$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: 3Ky8b/qRDa/T6uMKHqTWBPrA+ZeQ1Ll0b6W0a0N6QmQ= Subject key identifier: 13:4B:9E:F4:DC:8C:2A:08:51:7A:4B:A6:9D:C5:2D:37:BA:A7:3F:C6 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 20E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2B77 Signing time: Fri 18 Jul 2025 16:03:32 +0000 Manifest this update: Fri 18 Jul 2025 16:03:32 +0000 Manifest next update: Fri 25 Jul 2025 16:03:32 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: eZK3rAIIFoHSe87Dqak6R8x1m0q3MBevKaNAduD4+7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8417 (0x20e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Jul 18 16:03:32 2025 GMT Not After : Jul 25 16:03:32 2025 GMT Subject: CN=687a7054-fa18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:72:62:2e:77:25:a6:95:7f:ea:5f:29:aa: 2a:a1:5e:7e:30:7c:1c:cd:ee:19:77:4c:1c:c6:13: ac:1a:7f:35:f6:a3:62:8d:da:dd:13:12:65:39:a6: fa:0d:ff:f0:3e:4f:92:26:7c:74:00:73:cd:b7:87: 46:88:6a:8f:4b:9c:27:01:12:31:bd:5f:ca:f3:ce: 16:ad:16:7e:92:8c:11:4d:40:74:2d:77:01:a7:b3: c8:40:1b:dc:b0:0b:30:fb:b2:74:0a:34:19:9b:a9: 86:14:aa:87:97:60:b1:cf:5d:9a:fc:d3:6d:be:2a: 26:61:8b:10:7b:07:f6:e4:e4:d3:7f:e2:60:92:35: 83:c2:64:af:e2:23:e0:ab:a6:e5:18:bf:1d:60:e6: 7f:97:bc:b6:ba:0a:42:07:39:16:4a:6e:8e:33:bb: fc:a4:15:24:ce:2b:c0:95:5b:78:1e:b7:87:50:83: fc:12:19:10:5d:6b:3e:82:33:ed:7c:5d:94:0d:69: 81:08:fd:16:b5:f5:31:cf:08:41:6f:a4:36:0b:c3: 27:e9:a8:39:12:b6:b2:3f:af:dc:f8:b7:d4:fe:e4: 13:bf:68:78:03:76:81:1c:b8:82:1c:de:2d:63:b3: 6e:33:6c:85:03:55:df:16:c4:ec:75:03:d5:d9:06: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:9E:F4:DC:8C:2A:08:51:7A:4B:A6:9D:C5:2D:37:BA:A7:3F:C6 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f1:85:7d:02:d5:32:5a:c7:0f:7d:aa:77:ee:73:6b:09:66: 77:7f:57:87:38:45:21:d8:46:19:84:7e:a8:8c:cf:7b:1c:b3: 7a:3e:c6:2b:7a:89:b3:a3:64:63:80:5b:cb:66:ec:38:a6:ad: 70:1b:ce:54:43:cd:61:68:a3:3a:cc:26:17:ee:0e:21:6e:38: 36:e0:76:39:50:9d:b1:a6:79:f4:bc:39:07:f6:28:ad:95:84: 33:af:a2:82:7f:a4:52:d0:5f:7c:b9:e6:1c:3d:8e:08:7b:ef: da:c5:21:5e:c7:48:54:07:1b:45:c9:f8:89:68:95:7d:38:36: 31:25:00:51:1e:d2:9c:e0:0a:93:11:45:bd:52:f5:5b:3e:08: a4:69:e6:8f:3e:e2:96:f8:d9:7e:68:dd:19:99:77:57:59:fb: 01:ba:43:b3:f3:1d:08:16:31:07:65:58:bd:92:ef:73:ab:85: 41:fa:ff:b0:6d:7a:61:45:82:a3:44:4a:8f:9a:13:c1:ff:53: ea:f7:f9:45:4b:53:8e:b2:38:d1:e6:78:6a:44:99:f3:93:1f: 72:7c:ff:88:c9:9a:78:dc:a2:5c:bd:bf:3a:71:c5:16:10:35: d5:1d:9b:ae:d9:29:bc:4a:c3:7f:e5:f5:1d:7f:69:30:be:e4: 0b:1d:ad:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUwNzE4MTYwMzMyWhcNMjUwNzI1MTYwMzMyWjAYMRYwFAYD VQQDEw02ODdhNzA1NC1mYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FByYi53JaaVf+pfKaoqoV5+MHwcze4Zd0wcxhOsGn819qNijdrdExJlOab6 Df/wPk+SJnx0AHPNt4dGiGqPS5wnARIxvV/K884WrRZ+kowRTUB0LXcBp7PIQBvc sAsw+7J0CjQZm6mGFKqHl2Cxz12a/NNtviomYYsQewf25OTTf+JgkjWDwmSv4iPg q6blGL8dYOZ/l7y2ugpCBzkWSm6OM7v8pBUkzivAlVt4HreHUIP8EhkQXWs+gjPt fF2UDWmBCP0WtfUxzwhBb6Q2C8Mn6ag5ErayP6/c+LfU/uQTv2h4A3aBHLiCHN4t Y7NuM2yFA1XfFsTsdQPV2QbNTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNLnvTc jCoIUXpLpp3FLTe6pz/GMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk8YV9AtUyWscPfap37nNrCWZ3f1eHOEUh2EYZhH6ojM97HLN6PsYr eomzo2RjgFvLZuw4pq1wG85UQ81haKM6zCYX7g4hbjg24HY5UJ2xpnn0vDkH9iit lYQzr6KCf6RS0F98ueYcPY4Ie+/axSFex0hUBxtFyfiJaJV9ODYxJQBRHtKc4AqT EUW9UvVbPgikaeaPPuKW+Nl+aN0ZmXdXWfsBukOz8x0IFjEHZVi9ku9zq4VB+v+w bXphRYKjREqPmhPB/1Pq9/lFS1OOsjjR5nhqRJnzkx9yfP+IyZp43KJcvb86ccUW EDXVHZuu2Sm8SsN/5fUdf2kwvuQLHa2r -----END CERTIFICATE-----Generated at Sun Jul 20 09:54:35 2025 by rpki-client