$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: p/yvGPm7fnhXW/ElnnCesmAfJe6p6YtvzCEIdHul/Yc= Subject key identifier: 51:06:20:11:04:CA:4C:24:BF:F3:7F:07:2A:91:40:18:0B:91:D9:19 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 20C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2B45 Signing time: Fri 30 May 2025 16:08:10 +0000 Manifest this update: Fri 30 May 2025 16:08:10 +0000 Manifest next update: Fri 06 Jun 2025 16:08:10 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: 2je2MIDTRCQQG7uzBSPcl//qDiJxwcfrlS28GpULmiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8392 (0x20c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: May 30 16:08:10 2025 GMT Not After : Jun 6 16:08:10 2025 GMT Subject: CN=6839d7ea-ff74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c7:08:f9:fc:a4:44:62:c7:b4:61:73:40:4e: de:f3:08:8b:70:c5:14:f1:77:1d:d6:20:07:4b:6d: 53:88:ee:42:5e:c3:29:4a:a1:a9:c7:03:d4:0f:66: df:be:6b:4d:b9:ff:d6:57:85:86:aa:ab:a8:d4:54: 19:d4:67:16:9e:ca:4d:e7:bc:ad:a5:06:54:1e:ed: 28:d0:80:93:a1:2d:33:ef:8a:59:7d:ff:f4:51:fd: 2b:98:29:8d:4b:58:71:55:b7:b2:0e:3e:a5:71:88: f2:e0:2f:bd:35:97:9d:99:cf:8f:7c:64:eb:80:ae: 72:32:1c:35:19:ba:10:0d:92:b0:61:a3:71:39:ae: d8:53:f2:12:06:84:d4:dd:c2:21:6b:d6:8c:06:c0: ae:4b:06:5e:c9:6c:8b:d8:03:df:10:34:14:c9:92: 16:16:94:be:f5:b2:07:86:4f:67:2e:f7:4e:41:60: 46:8f:59:28:32:12:c7:ce:98:a6:47:37:d0:a6:89: 32:c2:f4:d5:46:0c:04:0a:74:bd:e4:04:7d:91:86: d0:a3:1a:7d:9c:f1:86:a5:8d:5d:84:14:22:85:3b: 88:08:97:5b:42:3f:13:96:4b:2d:90:0c:d1:f7:53: bb:4e:8e:16:3b:a8:cc:28:be:47:f2:fa:41:1c:81: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:06:20:11:04:CA:4C:24:BF:F3:7F:07:2A:91:40:18:0B:91:D9:19 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:59:93:7a:fd:ca:fc:be:6d:c9:eb:b1:a9:8e:b6:d2:ef:cc: 16:2d:74:ee:2c:60:83:9a:30:cd:69:ad:ac:fd:d9:f4:93:18: ae:a7:b5:3e:07:32:96:2e:53:7f:f5:43:fe:c6:6d:cf:11:1e: 23:e2:04:c2:1d:a4:16:92:ea:e1:97:ef:ea:e4:72:d7:fc:c7: a6:c7:ae:9d:43:46:79:ff:db:c6:c8:68:0c:07:53:cd:d6:c4: 8f:81:52:0c:4e:df:05:0f:cb:e3:44:98:17:0a:59:9e:d2:a3: 64:b1:af:b7:c9:e8:85:20:91:7a:8d:dc:bf:4b:dd:73:37:64: c4:f3:ab:95:ed:5d:57:cb:68:8d:1f:be:b4:c6:a6:79:73:49: d7:0f:5c:b6:b7:c9:18:ef:1a:83:ba:40:8c:c6:31:33:0a:38: ae:73:f5:74:42:e3:5e:1d:53:94:60:98:49:d8:ff:77:36:76: 13:63:b4:2e:aa:18:31:ca:24:16:22:30:7d:cc:3e:17:e1:d8: f8:d9:f0:d5:65:e7:5d:37:c8:a1:39:79:ac:75:06:aa:db:66: 51:e8:d7:8f:4e:f2:d7:ad:4b:59:50:e2:65:f6:c2:16:d3:2f: 34:fc:d2:4e:92:4e:a0:d0:11:b9:00:87:3a:56:3d:48:e7:ae: d5:0f:80:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUwNTMwMTYwODEwWhcNMjUwNjA2MTYwODEwWjAYMRYwFAYD VQQDEw02ODM5ZDdlYS1mZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ccI+fykRGLHtGFzQE7e8wiLcMUU8Xcd1iAHS21TiO5CXsMpSqGpxwPUD2bf vmtNuf/WV4WGqquo1FQZ1GcWnspN57ytpQZUHu0o0ICToS0z74pZff/0Uf0rmCmN S1hxVbeyDj6lcYjy4C+9NZedmc+PfGTrgK5yMhw1GboQDZKwYaNxOa7YU/ISBoTU 3cIha9aMBsCuSwZeyWyL2APfEDQUyZIWFpS+9bIHhk9nLvdOQWBGj1koMhLHzpim RzfQpokywvTVRgwECnS95AR9kYbQoxp9nPGGpY1dhBQihTuICJdbQj8TlkstkAzR 91O7To4WO6jMKL5H8vpBHIFgGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEGIBEE ykwkv/N/ByqRQBgLkdkZMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaWZN6/cr8vm3J67GpjrbS78wWLXTuLGCDmjDNaa2s/dn0kxiup7U+ BzKWLlN/9UP+xm3PER4j4gTCHaQWkurhl+/q5HLX/Memx66dQ0Z5/9vGyGgMB1PN 1sSPgVIMTt8FD8vjRJgXClme0qNksa+3yeiFIJF6jdy/S91zN2TE86uV7V1Xy2iN H760xqZ5c0nXD1y2t8kY7xqDukCMxjEzCjiuc/V0QuNeHVOUYJhJ2P93NnYTY7Qu qhgxyiQWIjB9zD4X4dj42fDVZeddN8ihOXmsdQaq22ZR6NePTvLXrUtZUOJl9sIW 0y80/NJOkk6g0BG5AIc6Vj1I567VD4Ck -----END CERTIFICATE-----Generated at Sat May 31 16:27:52 2025 by rpki-client