$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: hFQqoKVhxyNjhyDhZz9ZRVMLcxzsknvdSHoqnEQkTQ8= Subject key identifier: 5C:E3:13:20:23:B4:03:CB:03:3D:AE:FE:94:5C:9D:BD:47:D2:B7:80 Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 0187 Signing time: Fri 19 Sep 2025 04:03:23 +0000 Manifest this update: Fri 19 Sep 2025 04:03:22 +0000 Manifest next update: Fri 26 Sep 2025 04:03:22 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: E9Yp/LKiW/RftqH/waajAxhxdyD9l/Id591dugepZ1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: Sep 19 04:03:22 2025 GMT Not After : Sep 26 04:03:22 2025 GMT Subject: CN=68ccd60b-b316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:45:7c:61:a2:1d:57:50:39:d2:bb:88:90: c6:72:66:6d:a5:66:69:4c:3b:cf:cd:b4:a8:1d:a3: 3d:f6:90:d3:96:bb:b7:10:e4:93:3b:af:17:c1:ae: e8:10:08:3d:49:3e:09:72:3a:de:c4:80:a5:52:5e: 2b:6d:a7:ad:26:40:91:68:fa:3a:36:c3:43:f4:4b: 34:e4:1d:2f:4a:3c:17:84:ff:f7:a9:e2:a8:af:49: fe:5d:d1:fe:9a:09:9c:38:d4:bd:04:14:9b:b8:18: dc:dc:f4:11:49:47:4d:c8:2f:8b:ff:1b:55:0f:5d: e2:3c:68:28:59:31:2e:69:a1:99:39:ae:31:f8:b9: 8f:95:32:d1:91:18:39:10:78:33:6d:07:ff:13:a2: 83:88:b3:10:d7:50:45:67:a4:e8:b1:08:c9:3b:1f: db:27:d6:de:32:56:3b:3c:ba:bb:eb:88:e8:6d:0e: 31:71:eb:70:79:8d:b8:0a:ff:86:20:cb:33:53:71: 42:64:0e:05:38:bc:e7:e5:5f:1f:4d:d9:b8:11:03: 62:d5:eb:00:b3:5c:d6:42:69:aa:41:05:86:d1:7a: f3:75:68:09:36:79:2f:36:24:28:be:4c:21:13:10: 27:bc:1e:30:35:b9:21:25:a1:2f:33:3f:81:36:2c: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E3:13:20:23:B4:03:CB:03:3D:AE:FE:94:5C:9D:BD:47:D2:B7:80 X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2f:bf:41:b4:00:1a:06:5d:12:0b:54:33:62:47:08:9a:fe: 8f:01:04:0b:f1:cf:6e:15:eb:d3:88:51:b0:92:ff:34:3a:62: a2:b9:4c:30:4f:83:9d:58:21:15:7e:ea:de:3e:e1:3e:c4:aa: d7:af:b3:43:27:91:bd:af:59:ce:b5:bf:d3:39:e9:c9:3d:2f: 9f:b5:ae:6c:23:49:79:a2:34:18:75:76:53:50:46:98:61:5d: 8a:22:00:89:4c:13:cf:ef:09:ba:e6:41:d8:5d:26:c7:87:ec: 64:b0:24:b2:f5:82:75:de:55:a1:8b:a2:6f:b1:bb:e8:e4:d5: d1:94:06:12:c3:02:28:6e:72:eb:0d:dc:a8:12:ec:79:8b:44: b9:37:e3:0d:4b:05:9c:15:34:98:ed:06:2f:9b:98:e1:97:37: 53:2d:50:b0:c8:9b:f9:b2:52:43:89:3a:9b:9b:29:88:a5:4a: 08:fa:1d:2e:9e:fb:c4:a5:fb:c3:ad:be:cf:d3:a9:96:2b:c8: 34:63:52:ba:6b:e6:12:a9:8e:05:e9:00:70:d5:e1:ba:bf:0a: 5b:4b:dc:60:82:f2:c0:9c:ae:bc:85:e9:41:38:ef:d3:33:6a: 15:8c:c7:f3:5e:91:b4:62:c2:f5:82:30:a7:86:5a:53:55:8e: 91:90:19:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwOTE5MDQwMzIyWhcNMjUwOTI2MDQwMzIyWjAYMRYwFAYD VQQDEw02OGNjZDYwYi1iMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4tFfGGiHVdQOdK7iJDGcmZtpWZpTDvPzbSoHaM99pDTlru3EOSTO68Xwa7o EAg9ST4JcjrexIClUl4rbaetJkCRaPo6NsND9Es05B0vSjwXhP/3qeKor0n+XdH+ mgmcONS9BBSbuBjc3PQRSUdNyC+L/xtVD13iPGgoWTEuaaGZOa4x+LmPlTLRkRg5 EHgzbQf/E6KDiLMQ11BFZ6TosQjJOx/bJ9beMlY7PLq764jobQ4xcetweY24Cv+G IMszU3FCZA4FOLzn5V8fTdm4EQNi1esAs1zWQmmqQQWG0XrzdWgJNnkvNiQovkwh ExAnvB4wNbkhJaEvMz+BNiz/FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzjEyAj tAPLAz2u/pRcnb1H0reAMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcL79BtAAaBl0SC1QzYkcImv6PAQQL8c9uFevTiFGwkv80OmKiuUww T4OdWCEVfurePuE+xKrXr7NDJ5G9r1nOtb/TOenJPS+fta5sI0l5ojQYdXZTUEaY YV2KIgCJTBPP7wm65kHYXSbHh+xksCSy9YJ13lWhi6Jvsbvo5NXRlAYSwwIobnLr DdyoEux5i0S5N+MNSwWcFTSY7QYvm5jhlzdTLVCwyJv5slJDiTqbmymIpUoI+h0u nvvEpfvDrb7P06mWK8g0Y1K6a+YSqY4F6QBw1eG6vwpbS9xggvLAnK68helBOO/T M2oVjMfzXpG0YsL1gjCnhlpTVY6RkBkV -----END CERTIFICATE-----Generated at Fri Sep 19 15:11:44 2025 by rpki-client