$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: ffCzC+b6xx2mjvT3i3qT0DAyAr0XEmy5V+JUMBsVy6M= Subject key identifier: 9B:60:BD:FD:DE:F0:DF:B9:CE:0F:5C:E6:27:73:05:21:BA:BE:6B:91 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 20F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2B9B Signing time: Fri 22 Aug 2025 15:59:45 +0000 Manifest this update: Fri 22 Aug 2025 15:59:45 +0000 Manifest next update: Fri 29 Aug 2025 15:59:45 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: TtMBkEKnv0Zg2Byv/lMv/Aa6ZLcNOBpsQY/GIz2Mxew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8435 (0x20f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Aug 22 15:59:45 2025 GMT Not After : Aug 29 15:59:45 2025 GMT Subject: CN=68a893f1-69ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:21:17:d7:15:06:ca:e6:4c:0a:64:48:9e: 38:ef:df:b0:89:3f:9d:f4:f1:76:e5:7d:c0:91:62: bc:d1:6a:2c:ad:1d:90:d7:76:6e:b4:e9:2a:7f:e8: 47:c0:38:e9:51:82:d8:3d:71:a1:44:70:54:db:dc: 9a:64:01:0f:1c:80:b6:de:f8:42:84:c3:a6:9b:c4: fe:df:cb:f4:0c:03:b0:ff:ea:32:e7:06:90:36:4f: e3:db:68:50:56:e1:62:10:e3:34:35:53:3e:e7:95: db:0b:05:05:5e:58:66:6b:39:b2:f9:32:49:ea:b7: 73:88:eb:0f:3b:98:5b:bb:a4:41:83:a1:45:6f:2e: d2:6d:af:22:c3:6e:f9:0d:6d:47:24:d3:9d:0e:6b: 3e:63:f9:7e:17:82:58:ff:ff:85:6d:b7:16:13:36: d6:7f:03:e2:f2:6e:bc:b4:67:ba:ce:e3:82:9f:5c: 03:0a:06:21:0b:d6:0b:e8:c5:e3:0f:98:76:15:cf: 9d:88:3f:3c:89:7d:68:b3:97:be:f2:01:64:04:6f: 1b:1e:1a:59:0f:02:e8:7a:71:21:c8:34:21:ab:95: 10:6b:55:b3:cd:ab:8a:71:f0:fe:8a:d0:de:a9:be: 3e:9e:ac:96:b2:44:37:40:a8:e0:da:c3:05:df:c7: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:60:BD:FD:DE:F0:DF:B9:CE:0F:5C:E6:27:73:05:21:BA:BE:6B:91 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:da:1a:46:59:a8:b2:25:f4:26:6a:79:37:06:1b:64:00:d2: fc:a4:83:2e:3b:43:8a:d2:68:ab:4e:73:42:7f:ef:89:b0:ce: bd:a4:b2:33:c6:f7:96:29:23:b9:24:81:e6:7c:16:d9:2a:12: 3c:de:7d:b8:0f:2b:ad:f4:7f:e9:2a:c5:f3:5d:78:9b:31:59: 1c:b1:55:e5:2f:f9:86:f1:fd:81:72:40:be:58:5e:56:cf:32: c9:53:1d:09:c1:80:48:6f:de:46:19:db:7d:72:37:5a:12:43: 6f:86:0b:0f:91:3a:93:51:4c:b2:94:75:a4:23:50:90:da:6e: 42:50:8a:47:f3:39:06:f9:0c:5b:f3:f1:7b:5e:c6:d4:b8:d4: 6a:11:b8:29:7c:ca:c3:fd:8f:1b:fc:b0:aa:2f:95:20:e7:bd: 23:56:5c:91:65:52:05:5b:c9:60:ed:9b:18:0d:d7:fa:15:58: 4a:79:a1:bc:b7:fe:a1:2b:a7:ca:38:45:17:6a:1c:18:f1:52: a3:ff:71:ef:a1:fa:85:01:13:3c:12:fb:44:00:d6:7e:14:ce: dd:e4:6e:8e:de:7d:3f:95:01:2c:cb:57:06:d9:ee:16:bb:a9: 71:39:fc:26:51:b7:3d:7a:da:1c:cd:87:b8:25:c0:9f:9f:5a: d1:4a:6b:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUwODIyMTU1OTQ1WhcNMjUwODI5MTU1OTQ1WjAYMRYwFAYD VQQDEw02OGE4OTNmMS02OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNchF9cVBsrmTApkSJ4479+wiT+d9PF25X3AkWK80WosrR2Q13ZutOkqf+hH wDjpUYLYPXGhRHBU29yaZAEPHIC23vhChMOmm8T+38v0DAOw/+oy5waQNk/j22hQ VuFiEOM0NVM+55XbCwUFXlhmazmy+TJJ6rdziOsPO5hbu6RBg6FFby7Sba8iw275 DW1HJNOdDms+Y/l+F4JY//+FbbcWEzbWfwPi8m68tGe6zuOCn1wDCgYhC9YL6MXj D5h2Fc+diD88iX1os5e+8gFkBG8bHhpZDwLoenEhyDQhq5UQa1WzzauKcfD+itDe qb4+nqyWskQ3QKjg2sMF38fU9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtgvf3e 8N+5zg9c5idzBSG6vmuRMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu2hpGWaiyJfQmank3BhtkANL8pIMuO0OK0mirTnNCf++JsM69pLIz xveWKSO5JIHmfBbZKhI83n24Dyut9H/pKsXzXXibMVkcsVXlL/mG8f2BckC+WF5W zzLJUx0JwYBIb95GGdt9cjdaEkNvhgsPkTqTUUyylHWkI1CQ2m5CUIpH8zkG+Qxb 8/F7XsbUuNRqEbgpfMrD/Y8b/LCqL5Ug570jVlyRZVIFW8lg7ZsYDdf6FVhKeaG8 t/6hK6fKOEUXahwY8VKj/3HvofqFARM8EvtEANZ+FM7d5G6O3n0/lQEsy1cG2e4W u6lxOfwmUbc9etoczYe4JcCfn1rRSmsz -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:39 2025 by rpki-client