$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: GIoDKdZ/ENS7A7M0q/JKXmo8qumoVHdS/mG1hyGxY8I= Subject key identifier: 73:D5:65:34:90:97:B2:AA:29:C6:F7:B3:4F:B1:7C:83:65:DE:2E:51 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 20BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2B2B Signing time: Sun 04 May 2025 15:53:13 +0000 Manifest this update: Sun 04 May 2025 15:53:13 +0000 Manifest next update: Sun 11 May 2025 15:53:13 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: Gs9rb8DGYK/UtmcIq+fcFJMtil8y/dBlp3PXPPcsSqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8379 (0x20bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: May 4 15:53:13 2025 GMT Not After : May 11 15:53:13 2025 GMT Subject: CN=68178d69-b71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:d8:c0:82:28:b4:80:fc:c9:f2:8d:fe:67: 9e:98:5a:be:93:ef:ac:e6:f0:9f:6d:06:21:93:0f: 84:6c:a9:c2:ab:0c:72:58:25:24:43:cc:08:61:f8: 4e:46:5d:b0:b1:a0:5e:d0:0e:01:65:2e:25:fd:92: 39:ea:39:b6:18:82:93:ef:87:ca:d6:d9:6c:f3:c6: 27:45:e2:4a:e4:d3:4a:ca:cb:38:8a:08:86:05:8e: b5:d1:53:5e:5d:7f:f0:c8:b1:98:f8:c9:9b:8b:0e: fe:7f:46:59:31:04:a3:ab:2c:dc:a3:25:13:d8:1a: 1b:96:11:04:05:d2:72:3f:00:20:16:c7:20:1a:a6: 66:69:eb:1f:73:79:e1:1d:33:68:31:3a:04:b5:c3: e1:45:c7:6e:cc:20:0f:ce:54:4f:d5:77:90:29:df: 38:36:cd:52:c3:56:e6:cd:3e:ef:10:58:2b:fe:e7: fa:85:a6:4f:07:a0:e0:78:68:a1:2d:a5:db:34:fa: 86:9e:f9:98:a7:59:37:b4:d0:2c:9e:82:dd:5c:c1: b3:76:6f:88:dc:f0:b6:f5:16:93:ca:73:e3:3c:57: 93:1f:78:db:72:a2:e3:64:d3:fc:ac:d5:ee:43:5a: e1:53:ad:95:e2:15:86:7b:50:60:0f:1c:30:35:c4: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D5:65:34:90:97:B2:AA:29:C6:F7:B3:4F:B1:7C:83:65:DE:2E:51 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ee:bf:eb:b7:47:ed:5d:a5:b9:eb:fc:05:80:f1:f6:15:78: 5a:c1:94:01:b2:1c:b8:54:2c:4f:da:49:b4:0c:41:c0:5c:b4: 17:6b:3d:0f:fe:9f:4f:ca:40:d4:bd:3d:7b:93:49:95:3c:b8: 73:bd:4f:34:81:5f:58:e3:d6:f1:c6:66:ba:91:02:52:d1:60: ab:f0:00:b9:f6:56:f2:ba:7c:de:92:bc:f1:16:97:6b:31:12: 23:7b:9c:ba:e5:53:74:f0:cb:8a:2b:7d:06:ac:76:58:ed:16: b9:33:14:e2:16:37:b0:96:f4:97:3b:98:9e:e5:84:e7:10:26: f1:f7:99:68:f9:51:65:27:ee:de:f0:3b:d6:64:c8:dd:3c:e7: a4:4a:48:28:cf:74:9a:6c:7d:db:45:cf:a2:26:f5:0e:1c:08: a3:27:2b:61:40:83:43:fd:48:3b:8e:de:61:50:5e:6a:e8:ce: b8:ef:93:2d:6b:8a:73:08:de:68:f1:ab:f1:f8:df:c8:31:5a: e5:71:de:31:75:4f:b7:84:5a:64:86:bd:a5:c7:9c:b6:c6:44: 7a:8e:61:16:34:b0:1b:b0:58:5b:3e:84:20:ce:e5:77:c7:1d: 5e:9d:cf:8d:2a:ac:fa:56:23:3a:16:3b:75:8f:c0:b9:29:d5: 58:35:e9:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICILswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUwNTA0MTU1MzEzWhcNMjUwNTExMTU1MzEzWjAYMRYwFAYD VQQDEw02ODE3OGQ2OS1iNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PnYwIIotID8yfKN/meemFq+k++s5vCfbQYhkw+EbKnCqwxyWCUkQ8wIYfhO Rl2wsaBe0A4BZS4l/ZI56jm2GIKT74fK1tls88YnReJK5NNKyss4igiGBY610VNe XX/wyLGY+Mmbiw7+f0ZZMQSjqyzcoyUT2BoblhEEBdJyPwAgFscgGqZmaesfc3nh HTNoMToEtcPhRcduzCAPzlRP1XeQKd84Ns1Sw1bmzT7vEFgr/uf6haZPB6DgeGih LaXbNPqGnvmYp1k3tNAsnoLdXMGzdm+I3PC29RaTynPjPFeTH3jbcqLjZNP8rNXu Q1rhU62V4hWGe1BgDxwwNcRc7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPVZTSQ l7KqKcb3s0+xfINl3i5RMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF7r/rt0ftXaW56/wFgPH2FXhawZQBshy4VCxP2km0DEHAXLQXaz0P /p9PykDUvT17k0mVPLhzvU80gV9Y49bxxma6kQJS0WCr8AC59lbyunzekrzxFpdr MRIje5y65VN08MuKK30GrHZY7Ra5MxTiFjewlvSXO5ie5YTnECbx95lo+VFlJ+7e 8DvWZMjdPOekSkgoz3SabH3bRc+iJvUOHAijJythQIND/Ug7jt5hUF5q6M6475Mt a4pzCN5o8avx+N/IMVrlcd4xdU+3hFpkhr2lx5y2xkR6jmEWNLAbsFhbPoQgzuV3 xx1enc+NKqz6ViM6Fjt1j8C5KdVYNenw -----END CERTIFICATE-----Generated at Mon May 5 09:26:26 2025 by rpki-client