$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: lphhVV5QPwvN5Ooz38WDR0jMxrwOzWhI268pm3HPGyE= Subject key identifier: 9B:F3:04:C3:9C:A5:07:A4:F6:1E:A3:78:AB:16:DA:99:FD:3F:A3:AD Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 013D Signing time: Fri 25 Apr 2025 03:29:19 +0000 Manifest this update: Fri 25 Apr 2025 03:29:18 +0000 Manifest next update: Fri 02 May 2025 03:29:18 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: wbW7PkE7PrwV5Ru4FYnk+aZRZGbIq0lEHxflLj8qo7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: Apr 25 03:29:18 2025 GMT Not After : May 2 03:29:18 2025 GMT Subject: CN=680b018f-1c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b5:04:bc:57:56:b3:51:65:7b:91:fe:86:6e: 0e:86:d6:c9:fb:24:af:02:68:43:28:12:a6:49:98: a4:69:73:9a:0f:06:7b:c1:23:6d:f5:59:61:b9:28: 35:54:1f:86:36:f3:c0:64:d0:f4:cf:bf:53:de:09: fb:10:88:a3:7a:83:6b:09:bb:1e:f1:6b:72:51:1d: 75:48:0a:09:38:10:b2:5c:cf:57:53:da:96:4b:4a: fa:57:f0:df:82:53:aa:ba:7e:8f:e8:5d:16:c2:04: 12:24:c6:be:1f:41:95:c7:f2:d0:28:0d:21:9d:8b: 31:75:1a:42:84:4d:8e:40:29:24:11:da:21:71:81: 48:29:a7:a2:c1:e5:77:52:79:66:a6:92:8e:74:35: cf:ce:bf:8c:fd:b2:e8:7b:ae:e2:6c:d5:82:6b:22: 4b:9d:9f:c8:48:c8:e4:9e:b0:ab:9f:c4:fd:11:13: 3d:08:50:be:d6:9b:86:60:28:78:26:29:e3:6b:6a: 9c:4a:01:b2:16:34:00:82:7a:19:3d:20:a1:c7:62: 03:10:24:43:5c:ca:d1:a7:b5:ad:32:01:33:10:5b: a4:de:10:20:9a:3b:d0:a0:59:2e:66:e4:0f:d8:2c: da:1f:20:3c:df:2f:e8:a2:b8:c7:95:29:3b:39:12: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F3:04:C3:9C:A5:07:A4:F6:1E:A3:78:AB:16:DA:99:FD:3F:A3:AD X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8d:49:6e:d5:f8:7f:a5:84:48:d6:02:e6:df:9c:e0:4e:ce: 77:f0:7c:00:95:9b:14:9c:13:dc:71:31:e3:28:00:ad:2d:f0: 5c:6e:35:69:0e:4f:ce:9c:cd:e8:4e:5c:1d:bf:01:ca:97:fb: 47:19:ef:ad:ba:64:15:6f:64:d9:62:50:b9:86:07:9a:db:ca: 98:11:5a:32:35:de:f0:35:a5:73:f8:d3:92:9f:cc:d4:99:93: ca:cf:b1:eb:df:19:17:a5:06:ab:7d:fd:9a:08:d1:f1:5a:79: c3:53:c3:12:7b:21:83:7c:0e:c4:50:a6:4a:ec:a9:d1:42:26: 16:d7:4b:aa:0e:1c:e5:16:67:d9:2d:43:5b:bd:3b:b6:4e:c4: 88:53:ac:9c:c5:df:9d:c8:c7:e7:d4:41:68:a8:ef:01:9b:f4: 78:64:41:63:78:90:dc:0e:9a:68:b1:7d:c2:83:fd:08:95:16: be:f0:bd:c3:90:15:de:4c:9d:d7:70:9e:84:26:55:f1:33:f3: 2a:33:1d:78:05:54:cf:76:25:97:ff:13:17:71:f5:ec:81:17: 41:59:ef:1b:2d:ce:f2:6f:5b:d2:5d:e6:25:68:c6:b7:51:34: 92:92:e3:fb:35:89:7e:18:e8:22:23:96:6a:97:27:cb:30:95: 2f:89:24:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwNDI1MDMyOTE4WhcNMjUwNTAyMDMyOTE4WjAYMRYwFAYD VQQDEw02ODBiMDE4Zi0xYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rUEvFdWs1Fle5H+hm4OhtbJ+ySvAmhDKBKmSZikaXOaDwZ7wSNt9VlhuSg1 VB+GNvPAZND0z79T3gn7EIijeoNrCbse8WtyUR11SAoJOBCyXM9XU9qWS0r6V/Df glOqun6P6F0WwgQSJMa+H0GVx/LQKA0hnYsxdRpChE2OQCkkEdohcYFIKaeiweV3 UnlmppKOdDXPzr+M/bLoe67ibNWCayJLnZ/ISMjknrCrn8T9ERM9CFC+1puGYCh4 Jinja2qcSgGyFjQAgnoZPSChx2IDECRDXMrRp7WtMgEzEFuk3hAgmjvQoFkuZuQP 2CzaHyA83y/oorjHlSk7ORIQ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvzBMOc pQek9h6jeKsW2pn9P6OtMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZjUlu1fh/pYRI1gLm35zgTs538HwAlZsUnBPccTHjKACtLfBcbjVp Dk/OnM3oTlwdvwHKl/tHGe+tumQVb2TZYlC5hgea28qYEVoyNd7wNaVz+NOSn8zU mZPKz7Hr3xkXpQarff2aCNHxWnnDU8MSeyGDfA7EUKZK7KnRQiYW10uqDhzlFmfZ LUNbvTu2TsSIU6ycxd+dyMfn1EFoqO8Bm/R4ZEFjeJDcDpposX3Cg/0IlRa+8L3D kBXeTJ3XcJ6EJlXxM/MqMx14BVTPdiWX/xMXcfXsgRdBWe8bLc7yb1vSXeYlaMa3 UTSSkuP7NYl+GOgiI5ZqlyfLMJUviSTW -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:02 2025 by rpki-client