$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: MPrIgw7KFfTABMwAZpqiei2ofcBUyldUgswGNGe+ir0= Subject key identifier: 58:37:20:F7:1F:ED:D0:A1:B3:46:E4:41:A3:34:BC:A6:03:76:3B:D7 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: 92 Signing time: Wed 18 Jun 2025 23:38:58 +0000 Manifest this update: Wed 18 Jun 2025 23:38:58 +0000 Manifest next update: Wed 25 Jun 2025 23:38:58 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: 6CJBgdRtUVEJbiQYMoTx0KBPb6L5ubYmEksR6rnhROc=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Jun 18 23:38:58 2025 GMT Not After : Jun 25 23:38:58 2025 GMT Subject: CN=68534e12-ba24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:43:d6:bd:f7:86:8a:ba:08:87:9b:71:8b: 89:4c:27:ca:35:0c:d2:b0:07:11:17:77:b3:3b:a4: e4:3e:de:45:45:a2:7a:0e:d3:0b:02:53:27:f9:be: fb:ba:ad:71:79:c2:d5:f9:80:e8:0f:03:f6:63:8b: 09:77:dd:7f:81:02:51:ba:0c:cf:eb:65:d3:0f:db: bf:b5:87:3b:d5:c2:d0:de:88:01:13:47:b0:35:86: c8:9f:d9:58:a6:fd:2d:af:b8:cc:06:7f:85:0d:ce: 11:61:9f:88:1e:cb:67:0e:bf:7f:52:e6:ca:f1:0e: cc:d0:ba:93:e9:77:85:f6:bb:2f:0c:40:ac:5a:64: 76:e2:56:96:f5:ca:9d:42:09:67:c7:66:c4:10:49: d7:fb:8b:d8:92:fb:b8:18:37:d3:3e:95:86:03:2d: 17:ce:83:d0:ca:4a:30:18:be:03:96:fb:a6:c1:51: c2:29:2d:2d:a5:2d:c6:80:99:5a:eb:8b:ee:56:30: 07:9f:fe:65:78:80:f1:6b:35:86:10:15:11:70:28: 1c:9a:fa:60:60:39:9c:b9:1f:6d:33:62:f7:c8:0f: b3:5b:92:98:ea:3a:59:a9:ba:1f:ac:47:26:71:0b: d9:74:e0:10:96:81:3a:3c:69:73:a5:c5:43:1d:46: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:37:20:F7:1F:ED:D0:A1:B3:46:E4:41:A3:34:BC:A6:03:76:3B:D7 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c9:e5:b7:1b:de:68:6f:44:8c:e7:85:0d:ac:fa:62:d2:79: 7d:f7:97:28:ff:67:e2:52:2f:e2:ba:1d:61:d0:aa:e0:13:8d: d6:f1:68:7a:dc:19:bd:e9:00:b9:8f:6f:7c:76:bc:3b:b5:75: 85:89:e7:57:e4:1e:e7:38:98:68:a6:68:e7:8d:96:c5:c9:ec: f4:21:62:c8:51:4f:26:4b:95:ab:c9:2c:63:cb:70:a8:5d:c0: 69:58:77:d4:b3:dc:64:54:9a:a3:4a:03:f8:f5:5a:c2:1c:a2: 27:26:bb:4b:a9:bd:21:cc:ab:b4:13:f9:30:92:19:9d:3b:0c: de:0c:63:3c:24:ed:99:30:39:f7:cf:3b:ab:0f:02:3c:58:96: 7b:4f:99:3c:4a:02:6a:d8:15:95:55:24:8a:58:f9:5c:81:24: 1e:56:05:99:46:c2:42:ad:1a:41:5a:fd:39:03:a6:6f:86:ac: 24:5e:51:c7:54:51:88:b2:af:07:85:74:35:db:ef:07:b0:82: b1:5f:ff:31:e9:e9:32:48:25:89:08:c0:f0:1c:a5:ae:8c:b4: 41:32:4c:24:11:0e:1f:73:db:31:6d:18:0b:e8:b2:7f:c8:70: 08:39:9a:27:4e:0b:71:49:4d:94:d5:6f:ee:bc:90:48:7d:ed: 7a:9c:18:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUwNjE4MjMzODU4WhcNMjUwNjI1MjMzODU4WjAYMRYwFAYD VQQDEw02ODUzNGUxMi1iYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7RD1r33hoq6CIebcYuJTCfKNQzSsAcRF3ezO6TkPt5FRaJ6DtMLAlMn+b77 uq1xecLV+YDoDwP2Y4sJd91/gQJRugzP62XTD9u/tYc71cLQ3ogBE0ewNYbIn9lY pv0tr7jMBn+FDc4RYZ+IHstnDr9/UubK8Q7M0LqT6XeF9rsvDECsWmR24laW9cqd Qglnx2bEEEnX+4vYkvu4GDfTPpWGAy0XzoPQykowGL4DlvumwVHCKS0tpS3GgJla 64vuVjAHn/5leIDxazWGEBURcCgcmvpgYDmcuR9tM2L3yA+zW5KY6jpZqbofrEcm cQvZdOAQloE6PGlzpcVDHUbJ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFg3IPcf 7dChs0bkQaM0vKYDdjvXMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuyeW3G95ob0SM54UNrPpi0nl995co/2fiUi/iuh1h0KrgE43W8Wh6 3Bm96QC5j298drw7tXWFiedX5B7nOJhopmjnjZbFyez0IWLIUU8mS5WrySxjy3Co XcBpWHfUs9xkVJqjSgP49VrCHKInJrtLqb0hzKu0E/kwkhmdOwzeDGM8JO2ZMDn3 zzurDwI8WJZ7T5k8SgJq2BWVVSSKWPlcgSQeVgWZRsJCrRpBWv05A6ZvhqwkXlHH VFGIsq8HhXQ12+8HsIKxX/8x6ekySCWJCMDwHKWujLRBMkwkEQ4fc9sxbRgL6LJ/ yHAIOZonTgtxSU2U1W/uvJBIfe16nBg+ -----END CERTIFICATE-----Generated at Thu Jun 19 16:30:21 2025 by rpki-client