$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: l9hj2B4XnS6fF6kgjKJ799hjcxLGxgtxAN1c40RdzLQ= Subject key identifier: A0:3C:84:B1:1B:8C:D0:B6:1B:56:EE:32:F4:2A:3E:0F:E5:2A:F1:08 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 20CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2B53 Signing time: Thu 12 Jun 2025 15:55:23 +0000 Manifest this update: Thu 12 Jun 2025 15:55:22 +0000 Manifest next update: Thu 19 Jun 2025 15:55:22 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: C9NeLxwlAzVHpT+Pxa1Fc1svIUCeDqP85eQmyNSJElA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8399 (0x20cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Jun 12 15:55:22 2025 GMT Not After : Jun 19 15:55:22 2025 GMT Subject: CN=684af86a-1918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:15:68:f0:88:6b:35:66:0a:8d:9d:6d:c1: 99:a4:26:a1:b2:03:17:21:4f:67:c4:d6:7e:8b:b4: 05:b9:24:62:91:79:48:4e:4a:07:42:72:39:34:76: db:3c:f6:3a:5b:3e:91:28:e1:e5:27:34:21:18:3e: 76:ac:ca:8f:a3:5f:da:39:61:fa:a8:7b:06:7c:bc: 77:62:5b:b1:4b:88:a3:c2:48:93:6d:78:9c:88:83: 69:3a:9d:d0:af:ad:35:87:1e:bb:21:6c:5a:83:14: 6c:9d:04:a3:19:3f:ce:50:0a:57:fc:0e:d2:7a:df: ab:b0:af:e7:64:7c:50:26:42:33:5c:e0:69:4f:3e: f1:41:c6:3f:94:7b:89:cb:06:6e:f8:59:c5:59:21: 3a:d7:6f:63:4e:d6:26:0d:52:3f:76:35:ae:e2:4e: 05:1d:ab:ba:77:fd:cf:1c:5b:25:36:5e:79:a5:d9: 62:f5:76:0e:1d:e8:24:d4:e8:fc:88:4f:5f:c9:9a: e6:2d:13:81:05:13:19:28:84:be:72:7c:9b:9e:dd: 11:37:ca:76:b0:01:29:c1:61:80:f7:cd:75:f8:10: 8c:1a:5e:bc:26:41:ab:61:17:b9:ff:09:6d:a0:5b: 45:49:1d:6c:25:3d:b1:e0:ff:9f:6a:be:45:e7:cb: 30:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3C:84:B1:1B:8C:D0:B6:1B:56:EE:32:F4:2A:3E:0F:E5:2A:F1:08 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7d:99:1c:d2:7b:67:80:c4:32:15:d4:cb:5d:b9:8f:e3:30: 1d:aa:3b:92:43:80:5a:ba:ff:4d:b9:62:0e:e2:e5:36:50:18: 2d:f0:b4:78:76:dc:25:3a:6a:89:b4:61:ff:bd:bb:a0:17:e4: 15:f2:2d:db:85:d3:27:1d:11:94:fe:68:0c:bb:25:e0:e6:98: 78:90:50:bf:e3:45:21:27:de:79:f6:e0:aa:6c:7a:22:86:ec: 74:df:e1:e1:8e:44:4f:91:fe:15:b2:90:99:4f:d4:43:92:6b: cb:43:8b:06:b7:ca:4f:c8:5b:dc:7d:88:37:8c:d9:85:de:c3: 10:a2:49:ad:85:f1:15:79:d8:99:91:29:f8:af:d6:65:9a:0d: a4:37:ca:5c:e1:54:72:aa:af:84:79:bd:00:36:1d:f9:d0:e3: 64:4d:af:bc:b9:51:ac:e0:76:52:b9:7b:08:05:da:4b:e1:0f: 23:ad:27:12:da:20:9f:63:2d:a1:12:f2:2c:94:11:d5:4c:b1: e9:5e:6d:2e:83:ad:33:68:f0:9e:9c:e6:29:4e:4b:de:60:ba: a5:0c:63:f6:92:cf:61:cd:0f:11:db:c1:64:b9:d7:1f:80:8c: 0f:5f:fc:d6:30:7a:bd:7a:cc:82:65:de:41:94:b9:03:13:b9: 68:63:23:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUwNjEyMTU1NTIyWhcNMjUwNjE5MTU1NTIyWjAYMRYwFAYD VQQDEw02ODRhZjg2YS0xOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QAVaPCIazVmCo2dbcGZpCahsgMXIU9nxNZ+i7QFuSRikXlITkoHQnI5NHbb PPY6Wz6RKOHlJzQhGD52rMqPo1/aOWH6qHsGfLx3YluxS4ijwkiTbXiciINpOp3Q r601hx67IWxagxRsnQSjGT/OUApX/A7Set+rsK/nZHxQJkIzXOBpTz7xQcY/lHuJ ywZu+FnFWSE6129jTtYmDVI/djWu4k4FHau6d/3PHFslNl55pdli9XYOHegk1Oj8 iE9fyZrmLROBBRMZKIS+cnybnt0RN8p2sAEpwWGA9811+BCMGl68JkGrYRe5/wlt oFtFSR1sJT2x4P+far5F58swmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKA8hLEb jNC2G1buMvQqPg/lKvEIMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBofZkc0ntngMQyFdTLXbmP4zAdqjuSQ4Bauv9NuWIO4uU2UBgt8LR4 dtwlOmqJtGH/vbugF+QV8i3bhdMnHRGU/mgMuyXg5ph4kFC/40UhJ9559uCqbHoi hux03+HhjkRPkf4VspCZT9RDkmvLQ4sGt8pPyFvcfYg3jNmF3sMQokmthfEVediZ kSn4r9Zlmg2kN8pc4VRyqq+Eeb0ANh350ONkTa+8uVGs4HZSuXsIBdpL4Q8jrScS 2iCfYy2hEvIslBHVTLHpXm0ug60zaPCenOYpTkveYLqlDGP2ks9hzQ8R28Fkudcf gIwPX/zWMHq9esyCZd5BlLkDE7loYyN9 -----END CERTIFICATE-----Generated at Sat Jun 14 17:15:39 2025 by rpki-client