$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: IxH3meTHPh9VyIKe0p2GP79vPW6GHCvsQzAL8jlkCM8= Subject key identifier: 3B:31:40:65:86:71:09:4E:D1:ED:C3:1A:6E:C1:CF:18:3C:A6:95:68 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: 77 Signing time: Thu 24 Apr 2025 23:40:22 +0000 Manifest this update: Thu 24 Apr 2025 23:40:21 +0000 Manifest next update: Thu 01 May 2025 23:40:21 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: m44kotABUvfsG9NhZAWfDJfemdTAu3x7HZQwOnudjCE=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Apr 24 23:40:21 2025 GMT Not After : May 1 23:40:21 2025 GMT Subject: CN=680acbe6-d695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:68:ba:76:99:62:30:8e:61:11:12:ba:8b: 4d:b7:e8:65:aa:11:96:b2:eb:a9:aa:2a:c7:68:39: b4:e6:87:7c:f8:3e:92:97:90:8e:97:9d:77:2c:db: c4:bf:c6:fe:33:2e:67:84:e2:5a:40:5c:71:2a:2a: 85:93:04:2c:68:78:aa:bf:9d:04:8d:74:7d:c6:f6: c4:34:5e:b4:d3:d9:05:34:61:7c:5b:e0:7c:6a:66: 48:5a:96:bb:2c:e6:fe:a2:fb:b2:45:6d:0f:7d:df: 48:7d:14:3c:a6:0e:17:60:e9:7b:86:1a:77:1c:b9: b6:db:57:d3:ae:07:97:98:30:2f:46:9c:41:3b:d6: 0d:3f:53:fd:fd:a4:a0:93:88:3b:09:d2:11:fb:e2: 7f:5e:7b:30:de:ec:bc:b9:5d:43:ce:e7:e7:5e:71: c0:3b:b2:a0:95:af:6a:0b:49:75:32:0a:35:b8:8c: d7:e3:ad:6e:17:40:47:35:89:5a:49:c3:77:ae:06: 2b:03:ce:08:76:b6:3b:5c:73:07:01:40:d7:0b:50: 0b:08:8e:f0:19:85:e2:78:df:79:02:0e:7c:0f:1f: 82:06:9c:52:05:5c:93:75:cd:2a:54:a6:6f:a4:2a: fe:96:8d:ae:3a:25:21:c9:f5:c7:07:ad:21:05:78: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:31:40:65:86:71:09:4E:D1:ED:C3:1A:6E:C1:CF:18:3C:A6:95:68 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:24:bd:76:d8:47:02:76:51:fb:9d:30:cc:b4:a2:d9:ae:1c: 1a:2d:36:78:75:9e:54:6c:48:27:bf:42:ec:b4:ec:98:7c:11: ec:e0:93:4e:d4:ba:41:13:db:22:e6:c5:d6:69:35:c0:16:a7: 14:28:ff:7e:77:5f:e6:4a:9a:bd:85:28:61:ab:9e:01:53:11: 07:6d:d7:3e:b1:14:f0:43:97:2e:f1:87:3c:aa:8f:f2:2b:b8: 42:4d:19:1b:b2:cd:3c:92:1b:73:0a:18:a8:7f:b2:df:79:85: 6b:41:0f:08:ad:70:df:77:c0:49:26:ac:62:f9:ea:92:c1:70: c0:5b:fa:ff:eb:a6:b7:fb:33:9f:5e:c6:cd:4d:45:57:8d:39: 9b:d8:cc:3a:fd:28:93:ff:ea:a7:67:1f:de:68:4a:7e:02:c8: 51:4f:ef:6d:5c:2c:6b:7c:35:38:56:ef:03:db:27:c8:49:cc: 81:63:eb:74:b4:eb:13:a2:f8:e9:2c:48:2a:b1:c2:23:fa:f9: 30:6e:32:b5:1c:be:27:7f:3c:c3:7e:e0:21:11:f9:89:4f:cd: e4:a6:49:be:d9:97:8b:bd:51:30:e2:16:90:53:e0:ea:d6:4e: 91:4c:16:3e:4a:4c:77:f7:3a:bc:d1:10:3b:45:6c:c9:98:49: b5:aa:ee:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTNCRTExMC8GA1UEBRMoNEIyQzc3QkMyREY0M0M3Mjg0RDAxRTQ1QjEyREIzQkRG MDA5MTZEMTAeFw0yNTA0MjQyMzQwMjFaFw0yNTA1MDEyMzQwMjFaMBgxFjAUBgNV BAMTDTY4MGFjYmU2LWQ2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDALGi6dpliMI5hERK6i0236GWqEZay66mqKsdoObTmh3z4PpKXkI6XnXcs28S/ xv4zLmeE4lpAXHEqKoWTBCxoeKq/nQSNdH3G9sQ0XrTT2QU0YXxb4HxqZkhalrss 5v6i+7JFbQ9930h9FDymDhdg6XuGGnccubbbV9OuB5eYMC9GnEE71g0/U/39pKCT iDsJ0hH74n9eezDe7Ly5XUPO5+deccA7sqCVr2oLSXUyCjW4jNfjrW4XQEc1iVpJ w3euBisDzgh2tjtccwcBQNcLUAsIjvAZheJ433kCDnwPH4IGnFIFXJN1zSpUpm+k Kv6Wja46JSHJ9ccHrSEFeLNtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOzFAZYZx CU7R7cMabsHPGDymlWgwHwYDVR0jBBgwFoAUSyx3vC30PHKE0B5FsS2zvfAJFtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBM0JFLzY3OEUxNkIwNkZD RTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3l4M3ZDMzBQSEtFMEI1RnNTMnp2ZkFKRnRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB M0JFLzY3OEUxNkIwNkZDRTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhL RTBCNUZzUzJ6dmZBSkZ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQkvXbYRwJ2UfudMMy0otmuHBotNnh1nlRsSCe/Quy07Jh8Eezgk07U ukET2yLmxdZpNcAWpxQo/353X+ZKmr2FKGGrngFTEQdt1z6xFPBDly7xhzyqj/Ir uEJNGRuyzTySG3MKGKh/st95hWtBDwitcN93wEkmrGL56pLBcMBb+v/rprf7M59e xs1NRVeNOZvYzDr9KJP/6qdnH95oSn4CyFFP721cLGt8NThW7wPbJ8hJzIFj63S0 6xOi+OksSCqxwiP6+TBuMrUcvid/PMN+4CER+YlPzeSmSb7Zl4u9UTDiFpBT4OrW TpFMFj5KTHf3OrzREDtFbMmYSbWq7j4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:18 2025 by rpki-client