$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: b1sNOhWQmriIGMc6hS0CGksYE/7w1NsErCMg+O18g60= Subject key identifier: 9A:54:36:C1:A8:B8:41:5B:17:28:81:34:3C:8D:49:D9:9F:69:9B:A9 Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 015E Signing time: Tue 01 Jul 2025 04:28:33 +0000 Manifest this update: Tue 01 Jul 2025 04:28:33 +0000 Manifest next update: Tue 08 Jul 2025 04:28:33 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: Frc4TgYHReMhBVKCgGwTXX559tgaX/95t0tGNFhDCHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: Jul 1 04:28:33 2025 GMT Not After : Jul 8 04:28:33 2025 GMT Subject: CN=686363f1-a34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0f:48:b4:c9:cc:63:58:0e:cb:b6:ff:7a:64: 21:a5:aa:0d:aa:b3:a0:74:1c:38:e0:81:a8:25:05: 55:af:aa:5e:bf:2d:1b:86:b3:5e:45:95:87:2f:68: 1f:fc:de:07:10:8c:80:c4:5c:88:85:65:d8:9c:5d: c4:c8:8a:17:d2:29:ed:54:ac:1e:bf:cd:47:59:b5: 83:72:b9:98:18:b8:55:28:42:a4:cf:b4:c0:eb:14: e6:ea:39:9a:8a:2f:bd:57:86:d4:3d:0b:2f:9a:57: de:89:cc:09:f8:64:e9:80:91:e4:d3:dc:6a:76:23: f4:1d:0e:de:e1:63:b4:b4:da:62:4b:f9:d1:58:6f: 63:8f:54:cd:7e:2b:0c:5b:aa:0b:a7:c3:f5:92:af: b5:84:6b:1e:25:bb:f9:22:83:db:10:e5:a3:74:47: 01:11:77:cd:42:52:39:12:54:6d:70:c4:c9:92:fe: 01:68:36:6b:ca:79:f0:20:21:59:28:89:e6:3a:9c: dc:53:77:71:ae:23:5f:8e:bd:62:d2:04:38:64:5a: 9d:1f:b1:57:02:0c:35:f6:89:aa:ac:ca:7e:77:ca: c0:46:8c:b2:d2:63:63:2c:96:40:f7:39:30:72:85: 0a:06:09:b5:e4:c5:29:68:d8:30:f5:90:f1:36:b6: af:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:36:C1:A8:B8:41:5B:17:28:81:34:3C:8D:49:D9:9F:69:9B:A9 X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:2f:b2:cd:34:cd:be:c5:38:ac:22:24:d1:c2:60:42:4a:ac: 4c:63:fe:93:92:33:cc:4b:cb:b1:ff:b8:bd:a4:5b:7b:a6:33: 0c:c1:04:49:1f:4e:73:c8:26:ef:f1:d0:98:50:ce:78:5d:bc: 28:90:e5:e8:b0:44:10:18:5c:e2:2f:cb:7d:03:2e:3f:d3:04: 48:46:82:77:d8:a8:eb:1e:b9:0d:bb:24:b9:99:48:98:a7:65: 47:17:50:57:b8:ef:b2:13:70:2f:cd:31:cc:34:5e:48:ac:bc: f8:7b:ac:b2:f7:2e:5e:10:51:2f:03:bd:67:38:22:f6:41:f5: fa:65:d0:5d:83:1a:2c:53:1a:23:9e:c9:a8:9d:bc:7e:f6:37: 37:35:a6:ed:d2:57:be:98:cc:68:37:22:1e:16:e8:25:7a:3a: 26:82:96:99:70:02:02:2e:ee:45:36:34:67:79:86:70:1c:5b: aa:63:c9:72:c7:37:ff:5a:ee:e2:6c:61:5c:33:26:71:8f:7b: ea:67:9a:25:d0:85:63:1b:25:2c:00:16:45:e3:46:5b:ef:4c: 3b:d1:04:fe:d6:3d:05:05:d8:15:cc:7b:52:c5:0b:3e:c7:61: 7b:84:17:0a:19:ac:22:46:1b:88:60:60:85:14:06:57:27:ba: 0c:98:a8:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwNzAxMDQyODMzWhcNMjUwNzA4MDQyODMzWjAYMRYwFAYD VQQDEw02ODYzNjNmMS1hMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1g9ItMnMY1gOy7b/emQhpaoNqrOgdBw44IGoJQVVr6pevy0bhrNeRZWHL2gf /N4HEIyAxFyIhWXYnF3EyIoX0intVKwev81HWbWDcrmYGLhVKEKkz7TA6xTm6jma ii+9V4bUPQsvmlfeicwJ+GTpgJHk09xqdiP0HQ7e4WO0tNpiS/nRWG9jj1TNfisM W6oLp8P1kq+1hGseJbv5IoPbEOWjdEcBEXfNQlI5ElRtcMTJkv4BaDZrynnwICFZ KInmOpzcU3dxriNfjr1i0gQ4ZFqdH7FXAgw19omqrMp+d8rARoyy0mNjLJZA9zkw coUKBgm15MUpaNgw9ZDxNravHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpUNsGo uEFbFyiBNDyNSdmfaZupMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDML7LNNM2+xTisIiTRwmBCSqxMY/6TkjPMS8ux/7i9pFt7pjMMwQRJ H05zyCbv8dCYUM54XbwokOXosEQQGFziL8t9Ay4/0wRIRoJ32KjrHrkNuyS5mUiY p2VHF1BXuO+yE3AvzTHMNF5IrLz4e6yy9y5eEFEvA71nOCL2QfX6ZdBdgxosUxoj nsmonbx+9jc3Nabt0le+mMxoNyIeFuglejomgpaZcAICLu5FNjRneYZwHFuqY8ly xzf/Wu7ibGFcMyZxj3vqZ5ol0IVjGyUsABZF40Zb70w70QT+1j0FBdgVzHtSxQs+ x2F7hBcKGawiRhuIYGCFFAZXJ7oMmKgR -----END CERTIFICATE-----Generated at Wed Jul 2 00:49:04 2025 by rpki-client