$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: CR0bnKFC1Pv3Byp9FpNTHj8TPm+5Fzf6Cm1949VOeNQ= Subject key identifier: 7C:94:C5:08:B1:14:67:0A:93:24:CF:E7:2B:45:27:9A:EA:88:89:F2 Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 0145 Signing time: Sun 11 May 2025 03:10:40 +0000 Manifest this update: Sun 11 May 2025 03:10:40 +0000 Manifest next update: Sun 18 May 2025 03:10:40 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: /Li+4oTKyRJtUvvj286mpRRFjYXLdIwVHmNHSSEsBic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: May 11 03:10:40 2025 GMT Not After : May 18 03:10:40 2025 GMT Subject: CN=68201530-8bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a9:1a:78:a9:33:3f:5e:91:5f:8e:be:17:63: a3:71:1a:74:76:36:fd:a2:c4:9b:d7:e4:15:54:68: 20:b1:da:29:c0:69:bd:d4:fb:da:63:71:a8:27:94: 35:61:76:f0:8b:43:e4:1a:00:b0:c3:9b:61:56:e4: 71:a7:c9:6e:46:f4:4a:76:64:91:0a:1a:5c:3b:2f: bc:29:ef:1a:61:5d:60:b9:27:e5:02:28:13:2d:88: 24:7f:51:85:7c:41:2f:dc:a8:4d:aa:cd:93:40:a0: 87:22:1c:a3:69:15:12:e6:d4:a1:5d:aa:8a:e7:59: 27:a9:53:20:f1:63:6d:22:3b:64:d0:14:1c:fa:4e: c7:2e:c3:84:0f:a6:e5:7a:b9:0e:65:49:fd:56:19: b9:b8:e6:a5:5b:32:5b:14:8b:73:eb:0b:1f:a4:2b: 92:c1:80:2a:09:fa:6d:d2:5c:64:c4:57:42:78:81: 99:e6:ab:79:33:f1:46:80:b5:7d:5b:c7:9d:af:e4: 24:3d:e8:4e:a0:bc:15:ab:f3:b3:fa:b9:6b:94:7c: a4:b0:b6:5a:56:53:b6:75:2a:39:3d:b5:ea:d6:aa: c5:12:9f:2c:67:c2:80:e3:71:28:d5:99:e1:f3:30: a9:5e:d9:ae:c3:09:4b:a4:3a:25:2c:c5:7f:5b:85: f3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:94:C5:08:B1:14:67:0A:93:24:CF:E7:2B:45:27:9A:EA:88:89:F2 X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e3:9b:9a:70:4d:4f:d2:1f:86:f0:0d:56:4b:4b:b3:62:57: b4:3a:9c:ea:57:60:e3:fc:42:f0:e1:0b:f7:63:84:1f:5d:2b: 60:a9:fd:01:5c:a2:90:d3:da:6b:c6:69:04:04:a7:51:82:b7: 3d:73:44:ad:a1:8b:1a:b1:32:f4:c3:d4:13:52:97:0f:7d:1c: a9:21:09:f6:a5:09:2b:31:d0:ec:b2:ac:be:f2:c8:99:ad:10: 47:25:6e:95:59:f1:1e:22:b9:4a:a7:e0:f8:1f:86:bd:3f:61: ba:b1:93:1f:ea:82:8c:5c:69:1a:14:c6:41:e5:24:f8:a7:d5: cc:c6:6d:63:78:33:34:63:cf:12:71:e0:db:b5:00:66:ca:5d: e6:46:14:e3:c5:ca:6f:8a:c8:38:7f:dd:d7:09:6f:01:9b:af: 1b:95:1a:5c:b5:fb:da:4f:61:e9:ae:ed:0c:f5:df:5b:2f:36: 63:60:36:55:f2:1b:88:20:79:da:5d:d2:77:8a:b7:5e:d6:dc: f0:f3:05:4f:c5:7f:05:f9:35:09:42:ca:fd:3e:60:53:48:f1: f4:37:56:82:cd:4f:ef:66:ac:73:e5:62:f7:2f:04:d8:9e:4d: df:b9:d7:70:c4:ef:aa:96:9a:b7:2a:1c:51:e5:b3:ff:f4:ed: 30:30:d2:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwNTExMDMxMDQwWhcNMjUwNTE4MDMxMDQwWjAYMRYwFAYD VQQDEw02ODIwMTUzMC04YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9akaeKkzP16RX46+F2OjcRp0djb9osSb1+QVVGggsdopwGm91PvaY3GoJ5Q1 YXbwi0PkGgCww5thVuRxp8luRvRKdmSRChpcOy+8Ke8aYV1guSflAigTLYgkf1GF fEEv3KhNqs2TQKCHIhyjaRUS5tShXaqK51knqVMg8WNtIjtk0BQc+k7HLsOED6bl erkOZUn9Vhm5uOalWzJbFItz6wsfpCuSwYAqCfpt0lxkxFdCeIGZ5qt5M/FGgLV9 W8edr+QkPehOoLwVq/Oz+rlrlHyksLZaVlO2dSo5PbXq1qrFEp8sZ8KA43Eo1Znh 8zCpXtmuwwlLpDolLMV/W4Xz9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyUxQix FGcKkyTP5ytFJ5rqiInyMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh45uacE1P0h+G8A1WS0uzYle0OpzqV2Dj/ELw4Qv3Y4QfXStgqf0B XKKQ09prxmkEBKdRgrc9c0StoYsasTL0w9QTUpcPfRypIQn2pQkrMdDssqy+8siZ rRBHJW6VWfEeIrlKp+D4H4a9P2G6sZMf6oKMXGkaFMZB5ST4p9XMxm1jeDM0Y88S ceDbtQBmyl3mRhTjxcpvisg4f93XCW8Bm68blRpctfvaT2Hpru0M9d9bLzZjYDZV 8huIIHnaXdJ3irde1tzw8wVPxX8F+TUJQsr9PmBTSPH0N1aCzU/vZqxz5WL3LwTY nk3fuddwxO+qlpq3KhxR5bP/9O0wMNIC -----END CERTIFICATE-----Generated at Sun May 11 14:58:36 2025 by rpki-client