$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: RQjhMnhtOpWgO8zcAE8TcN3ql/+bMYyzdBraVA2+Flc= Subject key identifier: 50:86:00:5D:BF:F3:7A:9C:80:5B:27:CD:AA:7C:6D:84:59:D8:EE:42 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: D9 Signing time: Sun 02 Nov 2025 23:34:13 +0000 Manifest this update: Sun 02 Nov 2025 23:34:12 +0000 Manifest next update: Sun 09 Nov 2025 23:34:12 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: fj6rP3xS2VAovJeHh0bzRvefiC7vC5jH8TxsHSOpROM=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: uoDT5F7S64QhLS2Zprh4X3DnbqtCN+iY00UgCBuklGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Nov 2 23:34:12 2025 GMT Not After : Nov 9 23:34:12 2025 GMT Subject: CN=6907ea75-6659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:42:ff:63:a9:a8:23:a9:20:59:15:51:e2: 22:d6:a8:82:e6:d3:2b:96:be:f2:10:c1:b6:ba:b3: 06:ed:4e:5d:0f:72:fe:d5:37:03:24:e3:d3:92:ab: f7:0d:8f:91:fe:68:ce:4e:07:8a:72:2e:9b:7d:97: d6:8f:b7:71:ee:13:f8:10:f3:4b:3f:e9:6b:63:d5: 9f:bb:5d:4c:64:fd:4a:97:a4:d4:6e:cf:ab:1c:ba: 83:4a:89:ab:10:e7:cb:9a:90:a4:08:fb:2b:f7:d1: 6b:dc:d0:c2:77:1a:a9:a0:73:f3:6b:d1:ee:6a:0e: 86:43:c8:51:d3:cd:98:2a:ef:a2:c3:fb:bc:c8:8c: b4:5a:44:51:56:34:96:12:49:86:53:6d:2a:73:bc: cb:8b:f3:2a:5d:bc:00:47:04:b7:ea:11:dc:72:04: 01:f5:c5:86:a7:77:58:68:04:2d:66:18:fd:f9:d7: 24:9a:81:10:aa:ec:d3:d3:30:0b:49:b0:61:55:e6: 67:81:79:b8:59:27:8b:17:08:a3:6a:4a:75:c3:ff: 92:36:00:ef:8d:03:93:5c:5f:6c:78:9f:a8:d5:bf: cf:5d:7b:47:d1:bd:63:5c:1c:0f:4d:e9:51:79:cc: 49:fa:1b:34:a2:7d:8a:ac:52:cd:91:8c:01:db:69: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:86:00:5D:BF:F3:7A:9C:80:5B:27:CD:AA:7C:6D:84:59:D8:EE:42 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:28:04:6b:2a:2a:d9:22:6f:19:0e:9d:63:99:0d:c5:5c:59: 96:41:8b:46:1f:fe:1d:b4:ed:fe:df:12:57:b5:62:22:4f:d9: 33:ac:55:20:c9:04:f3:71:5b:64:41:89:62:c6:95:45:e7:43: 95:7a:87:41:5d:bb:38:a5:8f:e8:63:85:b9:fe:d1:9c:cb:b1: 90:13:1b:4c:83:11:18:53:d2:4b:db:10:f8:45:2b:71:35:8a: 3e:f4:21:39:d6:1e:c9:ce:ce:cf:2d:04:0f:77:80:6c:06:0a: 0e:d4:cc:58:38:87:7d:b6:e8:23:34:24:0b:dd:70:6b:a3:97: 39:22:5c:42:52:67:5a:d0:b8:1a:30:da:26:11:ff:32:62:20: ab:a3:2a:1d:6d:48:78:08:7b:84:dd:a0:e1:09:8c:22:52:ce: 20:11:2a:7c:d5:bb:3d:aa:13:83:f2:8c:d6:4b:df:f9:dd:8b: 11:ef:84:98:b4:02:63:87:12:54:32:9e:a6:8c:30:ac:fa:56: 91:d9:11:63:de:65:b1:dc:32:9e:b6:29:a4:59:24:a3:f5:bb: cb:5d:61:67:57:9d:2b:64:23:0c:35:54:c9:7a:3e:59:e5:3d: a8:7a:17:cb:93:b4:b0:96:73:cd:dc:ac:ff:f3:70:ae:63:de: 80:97:17:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUxMTAyMjMzNDEyWhcNMjUxMTA5MjMzNDEyWjAYMRYwFAYD VQQDEw02OTA3ZWE3NS02NjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1BC/2OpqCOpIFkVUeIi1qiC5tMrlr7yEMG2urMG7U5dD3L+1TcDJOPTkqv3 DY+R/mjOTgeKci6bfZfWj7dx7hP4EPNLP+lrY9Wfu11MZP1Kl6TUbs+rHLqDSomr EOfLmpCkCPsr99Fr3NDCdxqpoHPza9Huag6GQ8hR082YKu+iw/u8yIy0WkRRVjSW EkmGU20qc7zLi/MqXbwARwS36hHccgQB9cWGp3dYaAQtZhj9+dckmoEQquzT0zAL SbBhVeZngXm4WSeLFwijakp1w/+SNgDvjQOTXF9seJ+o1b/PXXtH0b1jXBwPTelR ecxJ+hs0on2KrFLNkYwB22mBaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCGAF2/ 83qcgFsnzap8bYRZ2O5CMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSKARrKirZIm8ZDp1jmQ3FXFmWQYtGH/4dtO3+3xJXtWIiT9kzrFUg yQTzcVtkQYlixpVF50OVeodBXbs4pY/oY4W5/tGcy7GQExtMgxEYU9JL2xD4RStx NYo+9CE51h7Jzs7PLQQPd4BsBgoO1MxYOId9tugjNCQL3XBro5c5IlxCUmda0Lga MNomEf8yYiCroyodbUh4CHuE3aDhCYwiUs4gESp81bs9qhOD8ozWS9/53YsR74SY tAJjhxJUMp6mjDCs+laR2RFj3mWx3DKetimkWSSj9bvLXWFnV50rZCMMNVTJej5Z 5T2oehfLk7SwlnPN3Kz/83CuY96AlxdY -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:44 2025 by rpki-client