$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: 4Ird6CpzMFQpGaiAr6gJakXHvUw5F6+kKx3+20mImBM= Subject key identifier: 49:FB:3C:F6:AA:DC:C9:B8:E3:AA:C6:05:F6:29:DB:A5:41:E5:0B:EE Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 20EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2B89 Signing time: Mon 04 Aug 2025 16:05:13 +0000 Manifest this update: Mon 04 Aug 2025 16:05:13 +0000 Manifest next update: Mon 11 Aug 2025 16:05:13 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: FdhFGjCRwo0wDa314OOZM+d2e31A9nWa9d5OKGw4FPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8426 (0x20ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Aug 4 16:05:13 2025 GMT Not After : Aug 11 16:05:13 2025 GMT Subject: CN=6890da39-516b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:e6:15:60:90:ab:20:98:ec:08:90:2a:69: 5e:1c:de:1b:de:dd:24:0b:5e:70:2e:3d:51:a6:27: 79:52:ef:c6:4d:b3:c9:f1:29:21:f9:48:ba:8a:d8: f8:e1:03:17:6e:ff:be:ab:f5:d4:ea:50:06:fb:f6: bb:df:ad:97:b1:8c:92:ca:d6:bf:b0:6d:34:d9:82: 56:97:a0:f3:74:fe:f7:6b:19:f3:a8:85:fa:58:bc: e5:53:59:55:65:86:d7:47:fa:8a:f1:3b:40:ea:58: 17:6f:88:58:66:1e:3f:14:7b:86:a1:fc:e2:bf:a1: 9e:ad:0b:57:84:e2:5c:09:2d:98:a3:c3:96:27:76: cb:52:33:84:8d:c9:28:85:c6:5c:88:2c:33:7c:31: 87:f8:a7:75:a9:41:86:f3:c6:1d:c8:21:6f:b1:af: 51:05:f7:5d:df:24:92:8f:f0:81:9b:2d:30:30:13: f6:ec:04:30:bf:f1:db:a0:eb:ae:19:55:b7:b1:88: e4:42:ef:ae:ee:b7:02:c5:da:b2:0d:b3:99:22:d0: 67:b3:8f:d5:1a:4f:1f:b0:11:9c:66:79:bd:88:5c: 9e:f1:e9:3e:be:6e:39:8e:ec:de:e3:39:4a:b5:da: 67:fd:93:e6:3d:74:ff:03:a1:78:3f:8a:3f:a2:ef: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FB:3C:F6:AA:DC:C9:B8:E3:AA:C6:05:F6:29:DB:A5:41:E5:0B:EE X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:20:45:0a:29:30:bc:f9:85:b7:30:fe:7a:5d:34:9c:5e:af: 20:05:28:f7:59:f1:83:c1:6e:a9:d0:cc:bf:d5:1c:2d:79:df: 42:00:98:cc:a0:fa:6b:9f:9c:c6:4e:1a:5b:b6:f7:02:97:b4: 2c:2c:8d:11:b1:3a:c9:da:2e:61:8c:ec:a8:1e:1a:86:66:5d: b3:ec:c5:32:be:8f:ee:3a:73:d2:c3:8a:85:d3:d0:75:8d:19: dd:26:3c:b9:3a:06:3e:94:6f:0d:9c:ac:5e:fb:6a:5e:7f:a7: 4e:84:e3:1a:23:72:7e:58:99:e2:45:6c:09:b5:d1:47:e6:f9: b9:f9:7f:16:81:8a:39:70:9b:58:a6:4c:e4:3a:e4:38:2d:af: 53:35:ae:c9:5f:94:0e:9a:0e:1f:bb:08:2e:99:b6:71:81:d0: 58:d2:6a:5f:80:9f:e9:ec:1e:dd:8a:49:a7:be:c9:28:87:fe: d9:82:56:ab:20:a7:3d:b6:c6:15:80:4b:76:f0:9f:b6:73:a6: 11:f2:25:dc:b2:e8:db:c1:49:4c:77:e4:7a:3a:2a:ff:54:55: c7:a3:d5:f4:13:f0:c9:a8:64:f8:13:3d:fd:21:fc:36:53:3f: f9:38:f7:27:af:5b:de:28:43:d5:48:30:ca:f0:fd:a3:48:8e: 60:fc:0a:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUwODA0MTYwNTEzWhcNMjUwODExMTYwNTEzWjAYMRYwFAYD VQQDEw02ODkwZGEzOS01MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEjmFWCQqyCY7AiQKmleHN4b3t0kC15wLj1Rpid5Uu/GTbPJ8Skh+Ui6itj4 4QMXbv++q/XU6lAG+/a7362XsYySyta/sG002YJWl6DzdP73axnzqIX6WLzlU1lV ZYbXR/qK8TtA6lgXb4hYZh4/FHuGofziv6GerQtXhOJcCS2Yo8OWJ3bLUjOEjcko hcZciCwzfDGH+Kd1qUGG88YdyCFvsa9RBfdd3ySSj/CBmy0wMBP27AQwv/HboOuu GVW3sYjkQu+u7rcCxdqyDbOZItBns4/VGk8fsBGcZnm9iFye8ek+vm45juze4zlK tdpn/ZPmPXT/A6F4P4o/ou/dQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEn7PPaq 3Mm446rGBfYp26VB5QvuMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0IEUKKTC8+YW3MP56XTScXq8gBSj3WfGDwW6p0My/1Rwted9CAJjM oPprn5zGThpbtvcCl7QsLI0RsTrJ2i5hjOyoHhqGZl2z7MUyvo/uOnPSw4qF09B1 jRndJjy5OgY+lG8NnKxe+2pef6dOhOMaI3J+WJniRWwJtdFH5vm5+X8WgYo5cJtY pkzkOuQ4La9TNa7JX5QOmg4fuwgumbZxgdBY0mpfgJ/p7B7dikmnvskoh/7Zglar IKc9tsYVgEt28J+2c6YR8iXcsujbwUlMd+R6Oir/VFXHo9X0E/DJqGT4Ez39Ifw2 Uz/5OPcnr1veKEPVSDDK8P2jSI5g/Ao/ -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:31 2025 by rpki-client