0c:e6:7e:0c:ca: 89:b3:83:dc:ec:01:01:d8:66:52:12:5b:21:5c:ff:54:b4:15: df:18:12:06:64:87:61:93:3e:8b:6f:80:0f:73:f6:a3:52:6d: 5b:b4:4b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwNzE5MDQwNTQwWhcNMjUwNzI2MDQwNTQwWjAYMRYwFAYD VQQDEw02ODdiMTk5NC1jNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwlDSVjSLG7I2t/3P+lsGAcXvjycnPn23OOzEtIgV3lnbrQUmsQ9Nkdr0KkF GebfUdJtX+Y33Ux+ImuN0C2C0TNWSik+b6kwv74YPGVxWSdhPuhIhXPndcffCViJ uA0GABaiRFfTPjWCVTtHJsLZBX1bKaI8z3eoqehF+vYJdyjF78wvePsm+6VAFB8F Lt9gYj2s3qfLVWY3sRR9qjWmS7mQMABCnZFwJPSlCJO/27G/0RA7qbNqEf5/eI3m 9dPJ62J7WFzi0nZn0j1plLP9sRdWNczxyV1L72gEgmLHEMGag7s1s2Ti4fRYJICX iHi//AfSPEjPRxwiLWJeTY8xwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgok/IX K7Bp+gAZ6zvqZ0smnLXxMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgRrIDqRT2Z5mSaX1lwJ2OR+7tAC+0tE2DD+9+nmJhN4N+L//nJCfc WCQjqNp6w4cPd0ij5pfyltZPJenyJO/ikpm8Fn4I9fI75Fo9OWvq4YkmhHrj8SK/ HW4VcIiBxjjE4IqPemo6mwJtV/zfnKQuDG1XkkwR31gQYSaMG44IrLf5X0/50tfZ PXKt4Bo4dA7ykrE3VUgzjJHTX/aryp1gH/yCtSjys92Bwl5NLwjr+/liSO5uCKav djBexiNH6Cd32M/GjXbdS/+DTPgkJ2RocgitDOZ+DMqJs4Pc7AEB2GZSElshXP9U tBXfGBIGZIdhkz6Lb4APc/ajUm1btEuK -----END CERTIFICATE-----Generated at Sun Jul 20 10:00:22 2025 by rpki-client