$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: qdYPVTx1/2JG4Qzv8eNw0MnVo4RyTdWNo9711MYtgFc= Subject key identifier: E9:9E:24:5E:B0:D9:DD:2A:8B:5C:43:A2:48:AC:F3:AC:36:38:F2:CE Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 2110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2BD5 Signing time: Sat 18 Oct 2025 16:12:26 +0000 Manifest this update: Sat 18 Oct 2025 16:12:26 +0000 Manifest next update: Sat 25 Oct 2025 16:12:26 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: 079Nyoq6JHsRvMNVg/ATAbT2Yfug8jBRwlFlWSXuTyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8464 (0x2110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Oct 18 16:12:26 2025 GMT Not After : Oct 25 16:12:26 2025 GMT Subject: CN=68f3bc6a-c833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:c9:d8:f7:83:07:37:89:48:f7:8a:c0:2c: a7:26:c9:e4:2c:9d:eb:6d:f4:d9:44:e0:be:33:32: 2d:6d:51:8a:cd:28:73:e6:08:2c:dd:a8:6f:bf:18: e8:44:aa:be:25:20:9e:3f:f8:aa:c1:b4:4b:2a:64: c3:a2:34:c0:ae:4a:b4:c0:f7:5a:c0:be:ea:03:39: a1:9c:b0:51:b7:09:a3:8f:7e:a2:5c:aa:e8:1e:7f: be:fb:04:65:0c:86:f1:54:b6:ba:02:49:79:a1:46: 0b:30:40:e5:fc:6c:f6:61:55:73:16:e9:18:33:76: c4:ff:7c:5a:bb:37:14:5d:08:e6:e9:0b:4b:94:9f: 30:8f:01:1f:b2:90:f7:b1:a2:a0:71:5d:ec:dd:15: a4:73:65:95:bc:98:dc:e4:a4:99:0d:dc:f9:38:78: 66:cc:16:bf:e6:b0:cd:f8:83:9b:3b:f7:86:77:d6: 54:e5:7b:58:50:c8:58:ab:05:03:f3:19:c9:e3:1f: fe:ec:b1:6a:b5:7c:00:57:e4:ee:63:bb:4b:ea:8d: 26:f8:8c:52:00:88:74:73:c7:c5:90:3e:1e:da:f7: 62:70:f0:53:f3:ce:3f:11:e6:3a:aa:24:58:3b:0d: 34:b7:30:01:47:fd:2b:5d:41:2d:68:bc:0a:e2:b3: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9E:24:5E:B0:D9:DD:2A:8B:5C:43:A2:48:AC:F3:AC:36:38:F2:CE X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:58:88:3d:8f:92:a7:08:40:65:4a:59:3c:14:8c:10:7b:b2: 90:f7:4e:54:a8:0a:1e:10:4c:96:4b:a7:98:38:86:bf:26:f6: f7:12:05:0e:6a:53:47:3d:a6:08:92:24:6a:13:f0:32:da:e9: 01:84:d8:e8:7a:56:77:5c:17:d8:01:ee:5e:03:9b:37:7e:0b: 95:5c:7a:bd:07:82:07:9a:94:b1:97:e1:03:da:55:1b:bd:ea: e1:f1:28:01:41:c2:5c:3b:7b:fa:be:d7:f5:2a:fd:22:4c:60: 18:ba:66:2c:68:8a:2b:82:49:6b:78:6a:b7:d0:4a:ac:46:ca: 3c:67:17:30:f9:78:5f:e4:32:e9:fc:35:bd:f7:34:95:10:ca: bf:70:ed:30:d7:72:d7:f5:07:d2:48:d5:09:69:84:e0:98:e3: e5:ad:54:32:a5:96:15:66:4a:77:fd:93:f8:81:1c:1e:38:5e: ab:48:0d:15:18:49:55:cc:a6:2d:28:ce:11:43:5b:37:14:ab: 61:55:68:6e:9d:04:c3:dd:da:f6:c1:c0:30:ae:4f:64:74:f3: 79:3f:63:5f:a6:cf:ee:57:5a:7d:db:86:b4:06:1c:5b:39:e4: f3:ad:a4:0a:68:e4:51:fe:ad:e7:b2:a4:c8:a2:c4:a5:a1:75: e6:90:f0:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUxMDE4MTYxMjI2WhcNMjUxMDI1MTYxMjI2WjAYMRYwFAYD VQQDEw02OGYzYmM2YS1jODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4bJ2PeDBzeJSPeKwCynJsnkLJ3rbfTZROC+MzItbVGKzShz5ggs3ahvvxjo RKq+JSCeP/iqwbRLKmTDojTArkq0wPdawL7qAzmhnLBRtwmjj36iXKroHn+++wRl DIbxVLa6Akl5oUYLMEDl/Gz2YVVzFukYM3bE/3xauzcUXQjm6QtLlJ8wjwEfspD3 saKgcV3s3RWkc2WVvJjc5KSZDdz5OHhmzBa/5rDN+IObO/eGd9ZU5XtYUMhYqwUD 8xnJ4x/+7LFqtXwAV+TuY7tL6o0m+IxSAIh0c8fFkD4e2vdicPBT884/EeY6qiRY Ow00tzABR/0rXUEtaLwK4rOA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmeJF6w 2d0qi1xDokis86w2OPLOMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKWIg9j5KnCEBlSlk8FIwQe7KQ905UqAoeEEyWS6eYOIa/Jvb3EgUO alNHPaYIkiRqE/Ay2ukBhNjoelZ3XBfYAe5eA5s3fguVXHq9B4IHmpSxl+ED2lUb verh8SgBQcJcO3v6vtf1Kv0iTGAYumYsaIorgklreGq30EqsRso8Zxcw+Xhf5DLp /DW99zSVEMq/cO0w13LX9QfSSNUJaYTgmOPlrVQypZYVZkp3/ZP4gRweOF6rSA0V GElVzKYtKM4RQ1s3FKthVWhunQTD3dr2wcAwrk9kdPN5P2Nfps/uV1p924a0Bhxb OeTzraQKaORR/q3nsqTIosSloXXmkPAc -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:06 2025 by rpki-client