$ rpki-client -vvf rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft File: SV79PNQ-P-7r0irR3ep5817UePU.mft (raw, json) Hash identifier: XJNGlBXV1xJxbBTR1o/ZqmJjfBXPSuJgC+XrUXfOusI= Subject key identifier: AC:FA:C0:94:CD:3A:21:32:2B:D7:47:5C:99:A4:B6:18:7A:B7:AF:DF Authority key identifier: 49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5 Certificate issuer: /CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5 Certificate serial: 135D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft Manifest number: 1354 Signing time: Sun 06 Apr 2025 16:55:10 +0000 Manifest this update: Sun 06 Apr 2025 16:55:10 +0000 Manifest next update: Sun 13 Apr 2025 16:55:10 +0000 Files and hashes: 1: SV79PNQ-P-7r0irR3ep5817UePU.crl (hash: c1fifqfTSscOXRxYqWYVrYTQcg6hR1H8OahzSDafARM=) 2: C569659C02DF11EBB54FAE29C4F9AE02.roa (hash: ksZCQUpgjigR3J12hgj4ozKRCV6ZGeFDC2+Ja2MoW5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4957 (0x135d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A717 Validity Not Before: Apr 6 16:55:10 2025 GMT Not After : Apr 13 16:55:10 2025 GMT Subject: CN=67f2b1ee-773e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:84:12:4f:fa:3b:2f:5e:be:82:bc:d5:dc:44: 32:8e:e0:9b:5f:a5:66:31:74:1c:c9:25:e3:aa:39: 3b:bf:f0:34:72:d1:97:f1:8b:c5:91:38:37:42:e2: ed:15:b6:8b:26:00:45:e4:11:aa:6a:09:87:16:c7: 80:dc:09:fe:63:e0:d1:c3:52:e5:39:45:b9:b9:6b: b7:e5:24:d8:1c:87:85:2c:05:14:30:54:e9:bc:cc: 60:6a:c8:ec:b7:b8:00:68:4a:78:b6:3e:bf:d1:76: 1a:b4:3a:3e:d6:dd:1f:bc:f9:ca:6c:e9:99:96:71: d5:7f:d2:7c:c3:2b:f7:e9:63:50:8a:4d:c7:b1:ee: 85:cd:8b:32:94:8a:a9:b2:49:ef:29:80:90:9f:4a: 94:3b:f1:31:40:75:45:4c:4f:15:81:59:47:3f:2c: fe:30:cc:04:85:54:7e:9a:84:77:01:09:fc:a9:92: 4b:f5:62:0a:14:93:61:4e:76:55:c1:c2:fd:af:b0: 11:1b:ca:6e:5f:4a:a6:5c:0a:ca:7a:b3:2f:60:b5: 0e:8c:37:e6:dd:2a:ef:59:a0:fb:dd:f9:41:aa:5c: 01:42:d2:fd:e9:e5:71:e6:91:81:f9:6f:d2:c9:46: 54:ce:2d:06:13:b7:6c:1c:ff:a0:9e:e4:e2:f3:86: ce:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FA:C0:94:CD:3A:21:32:2B:D7:47:5C:99:A4:B6:18:7A:B7:AF:DF X509v3 Authority Key Identifier: keyid:49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2d:07:c6:f1:5e:2b:a9:92:3e:e0:38:d2:d2:67:72:fb:93: 08:b3:76:fd:1d:dd:39:61:cb:fb:1a:ce:41:73:4d:ad:04:4e: aa:27:27:e8:08:74:69:8c:99:93:a9:8e:e1:2c:54:7e:b6:f8: 55:98:45:9a:63:ee:29:64:d6:17:8e:c7:fa:cf:ea:40:82:3b: 06:e6:5e:95:6d:d8:11:a9:76:f3:26:7f:0d:b0:7d:0c:d2:c0: 05:3d:9f:2c:3f:d7:8f:8d:91:72:ea:e2:fa:35:2d:7a:b2:ea: 41:93:7b:38:e5:be:4c:02:51:5d:5a:5e:9c:01:98:65:02:05: fe:6e:42:82:14:3d:1a:07:57:ca:62:30:07:4c:4f:e8:7c:92: 0e:83:34:13:56:32:23:ef:9c:eb:f8:ab:b0:f1:f5:a0:47:02: 83:6b:96:67:95:16:00:94:52:e2:3d:b1:aa:68:85:29:cc:4c: 24:57:97:00:a4:c4:52:26:a5:4b:a2:ac:0d:32:78:38:a8:65: f5:d2:ad:c2:fe:10:24:3c:67:b0:b8:e9:68:a2:cf:bc:dc:d7: f5:91:72:14:d8:49:1a:8e:50:36:38:09:d1:30:e8:0a:1c:f6: 47:80:92:21:8c:a4:b9:ce:9e:07:5c:9d:fb:9f:aa:f1:44:b0: ea:47:62:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E3MTcxMTAvBgNVBAUTKDQ5NUVGRDNDRDQzRTNGRUVFQkQyMkFEMURERUE3OUYz NUVENDc4RjUwHhcNMjUwNDA2MTY1NTEwWhcNMjUwNDEzMTY1NTEwWjAYMRYwFAYD VQQDEw02N2YyYjFlZS03NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA74QST/o7L16+grzV3EQyjuCbX6VmMXQcySXjqjk7v/A0ctGX8YvFkTg3QuLt FbaLJgBF5BGqagmHFseA3An+Y+DRw1LlOUW5uWu35STYHIeFLAUUMFTpvMxgasjs t7gAaEp4tj6/0XYatDo+1t0fvPnKbOmZlnHVf9J8wyv36WNQik3Hse6FzYsylIqp sknvKYCQn0qUO/ExQHVFTE8VgVlHPyz+MMwEhVR+moR3AQn8qZJL9WIKFJNhTnZV wcL9r7ARG8puX0qmXArKerMvYLUOjDfm3SrvWaD73flBqlwBQtL96eVx5pGB+W/S yUZUzi0GE7dsHP+gnuTi84bOfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz6wJTN OiEyK9dHXJmkthh6t6/fMB8GA1UdIwQYMBaAFEle/TzUPj/u69Iq0d3qefNe1Hj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTcxNy82MzExMDIwMDlD NjIxMUU4QThCMDZFMzJDNEY5QUUwMi9TVjc5UE5RLVAtN3IwaXJSM2VwNTgxN1Vl UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NWNzlQTlEtUC03cjBpclIzZXA1ODE3VWVQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTcxNy82MzExMDIwMDlDNjIxMUU4QThCMDZFMzJDNEY5QUUwMi9TVjc5UE5RLVAt N3IwaXJSM2VwNTgxN1VlUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXLQfG8V4rqZI+4DjS0mdy+5MIs3b9Hd05Ycv7Gs5Bc02tBE6qJyfo CHRpjJmTqY7hLFR+tvhVmEWaY+4pZNYXjsf6z+pAgjsG5l6VbdgRqXbzJn8NsH0M 0sAFPZ8sP9ePjZFy6uL6NS16supBk3s45b5MAlFdWl6cAZhlAgX+bkKCFD0aB1fK YjAHTE/ofJIOgzQTVjIj75zr+Kuw8fWgRwKDa5ZnlRYAlFLiPbGqaIUpzEwkV5cA pMRSJqVLoqwNMng4qGX10q3C/hAkPGewuOloos+83Nf1kXIU2EkajlA2OAnRMOgK HPZHgJIhjKS5zp4HXJ37n6rxRLDqR2L3 -----END CERTIFICATE-----Generated at Sun Apr 6 22:21:57 2025 by rpki-client