$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: YnSWuAlasRR6MPrMMlY1aUailJdXN4YbKAp45EtKsbk= Subject key identifier: A0:0B:7C:58:8F:D3:3E:63:CB:AD:17:45:54:F7:07:E4:5B:6F:3A:41 Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 0179 Signing time: Sat 23 Aug 2025 03:50:12 +0000 Manifest this update: Sat 23 Aug 2025 03:50:11 +0000 Manifest next update: Sat 30 Aug 2025 03:50:11 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: HKV3C0EV9gL9iHdzpZ2yuQP0Gw+3sIXEBCO91BG0JT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: Aug 23 03:50:11 2025 GMT Not After : Aug 30 03:50:11 2025 GMT Subject: CN=68a93a73-eef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:13:83:cd:4e:19:80:82:a0:bf:9b:b6:78: 8d:90:0e:e9:14:53:3f:1e:6b:0e:26:ad:99:7a:a9: 6d:c0:a9:0f:90:2b:5f:90:e0:34:84:c2:8f:6b:ab: 76:89:e9:5a:bf:a6:ea:75:e3:55:32:c6:ea:d9:c9: 6a:59:48:62:ab:38:43:1b:ad:e7:a4:a8:59:82:bf: f8:6b:fe:27:fc:46:eb:b1:fb:3d:dc:b8:7c:20:f3: 4a:f3:84:c9:29:54:cd:13:63:f8:0a:91:2e:20:1a: e7:67:4a:36:d5:54:05:d0:5d:00:0d:66:ed:2e:51: ac:ba:67:b6:66:de:5d:5a:22:36:82:de:aa:d4:67: 79:af:b4:23:7d:7c:4b:16:55:3f:35:38:2b:23:90: 1f:93:23:d4:df:56:d3:e7:4b:ab:d1:d2:2f:7f:b7: 77:a4:c2:09:b7:a0:00:cc:23:48:ba:05:55:22:92: 22:6c:e8:eb:2c:ef:b8:86:93:03:55:cc:a2:9a:d9: 81:7c:cc:2a:56:ef:dc:12:26:9d:b5:12:b0:f8:34: 69:28:26:1b:78:c3:c1:e1:4d:a7:55:93:64:d5:c5: b8:9c:5c:65:87:dd:04:f4:23:da:5e:db:35:6f:24: 2b:bb:07:9a:17:2a:57:45:f2:6c:6f:14:1c:c4:ce: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0B:7C:58:8F:D3:3E:63:CB:AD:17:45:54:F7:07:E4:5B:6F:3A:41 X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9b:19:22:16:c2:38:bd:ed:40:7d:5c:95:a7:0e:ab:c5:76: 02:68:7b:5a:e8:4c:e8:0b:22:d6:2a:b9:3f:9f:82:bb:63:fa: 03:df:c2:55:82:e4:23:69:87:dc:92:a6:3a:d3:b9:5e:de:08: 2b:10:72:84:c7:97:28:dd:5e:e9:da:55:71:27:d8:b6:66:68: 83:79:ef:1f:14:32:92:65:0a:df:1c:50:6d:20:3c:93:b1:93: 02:15:9f:6f:42:66:97:4e:9a:fd:d7:11:cb:02:dc:cb:16:be: 37:1c:2a:c8:9d:e5:3c:76:41:31:41:cb:9a:8f:d5:33:2f:c3: 9d:7c:3a:9a:5d:ac:3c:ff:1a:66:da:1a:6b:46:56:ba:90:fd: 06:0c:43:02:05:fd:09:eb:72:86:80:53:de:a3:84:5e:09:18: 64:1d:ac:94:7c:67:bc:38:39:4d:19:ff:95:0f:f0:44:d9:67: 0c:c5:8d:3d:18:e9:50:bf:6e:e1:b4:dd:c4:14:43:57:7e:9d: 5c:8f:6a:97:f8:40:3b:03:9f:cd:ad:76:b7:cc:09:8c:89:d1: f1:46:87:b3:95:03:85:c1:02:57:d2:88:b7:1a:3d:de:65:26: 9f:4c:ae:10:de:1d:88:b1:e7:b1:bd:46:44:00:19:3e:28:e1: 6b:b0:6b:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwODIzMDM1MDExWhcNMjUwODMwMDM1MDExWjAYMRYwFAYD VQQDEw02OGE5M2E3My1lZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhUTg81OGYCCoL+btniNkA7pFFM/HmsOJq2ZeqltwKkPkCtfkOA0hMKPa6t2 ielav6bqdeNVMsbq2clqWUhiqzhDG63npKhZgr/4a/4n/Ebrsfs93Lh8IPNK84TJ KVTNE2P4CpEuIBrnZ0o21VQF0F0ADWbtLlGsume2Zt5dWiI2gt6q1Gd5r7QjfXxL FlU/NTgrI5AfkyPU31bT50ur0dIvf7d3pMIJt6AAzCNIugVVIpIibOjrLO+4hpMD VcyimtmBfMwqVu/cEiadtRKw+DRpKCYbeMPB4U2nVZNk1cW4nFxlh90E9CPaXts1 byQruweaFypXRfJsbxQcxM7U7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKALfFiP 0z5jy60XRVT3B+RbbzpBMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApmxkiFsI4ve1AfVyVpw6rxXYCaHta6EzoCyLWKrk/n4K7Y/oD38JV guQjaYfckqY607le3ggrEHKEx5co3V7p2lVxJ9i2ZmiDee8fFDKSZQrfHFBtIDyT sZMCFZ9vQmaXTpr91xHLAtzLFr43HCrIneU8dkExQcuaj9UzL8OdfDqaXaw8/xpm 2hprRla6kP0GDEMCBf0J63KGgFPeo4ReCRhkHayUfGe8ODlNGf+VD/BE2WcMxY09 GOlQv27htN3EFENXfp1cj2qX+EA7A5/NrXa3zAmMidHxRoezlQOFwQJX0oi3Gj3e ZSafTK4Q3h2IseexvUZEABk+KOFrsGvj -----END CERTIFICATE-----Generated at Sat Aug 23 21:07:31 2025 by rpki-client