$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: zG7MvXRftKfljSa9hvQinolYjqeaPS1Sw0eoSxHzSno= Subject key identifier: A7:EE:B7:FB:B7:6A:DE:E7:DB:E9:98:C2:48:9C:10:52:46:8E:A0:9D Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: AC Signing time: Sat 09 Aug 2025 00:12:24 +0000 Manifest this update: Sat 09 Aug 2025 00:12:24 +0000 Manifest next update: Sat 16 Aug 2025 00:12:24 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: McQ+XiSq2Lw5GEMQrQF47EPYdEMhTAEel+NMrHjbHgM=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Aug 9 00:12:24 2025 GMT Not After : Aug 16 00:12:24 2025 GMT Subject: CN=68969268-8700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:e3:42:48:34:46:92:b1:37:f0:47:8d:ca: cc:a7:2b:e1:ec:2b:ea:65:1a:63:56:60:aa:05:42: dd:83:d9:9f:27:0b:55:d3:6e:1f:bf:97:93:70:38: 81:11:ad:bf:f3:68:07:f8:48:9d:a9:54:4a:9c:53: 6a:b3:9a:cc:9a:c3:2f:ad:d6:91:9a:f6:95:19:6d: ee:17:88:c2:00:f1:63:f4:a0:e5:45:27:1e:b1:cb: cb:fd:82:21:db:f4:4d:fb:47:c0:6a:9f:41:4d:29: 71:9d:7b:aa:bf:20:f1:23:b3:f9:7b:80:b9:00:99: 3e:01:5f:37:10:d7:78:94:cd:f5:5d:c1:ea:6c:f5: e2:67:a4:cd:a8:c4:be:7b:00:d2:d7:d5:cc:9e:e0: bc:f5:3e:c5:c8:75:c0:3c:16:7c:94:30:f1:18:71: 5d:35:05:01:07:08:e7:3e:1d:1e:45:db:6f:85:24: f6:3d:dd:b9:8b:57:f4:a9:9c:90:57:48:8c:bb:d2: 89:ee:22:03:c8:b0:43:74:15:59:cc:cf:83:c6:86: 5f:9d:98:62:55:17:43:59:34:4f:64:0c:b4:d0:9a: 22:6a:07:d1:82:e4:fb:40:fe:7c:ac:64:ec:aa:26: 4a:0a:7f:b7:8e:28:c9:f7:90:14:35:43:7e:8e:86: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EE:B7:FB:B7:6A:DE:E7:DB:E9:98:C2:48:9C:10:52:46:8E:A0:9D X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:06:39:fa:33:28:5d:ff:cb:53:6c:b8:bd:9e:5f:50:74:b3: 9f:38:70:13:41:50:30:ba:e7:a2:11:70:17:ae:0f:56:9c:ce: 7f:07:65:aa:76:a8:7f:83:74:68:fd:25:d3:9f:6d:5d:aa:b8: 55:4b:1f:33:db:3c:10:8d:62:60:dd:65:14:85:f9:94:c4:53: 50:cb:1c:45:10:46:b6:66:74:4f:8e:9a:78:5b:77:b9:38:a5: 4d:fb:8c:fb:d1:cd:b2:95:f1:a6:cc:d1:12:95:19:6d:84:46: 64:36:18:fe:ab:59:19:e2:15:17:3f:c8:51:f5:5c:46:28:9a: 45:e0:2b:ad:cc:95:16:07:b9:24:5d:63:56:04:20:f5:dd:a9: a8:f1:13:cf:f0:53:8b:ee:d9:4f:84:5f:a9:57:eb:95:34:a7: 79:b3:4c:b5:62:92:0d:24:9b:a0:3e:68:79:ef:7a:ba:df:ca: 15:97:d0:48:08:a3:1e:b0:b2:24:36:55:ce:be:b7:88:5a:82: ae:fa:3b:eb:f8:cf:93:f2:6a:57:a0:8d:d2:53:d5:37:7e:f7: 9a:b6:71:11:2a:f3:18:e7:3a:9b:f3:1e:4b:e9:dc:5c:24:22: 3c:d2:cd:db:3b:1c:69:68:02:f9:c5:0a:db:fe:b3:c3:a8:7f: 36:38:5b:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUwODA5MDAxMjI0WhcNMjUwODE2MDAxMjI0WjAYMRYwFAYD VQQDEw02ODk2OTI2OC04NzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvDjQkg0RpKxN/BHjcrMpyvh7CvqZRpjVmCqBULdg9mfJwtV024fv5eTcDiB Ea2/82gH+EidqVRKnFNqs5rMmsMvrdaRmvaVGW3uF4jCAPFj9KDlRScescvL/YIh 2/RN+0fAap9BTSlxnXuqvyDxI7P5e4C5AJk+AV83ENd4lM31XcHqbPXiZ6TNqMS+ ewDS19XMnuC89T7FyHXAPBZ8lDDxGHFdNQUBBwjnPh0eRdtvhST2Pd25i1f0qZyQ V0iMu9KJ7iIDyLBDdBVZzM+DxoZfnZhiVRdDWTRPZAy00JoiagfRguT7QP58rGTs qiZKCn+3jijJ95AUNUN+joaxMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfut/u3 at7n2+mYwkicEFJGjqCdMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Bjn6Myhd/8tTbLi9nl9QdLOfOHATQVAwuueiEXAXrg9WnM5/B2Wq dqh/g3Ro/SXTn21dqrhVSx8z2zwQjWJg3WUUhfmUxFNQyxxFEEa2ZnRPjpp4W3e5 OKVN+4z70c2ylfGmzNESlRlthEZkNhj+q1kZ4hUXP8hR9VxGKJpF4CutzJUWB7kk XWNWBCD13amo8RPP8FOL7tlPhF+pV+uVNKd5s0y1YpINJJugPmh573q638oVl9BI CKMesLIkNlXOvreIWoKu+jvr+M+T8mpXoI3SU9U3fveatnERKvMY5zqb8x5L6dxc JCI80s3bOxxpaAL5xQrb/rPDqH82OFsO -----END CERTIFICATE-----Generated at Sat Aug 9 23:11:38 2025 by rpki-client