$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: Yb3hr5n8na2wThUN2Veyf8XmSeuJdSu7sZck2Qy0c8k= Subject key identifier: CB:A0:DB:1F:8A:7E:1C:6C:6F:78:B8:12:B0:CF:02:6E:46:8A:4D:E9 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 2119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2BE7 Signing time: Tue 04 Nov 2025 16:02:19 +0000 Manifest this update: Tue 04 Nov 2025 16:02:18 +0000 Manifest next update: Tue 11 Nov 2025 16:02:18 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: U/UDYMxRVSoOr+EZn7KmFPLx9vbG7Eql0qhcKo63sy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8473 (0x2119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Nov 4 16:02:18 2025 GMT Not After : Nov 11 16:02:18 2025 GMT Subject: CN=690a238a-5647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:22:54:4e:d1:08:7a:94:03:03:97:1b:38: 58:e9:e8:58:b9:5d:44:5a:83:31:d7:bd:a8:27:95: af:1c:2b:c8:dc:0c:9e:36:dd:62:36:84:aa:08:07: 9d:77:e6:04:32:81:18:60:5f:8a:9d:6d:95:21:13: 90:d5:db:ba:76:b7:27:48:5e:c0:22:e7:b1:68:18: 02:df:eb:84:31:4a:a3:36:25:52:a4:3a:d8:0b:3f: 15:2a:ee:1b:f1:56:14:b5:a7:21:3b:77:d5:22:b3: 98:d4:67:a0:06:f9:52:51:f2:07:b6:da:e1:c5:3e: 4e:c6:19:38:18:cd:4a:ff:d8:81:87:c9:52:73:4e: cc:f3:f9:a1:d6:04:c1:48:29:64:81:9f:a7:e7:49: 76:2d:c7:31:f5:71:38:07:e1:45:b6:05:dc:7d:70: b9:62:1b:9e:82:26:d6:a5:63:c0:df:ce:a0:1d:db: d3:c9:41:08:ba:d9:df:d2:d3:1e:c1:63:18:49:57: a4:4d:6c:7e:53:9c:4e:94:18:7b:90:00:5c:c7:e5: 1e:89:a9:34:3b:59:91:5b:1b:ee:43:8c:d3:52:1b: d0:2d:74:84:42:2d:12:2f:94:aa:86:9c:a5:4a:e9: 5f:92:1f:31:76:f1:fb:1b:e3:6c:c7:7b:67:8f:50: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A0:DB:1F:8A:7E:1C:6C:6F:78:B8:12:B0:CF:02:6E:46:8A:4D:E9 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:5d:76:9d:70:05:21:bf:18:ba:ca:9c:42:dd:99:f3:a8:a1: 65:78:5f:8b:49:ad:08:d9:f1:d4:86:a5:53:78:5b:46:71:cd: ed:3e:9b:70:77:ef:8b:eb:57:69:02:a9:a4:d6:ef:a0:cf:57: 4e:a8:c5:dc:29:03:c1:4f:0d:df:5b:ba:53:91:67:76:b3:fe: 38:7b:cf:9a:05:f5:ed:79:c8:8e:4c:cc:82:35:ef:26:f0:11: 1e:68:e8:b9:28:71:e1:62:12:fc:d3:eb:80:52:20:2e:e3:3a: f8:25:4a:95:5d:00:12:77:8c:2a:d6:69:0e:64:ea:32:83:6d: 58:9a:bb:39:43:b7:f1:9a:07:0f:ec:8b:dd:56:e4:bb:ff:c7: ea:30:30:11:43:67:05:0f:ed:81:a9:bc:cc:95:8c:f1:a6:59: 4f:71:7d:a9:d6:56:5a:77:95:0e:11:90:78:93:8b:87:05:8f: 32:d5:59:06:98:ef:0c:34:ad:a0:66:51:5e:d7:b8:5c:f7:90: 3d:56:b0:c2:56:c5:71:62:75:4c:dc:d4:4d:a7:26:88:7b:1d: 4e:b7:eb:d6:ce:72:5a:be:a1:af:42:09:69:5f:1b:bc:ca:3d: 00:df:b0:46:6d:0b:b5:17:76:d4:67:f3:e6:b3:1f:ee:33:53: 74:e6:51:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUxMTA0MTYwMjE4WhcNMjUxMTExMTYwMjE4WjAYMRYwFAYD VQQDEw02OTBhMjM4YS01NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfgiVE7RCHqUAwOXGzhY6ehYuV1EWoMx172oJ5WvHCvI3AyeNt1iNoSqCAed d+YEMoEYYF+KnW2VIROQ1du6drcnSF7AIuexaBgC3+uEMUqjNiVSpDrYCz8VKu4b 8VYUtachO3fVIrOY1GegBvlSUfIHttrhxT5Oxhk4GM1K/9iBh8lSc07M8/mh1gTB SClkgZ+n50l2Lccx9XE4B+FFtgXcfXC5YhuegibWpWPA386gHdvTyUEIutnf0tMe wWMYSVekTWx+U5xOlBh7kABcx+Ueiak0O1mRWxvuQ4zTUhvQLXSEQi0SL5Sqhpyl Sulfkh8xdvH7G+Nsx3tnj1Ab9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMug2x+K fhxsb3i4ErDPAm5Gik3pMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTXXadcAUhvxi6ypxC3ZnzqKFleF+LSa0I2fHUhqVTeFtGcc3tPptw d++L61dpAqmk1u+gz1dOqMXcKQPBTw3fW7pTkWd2s/44e8+aBfXteciOTMyCNe8m 8BEeaOi5KHHhYhL80+uAUiAu4zr4JUqVXQASd4wq1mkOZOoyg21Ymrs5Q7fxmgcP 7IvdVuS7/8fqMDARQ2cFD+2BqbzMlYzxpllPcX2p1lZad5UOEZB4k4uHBY8y1VkG mO8MNK2gZlFe17hc95A9VrDCVsVxYnVM3NRNpyaIex1Ot+vWznJavqGvQglpXxu8 yj0A37BGbQu1F3bUZ/Pmsx/uM1N05lE+ -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:01 2025 by rpki-client