$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: u2P2x25cj4zk/INabrA2rDPV8HMqacG3iPigU1GNBdo= Subject key identifier: 5B:EC:C8:23:A5:51:78:F9:32:53:04:73:5B:D1:BC:BD:5A:F0:E1:1A Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 0157 Signing time: Tue 17 Jun 2025 03:09:14 +0000 Manifest this update: Tue 17 Jun 2025 03:09:14 +0000 Manifest next update: Tue 24 Jun 2025 03:09:14 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: SSuk4XQt/0EmbElQRPWpoPE8ymLetdFe56k9vEDt9p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65, serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: Jun 17 03:09:14 2025 GMT Not After : Jun 24 03:09:14 2025 GMT Subject: CN=6850dc5a-2c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:45:0f:6a:e5:33:49:03:ed:6a:fa:6e:53: e3:22:d6:f7:64:de:8f:ab:29:80:58:f3:23:59:33: 37:28:90:87:c2:89:d7:b9:b1:e4:c1:db:4d:2c:59: 9e:85:12:83:9a:1a:03:06:85:18:5f:a5:43:2d:99: 5a:fa:ef:47:6c:77:7a:0a:3e:90:f1:69:e6:1b:93: 14:82:a0:f5:89:72:19:b9:52:2e:08:39:f9:a7:52: 7e:89:93:cf:a0:33:7d:56:bb:a3:29:e5:7e:58:5b: 0c:88:a0:e4:01:37:a4:58:d0:97:c7:f5:61:d3:76: f4:fc:b6:46:df:e5:7a:dd:88:b9:21:80:21:6b:79: d0:a5:d6:d1:6d:64:d1:64:ce:bf:bc:88:2e:a3:c6: 6f:4c:2b:6b:1f:f1:ed:14:a2:bc:38:06:ff:8a:5c: c2:b4:a7:99:ec:b3:fd:17:3c:88:9f:f9:fc:eb:5a: f6:9f:95:8c:49:b8:c3:8f:3e:de:a3:e0:6c:74:38: 1d:98:0a:5a:71:58:9e:1f:cd:f4:3d:b4:78:41:af: 9b:dc:10:60:85:d1:b9:97:7f:df:4f:60:0c:23:af: 5d:13:50:bf:90:eb:8c:f9:79:a3:38:70:95:b5:ce: dc:fa:4e:c4:ab:43:ca:8c:eb:98:a5:ce:e8:1b:ed: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EC:C8:23:A5:51:78:F9:32:53:04:73:5B:D1:BC:BD:5A:F0:E1:1A X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:eb:3d:46:84:5c:2b:7f:4b:25:16:34:c8:bb:00:0a:5c:a1: 3e:c4:ad:48:3d:0e:fc:16:9f:05:89:55:c6:ee:47:20:28:b1: 22:08:75:57:98:b6:90:b1:20:11:88:24:35:55:91:7e:5f:d7: 6e:74:58:99:04:6a:c6:51:7e:ce:75:3a:98:09:f5:82:2f:7d: 49:15:85:ff:90:c4:6c:0d:5b:68:60:c8:f3:f8:a5:f4:25:4a: 5d:44:be:5e:05:23:d0:47:ad:ac:b7:64:ce:a1:f3:92:7d:df: df:85:2b:0d:fe:f9:ea:2b:b6:df:86:21:07:d9:62:0f:b1:72: d8:78:02:27:a1:37:9e:8f:05:25:c5:b1:03:93:9f:33:1f:a6: b0:d0:10:2e:5c:26:de:62:ab:bb:ab:50:14:73:e4:41:ee:0e: 62:bd:e5:a2:e8:ab:b7:57:80:60:db:7b:90:bb:de:a3:f7:2d: 82:ee:ca:61:91:d2:47:07:18:d2:91:87:59:38:0d:55:b9:26: 93:bd:84:2b:31:96:69:c5:d1:15:fe:2d:d4:80:79:51:3e:1e: 4f:dc:d6:12:0c:b3:bb:53:51:01:82:28:fd:24:e6:28:eb:6c: 80:d9:6f:98:ab:5a:54:78:f9:5f:75:b7:aa:a0:95:3a:22:ba: fa:ec:73:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjUwNjE3MDMwOTE0WhcNMjUwNjI0MDMwOTE0WjAYMRYwFAYD VQQDEw02ODUwZGM1YS0yYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJBFD2rlM0kD7Wr6blPjItb3ZN6PqymAWPMjWTM3KJCHwonXubHkwdtNLFme hRKDmhoDBoUYX6VDLZla+u9HbHd6Cj6Q8WnmG5MUgqD1iXIZuVIuCDn5p1J+iZPP oDN9VrujKeV+WFsMiKDkATekWNCXx/Vh03b0/LZG3+V63Yi5IYAha3nQpdbRbWTR ZM6/vIguo8ZvTCtrH/HtFKK8OAb/ilzCtKeZ7LP9FzyIn/n861r2n5WMSbjDjz7e o+BsdDgdmApacVieH830PbR4Qa+b3BBghdG5l3/fT2AMI69dE1C/kOuM+XmjOHCV tc7c+k7Eq0PKjOuYpc7oG+2kwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvsyCOl UXj5MlMEc1vRvL1a8OEaMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA36z1GhFwrf0slFjTIuwAKXKE+xK1IPQ78Fp8FiVXG7kcgKLEiCHVX mLaQsSARiCQ1VZF+X9dudFiZBGrGUX7OdTqYCfWCL31JFYX/kMRsDVtoYMjz+KX0 JUpdRL5eBSPQR62st2TOofOSfd/fhSsN/vnqK7bfhiEH2WIPsXLYeAInoTeejwUl xbEDk58zH6aw0BAuXCbeYqu7q1AUc+RB7g5iveWi6Ku3V4Bg23uQu96j9y2C7sph kdJHBxjSkYdZOA1VuSaTvYQrMZZpxdEV/i3UgHlRPh5P3NYSDLO7U1EBgij9JOYo 62yA2W+Yq1pUePlfdbeqoJU6Irr67HOV -----END CERTIFICATE-----Generated at Tue Jun 17 04:45:12 2025 by rpki-client