$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: f0MoghS9u6mV5KVAIP4Hpf1JuPx7L9VXqsdR3wdqPu8= Subject key identifier: 53:DA:B0:00:CA:28:BE:8B:2B:10:2D:CB:C9:F9:D3:46:08:DC:B5:D4 Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 014E Signing time: Sat 31 May 2025 03:50:54 +0000 Manifest this update: Sat 31 May 2025 03:50:54 +0000 Manifest next update: Sat 07 Jun 2025 03:50:53 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: ppnMmZCzBx0VqjnoqwPuL7ESk/3SPnUIDsUG9/8glu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: May 31 03:50:54 2025 GMT Not After : Jun 7 03:50:53 2025 GMT Subject: CN=683a7c9e-9563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:e1:27:f8:2d:a8:0b:53:dc:f6:c2:49:72: 5a:d5:5e:ef:38:6f:2d:a4:67:8b:e5:f8:1f:ce:dc: 45:44:65:5d:5a:08:4d:b8:6a:79:09:19:67:99:00: 62:21:99:7c:45:04:aa:b6:4a:7b:c7:4a:0c:ae:45: 46:5e:d1:46:da:fa:29:fc:61:f0:16:af:39:24:26: 71:00:bb:35:c0:01:8d:de:ce:31:5d:12:be:7c:82: 15:ff:60:25:f8:6e:bd:a8:2a:5b:4d:1f:ed:de:49: bc:8a:bf:1a:60:eb:c2:55:f5:9d:dc:ae:6a:c6:5f: b2:fc:40:7d:69:5a:6a:34:24:ea:21:72:44:43:46: 16:3c:7b:9b:2f:8b:81:99:d7:93:80:f0:d1:45:47: 29:f9:37:b2:7e:10:63:30:b3:f2:71:de:2a:81:09: 85:cc:85:84:83:9e:ab:2e:c7:44:f0:b5:56:d5:4c: a5:67:a0:cc:1e:c9:70:68:39:90:36:90:69:c1:96: 7d:28:f1:83:6d:fd:60:b6:bf:be:bb:a7:88:d3:78: 59:1b:52:9d:e4:d5:03:5a:f1:fd:17:31:3d:48:3b: d3:b5:21:ef:c9:a5:36:48:3d:3a:f4:ff:6f:a1:b2: b6:2e:8a:25:a9:fa:d3:29:17:83:61:7f:ae:83:ca: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DA:B0:00:CA:28:BE:8B:2B:10:2D:CB:C9:F9:D3:46:08:DC:B5:D4 X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:36:26:f6:fb:95:65:d1:e6:43:4c:43:56:a4:2c:ec:e3:d5: 7d:c8:33:c9:67:47:d0:0a:ac:1d:57:c2:79:e1:a8:74:ab:e2: 62:ee:69:30:eb:3d:cc:79:49:bc:64:8d:3b:b9:c5:b3:ed:7a: ff:c5:25:a6:64:da:c6:ea:5c:c3:13:47:4b:4f:9c:a4:4c:ee: 1c:9f:e8:30:ad:51:01:01:3c:37:15:e8:31:09:9f:f2:2a:65: f9:4c:14:83:6d:d6:b4:2b:df:12:78:e2:f4:ba:40:f0:53:90: bf:00:5d:2f:d8:50:65:98:ec:3f:66:4b:e5:02:b8:ae:5b:70: 2e:95:58:ac:92:5c:b0:f9:29:ca:30:7e:1f:95:e0:1d:98:84: ef:8c:5e:ce:90:a3:44:5e:96:e1:ff:88:46:62:27:32:18:d1: 5a:72:b9:6b:76:1c:96:9a:ed:59:e9:49:17:5d:20:68:99:04: 4b:dd:1e:86:ae:5a:d9:22:d4:78:12:a9:29:63:b9:f8:1a:45: 93:b5:0d:53:3a:5f:50:df:d3:40:05:9d:29:4d:25:1f:98:7c: 7b:ec:11:96:57:e2:e5:c3:88:aa:12:41:3e:29:af:8c:da:a1: 0a:8e:db:12:2e:77:44:32:e6:08:cb:db:4d:3d:1f:de:17:93: 76:ee:ca:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwNTMxMDM1MDU0WhcNMjUwNjA3MDM1MDUzWjAYMRYwFAYD VQQDEw02ODNhN2M5ZS05NTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LjhJ/gtqAtT3PbCSXJa1V7vOG8tpGeL5fgfztxFRGVdWghNuGp5CRlnmQBi IZl8RQSqtkp7x0oMrkVGXtFG2vop/GHwFq85JCZxALs1wAGN3s4xXRK+fIIV/2Al +G69qCpbTR/t3km8ir8aYOvCVfWd3K5qxl+y/EB9aVpqNCTqIXJEQ0YWPHubL4uB mdeTgPDRRUcp+TeyfhBjMLPycd4qgQmFzIWEg56rLsdE8LVW1UylZ6DMHslwaDmQ NpBpwZZ9KPGDbf1gtr++u6eI03hZG1Kd5NUDWvH9FzE9SDvTtSHvyaU2SD069P9v obK2LoolqfrTKReDYX+ug8rTUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPasADK KL6LKxAty8n500YI3LXUMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlNib2+5Vl0eZDTENWpCzs49V9yDPJZ0fQCqwdV8J54ah0q+Ji7mkw 6z3MeUm8ZI07ucWz7Xr/xSWmZNrG6lzDE0dLT5ykTO4cn+gwrVEBATw3FegxCZ/y KmX5TBSDbda0K98SeOL0ukDwU5C/AF0v2FBlmOw/ZkvlAriuW3AulVisklyw+SnK MH4fleAdmITvjF7OkKNEXpbh/4hGYicyGNFacrlrdhyWmu1Z6UkXXSBomQRL3R6G rlrZItR4EqkpY7n4GkWTtQ1TOl9Q39NABZ0pTSUfmHx77BGWV+Llw4iqEkE+Ka+M 2qEKjtsSLndEMuYIy9tNPR/eF5N27sqq -----END CERTIFICATE-----Generated at Sat May 31 16:39:54 2025 by rpki-client