$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft File: sv9l-pYZFKRbib5RLTNlMInW_7I.mft (raw, json) Hash identifier: erO50Wr4zYO+RkMeesOOcFghJPgE/RTyoD4fPoE++1Q= Subject key identifier: 61:25:AA:88:8A:6E:C7:BB:05:25:9A:15:0B:E1:47:58:91:1D:35:07 Authority key identifier: B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2 Certificate issuer: /CN=A918FCB4/serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft Manifest number: 0882 Signing time: Wed 20 Aug 2025 20:53:01 +0000 Manifest this update: Wed 20 Aug 2025 20:53:00 +0000 Manifest next update: Wed 27 Aug 2025 20:53:00 +0000 Files and hashes: 1: sv9l-pYZFKRbib5RLTNlMInW_7I.crl (hash: 9qzOm2CYR+ZQtavrAKFaVeKhCSc9JdJqi+AygL/AzMU=) 2: F5BCC96EF7EA11EF917C0251C4F9AE02.roa (hash: +AyhAJzE/gLMKmNRb1SVHFe/1nuNSQ2YfQc67BMH3Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4, serialNumber=B2FF65FA961914A45B89BE512D33653089D6FFB2 Validity Not Before: Aug 20 20:53:00 2025 GMT Not After : Aug 27 20:53:00 2025 GMT Subject: CN=68a635ad-4e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:08:44:e4:24:6c:78:ef:76:f8:15:3c:f6: bf:0b:7d:bd:31:41:4b:b9:88:9d:5a:2f:12:27:39: a3:b3:15:35:1f:aa:32:2c:17:35:ea:fe:2a:4d:df: 70:1e:72:ca:48:1f:b4:05:2e:28:f2:cc:7b:6d:65: 0b:29:f4:d6:fd:52:9f:e4:b0:9d:af:91:56:8a:84: 87:1d:f6:cb:a6:df:c2:d4:23:32:ee:36:dd:49:20: 78:b8:ad:56:36:e3:ce:4e:41:0c:0d:b2:33:2c:70: f8:35:87:c5:8f:5e:25:fd:94:3b:f1:9b:57:d1:0f: 52:b1:4f:8d:02:18:14:0a:5b:a8:e7:70:bc:7c:0c: ee:3c:e0:6b:9b:64:46:26:95:90:2c:7e:bc:d1:4e: 3b:11:9e:7c:f5:ba:a2:a7:31:5a:c8:01:b3:11:e8: a3:55:5d:d1:26:17:6f:8f:45:92:2c:88:b3:3f:55: 32:37:56:8d:85:9d:1a:f9:fe:8b:c3:c8:f2:54:92: 03:03:65:46:1a:be:fb:96:94:f1:8f:f2:e3:e8:63: 10:49:91:09:9c:51:c8:9d:59:cb:90:b9:d3:23:68: 21:56:33:e9:4d:ff:90:e6:62:80:be:ec:c9:15:7b: 65:d4:19:97:93:1d:06:44:b8:1f:d3:75:71:0c:3d: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:25:AA:88:8A:6E:C7:BB:05:25:9A:15:0B:E1:47:58:91:1D:35:07 X509v3 Authority Key Identifier: keyid:B2:FF:65:FA:96:19:14:A4:5B:89:BE:51:2D:33:65:30:89:D6:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sv9l-pYZFKRbib5RLTNlMInW_7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/sv9l-pYZFKRbib5RLTNlMInW_7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c9:21:c9:eb:4a:f2:07:95:d4:e2:ae:ed:76:5c:69:64:54: 26:3a:00:4f:25:03:ee:9d:7d:9b:45:07:29:ec:b4:ab:c4:cf: 4d:c7:99:45:29:bf:cd:37:d9:43:29:97:1c:31:10:54:fa:dc: d6:35:22:58:58:7a:73:95:b3:5e:ad:87:58:0d:05:f8:94:fc: 06:4f:db:ae:3e:af:ea:f9:8d:e1:5f:43:92:bc:48:63:8e:ed: 6e:a8:ed:08:2d:fc:59:f4:31:ec:41:05:78:f2:84:a3:44:0f: fe:7d:85:07:c2:a0:a4:ee:f1:11:fd:be:50:a1:42:84:f4:8d: fe:25:21:c0:a5:96:81:13:57:27:83:d5:a8:00:42:ab:88:a5: 95:9e:7c:9c:a2:b2:0c:83:d9:7d:cf:53:be:57:c6:20:34:33: 9b:4e:41:90:68:bd:f3:39:3e:47:f2:f1:16:53:d3:de:c9:bf: 7f:a5:a9:0c:0c:be:38:0a:b4:89:04:a0:c7:ab:ae:19:44:8c: 0c:e0:75:f3:c1:b7:5e:15:69:7e:93:9a:74:e3:f0:96:e5:3a: 5f:01:28:5b:ca:11:fe:e7:9b:7b:0c:b1:98:47:62:1d:7b:18: 5a:87:8f:d4:5c:29:0d:61:b1:ea:db:eb:10:d6:69:bb:94:a7: c7:35:eb:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkNCNDExMC8GA1UEBRMoQjJGRjY1RkE5NjE5MTRBNDVCODlCRTUxMkQzMzY1MzA4 OUQ2RkZCMjAeFw0yNTA4MjAyMDUzMDBaFw0yNTA4MjcyMDUzMDBaMBgxFjAUBgNV BAMTDTY4YTYzNWFkLTRlODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrGAhE5CRseO92+BU89r8Lfb0xQUu5iJ1aLxInOaOzFTUfqjIsFzXq/ipN33Ae cspIH7QFLijyzHttZQsp9Nb9Up/ksJ2vkVaKhIcd9sum38LUIzLuNt1JIHi4rVY2 485OQQwNsjMscPg1h8WPXiX9lDvxm1fRD1KxT40CGBQKW6jncLx8DO484GubZEYm lZAsfrzRTjsRnnz1uqKnMVrIAbMR6KNVXdEmF2+PRZIsiLM/VTI3Vo2FnRr5/ovD yPJUkgMDZUYavvuWlPGP8uPoYxBJkQmcUcidWcuQudMjaCFWM+lN/5DmYoC+7MkV e2XUGZeTHQZEuB/TdXEMPSiNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYSWqiIpu x7sFJZoVC+FHWJEdNQcwHwYDVR0jBBgwFoAUsv9l+pYZFKRbib5RLTNlMInW/7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQ0I0LzNBN0FEM0IyRTM4 NjExRUE5RkEyM0EzNkM0RjlBRTAyL3N2OWwtcFlaRktSYmliNVJMVE5sTUluV183 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3Y5bC1wWVpGS1JiaWI1UkxUTmxNSW5XXzdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG Q0I0LzNBN0FEM0IyRTM4NjExRUE5RkEyM0EzNkM0RjlBRTAyL3N2OWwtcFlaRktS YmliNVJMVE5sTUluV183SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAHJIcnrSvIHldTiru12XGlkVCY6AE8lA+6dfZtFBynstKvEz03HmUUp v8032UMplxwxEFT63NY1IlhYenOVs16th1gNBfiU/AZP264+r+r5jeFfQ5K8SGOO 7W6o7Qgt/Fn0MexBBXjyhKNED/59hQfCoKTu8RH9vlChQoT0jf4lIcClloETVyeD 1agAQquIpZWefJyisgyD2X3PU75XxiA0M5tOQZBovfM5Pkfy8RZT097Jv3+lqQwM vjgKtIkEoMerrhlEjAzgdfPBt14VaX6TmnTj8JblOl8BKFvKEf7nm3sMsZhHYh17 GFqHj9RcKQ1hserb6xDWabuUp8c169M= -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:25 2025 by rpki-client