$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json) Hash identifier: aaQPf7mUUD3ZxSbFRMxXUosNui2vihuM93tAdLRImsw= Subject key identifier: B5:B1:D3:40:8A:1A:C7:4C:CB:A4:4F:C1:9E:A4:B9:08:F6:DB:2D:8A Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Certificate serial: 34A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft Manifest number: 34A2 Signing time: Mon 04 Aug 2025 15:14:19 +0000 Manifest this update: Mon 04 Aug 2025 15:14:18 +0000 Manifest next update: Mon 11 Aug 2025 15:14:18 +0000 Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: YuADl4xya77QOBypQomcqgMKBx/UVpj+BVkvEfGpSVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13474 (0x34a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Validity Not Before: Aug 4 15:14:18 2025 GMT Not After : Aug 11 15:14:18 2025 GMT Subject: CN=6890ce4a-00a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:31:51:21:3b:e3:35:5b:37:7f:b0:31:3c: 85:93:2f:06:10:07:46:2d:05:63:e7:ba:f7:aa:25: 10:67:d2:31:9c:21:59:6c:1f:8c:ce:a6:28:56:e9: df:29:41:f4:16:c7:ef:1a:a9:7d:e5:a2:df:81:9c: 74:04:fd:6c:32:d5:a8:fa:56:43:c8:e8:1d:17:96: 70:a6:51:28:45:03:1b:32:51:7e:81:df:43:ff:ff: 54:11:f3:bd:72:65:5c:77:86:7b:24:0a:a1:a2:a4: 91:33:93:cb:45:4d:bc:08:2c:32:33:08:3e:91:69: c9:34:fc:7a:ca:df:57:9d:86:6b:a6:f6:87:52:fa: d6:b1:05:53:8d:18:8b:22:cb:84:96:98:a1:2c:45: 91:cb:02:5c:ad:a1:b4:32:30:c0:93:70:7f:31:bc: a0:cb:29:31:92:24:63:18:eb:2f:10:4e:ca:00:8b: 45:da:fb:1c:70:e2:d9:f2:21:d2:2e:20:1e:17:bb: f4:b9:8d:4d:da:bd:af:51:3b:32:4c:b3:34:5f:d8: 49:9d:c3:66:03:e8:d1:82:ba:82:0c:a4:95:9e:e0: c4:b8:6e:1a:a2:68:58:71:40:c2:09:d1:68:9e:41: dc:3b:8d:cf:09:e8:65:de:9b:88:09:b5:11:3f:5a: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:D3:40:8A:1A:C7:4C:CB:A4:4F:C1:9E:A4:B9:08:F6:DB:2D:8A X509v3 Authority Key Identifier: keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:70:56:aa:59:05:4a:72:a6:f7:c5:cb:9a:e6:e0:86:23:fa: 47:60:1f:c3:9c:da:6f:f2:08:07:5f:1b:6a:b0:38:95:b6:cf: 2a:cc:17:6b:89:3c:2c:64:83:25:55:c8:2d:6d:f1:12:a6:92: ee:88:80:e6:f8:15:27:67:81:d5:7b:21:52:f8:54:5f:7c:3e: e8:a1:a8:af:91:31:bc:e2:58:b8:12:0f:95:f8:1c:25:29:06: 6c:98:3e:31:87:89:af:81:6e:46:d2:df:2e:02:33:01:3f:88: 8e:e4:4e:bc:3f:68:b2:b9:ac:d7:10:f3:7d:38:05:a7:0c:f4: e0:52:75:19:71:94:68:f4:d8:ab:29:89:7b:10:b6:d6:3d:3f: 2d:1e:f6:86:51:2a:8f:39:9a:3d:6f:10:97:25:2b:f2:e4:90: 5a:39:96:8c:41:4c:71:84:6f:66:41:ae:ba:08:38:87:08:91: 6c:7d:b5:7d:db:47:0e:0c:b6:60:12:1a:a9:48:7d:ef:54:38: 05:46:c2:df:5b:c9:fe:ec:98:ae:94:2d:0e:78:89:2b:17:b4: 05:08:57:f9:dc:0f:a2:05:ff:fd:51:f7:0e:56:7b:66:d8:68: d7:20:4a:1a:b0:1b:00:88:49:58:69:73:b1:37:3d:53:e8:7b: 31:d6:04:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGMDExMTAvBgNVBAUTKEYxMjYwRDY1MzA1RTNBODk1REIyQzY5MUI2QURDMDNF NTE5RjNEMDAwHhcNMjUwODA0MTUxNDE4WhcNMjUwODExMTUxNDE4WjAYMRYwFAYD VQQDEw02ODkwY2U0YS0wMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zExUSE74zVbN3+wMTyFky8GEAdGLQVj57r3qiUQZ9IxnCFZbB+MzqYoVunf KUH0FsfvGql95aLfgZx0BP1sMtWo+lZDyOgdF5ZwplEoRQMbMlF+gd9D//9UEfO9 cmVcd4Z7JAqhoqSRM5PLRU28CCwyMwg+kWnJNPx6yt9XnYZrpvaHUvrWsQVTjRiL IsuElpihLEWRywJcraG0MjDAk3B/MbygyykxkiRjGOsvEE7KAItF2vsccOLZ8iHS LiAeF7v0uY1N2r2vUTsyTLM0X9hJncNmA+jRgrqCDKSVnuDEuG4aomhYcUDCCdFo nkHcO43PCehl3puICbURP1raKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWx00CK GsdMy6RPwZ6kuQj22y2KMB8GA1UdIwQYMBaAFPEmDWUwXjqJXbLGkbatwD5Rnz0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0YwMS9DNEI4OEJGMDFE QTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9vbGRzc2FSdHEzQVBsR2ZQ UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTWU5aVEJlT29sZHNzYVJ0cTNBUGxHZlBRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0YwMS9DNEI4OEJGMDFEQTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9v bGRzc2FSdHEzQVBsR2ZQUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4cFaqWQVKcqb3xcua5uCGI/pHYB/DnNpv8ggHXxtqsDiVts8qzBdr iTwsZIMlVcgtbfESppLuiIDm+BUnZ4HVeyFS+FRffD7ooaivkTG84li4Eg+V+Bwl KQZsmD4xh4mvgW5G0t8uAjMBP4iO5E68P2iyuazXEPN9OAWnDPTgUnUZcZRo9Nir KYl7ELbWPT8tHvaGUSqPOZo9bxCXJSvy5JBaOZaMQUxxhG9mQa66CDiHCJFsfbV9 20cODLZgEhqpSH3vVDgFRsLfW8n+7JiulC0OeIkrF7QFCFf53A+iBf/9UfcOVntm 2GjXIEoasBsAiElYaXOxNz1T6Hsx1gTs -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:30 2025 by rpki-client