$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft File: Syj186m-bJVf8b4Pe1CAOrF-tGA.mft (raw, json) Hash identifier: KxamfOjD5CLNWcmDiTljHvON5W9WHlf+tcr9zGryPDQ= Subject key identifier: 55:57:6C:D4:72:D3:18:60:F2:2D:9D:7C:09:6D:9D:94:AE:0D:45:FF Authority key identifier: 4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60 Certificate issuer: /CN=A91DC324/serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft Manifest number: A3 Signing time: Fri 25 Apr 2025 05:14:25 +0000 Manifest this update: Fri 25 Apr 2025 05:14:25 +0000 Manifest next update: Fri 02 May 2025 05:14:25 +0000 Files and hashes: 1: Syj186m-bJVf8b4Pe1CAOrF-tGA.crl (hash: 8ojQCj/fHRno1YHO1ByZIo5YBgFPEfbp0E7SCf/SYnE=) 2: 8E20940E32AE11EFAE6AE719C4F9AE02.roa (hash: bTdH2BNkxu8pmsOX7z6m4Cai9a9U6KqGeoJPp3UjSyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC324, serialNumber=4B28F5F3A9BE6C955FF1BE0F7B50803AB17EB460 Validity Not Before: Apr 25 05:14:25 2025 GMT Not After : May 2 05:14:25 2025 GMT Subject: CN=680b1a31-101b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:76:5a:ac:3b:f2:8a:2f:64:59:15:51:2e: 48:3e:a5:95:46:3d:70:a2:2a:e3:89:25:91:4f:75: a9:b7:e5:69:41:12:f3:3c:06:56:2d:d2:7d:c0:68: 0c:9f:7f:c9:a1:09:b1:98:a9:23:85:6a:7b:d6:e2: b9:08:b5:3b:4a:48:1f:fb:5e:c4:b3:5f:22:32:cb: 8a:04:c2:7d:ab:3e:b2:fd:97:e6:63:5d:64:da:dc: a6:84:57:93:ec:1a:30:9b:d4:6f:c0:49:84:e3:c5: 9e:d1:64:9b:27:eb:df:fb:f8:84:c3:b6:1e:6d:c7: 6b:b7:55:ec:60:54:07:6e:30:e6:97:52:c2:f1:df: a5:6c:d2:26:4c:f5:10:5e:14:78:e6:60:4d:6d:06: 66:03:76:ed:72:2b:f2:ec:68:6c:32:9a:7e:8f:ee: 8a:cf:91:50:77:cf:a6:c1:63:30:ab:0a:91:33:69: 54:ac:cc:cf:b8:aa:49:b5:52:0e:c9:69:34:a5:54: 73:74:1a:11:a8:34:0d:6f:ba:4c:b4:09:0f:c0:44: 88:a5:2b:0f:d4:e1:fc:eb:3e:2d:6f:73:b3:c8:fc: 3d:84:4a:61:2c:38:f1:7b:57:6d:a1:56:35:bc:1f: de:b1:46:1d:ba:f6:be:b5:85:05:46:b8:00:97:c4: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:57:6C:D4:72:D3:18:60:F2:2D:9D:7C:09:6D:9D:94:AE:0D:45:FF X509v3 Authority Key Identifier: keyid:4B:28:F5:F3:A9:BE:6C:95:5F:F1:BE:0F:7B:50:80:3A:B1:7E:B4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Syj186m-bJVf8b4Pe1CAOrF-tGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC324/982C761231E011EF99953D22C4F9AE02/Syj186m-bJVf8b4Pe1CAOrF-tGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1a:99:8f:7c:93:6b:41:95:6f:8a:11:cf:67:78:ae:0c:c1: dd:2a:7e:35:c4:1a:3a:a5:3e:e6:15:c8:84:e1:d4:b8:b5:81: 13:6a:a9:a5:89:5d:21:12:4a:6e:dc:be:45:dd:24:75:a0:e2: 0e:1b:d0:40:e5:82:ad:85:3f:5a:5d:e4:da:6e:6d:b7:af:45: 7c:f8:f9:f7:3a:c4:ee:d9:59:e2:72:0d:c2:1d:1d:49:56:e1: 1a:6e:a5:a4:00:be:3e:da:fe:23:91:e9:be:24:35:ba:99:9d: 4a:d9:42:1a:09:36:12:45:e8:89:44:93:48:9b:e8:25:89:b6: 76:eb:dc:6c:f3:77:8a:61:a4:e5:ce:c6:03:40:ef:53:c0:0b: 00:ca:21:96:48:7e:8f:f0:94:16:75:08:f8:d7:25:9c:f6:5c: de:be:ee:18:d6:bc:4e:59:c4:c1:dc:f9:fd:ea:0f:df:6d:e9: 2a:34:b5:42:26:3c:6e:ec:c2:77:ae:8a:05:80:d3:3a:8c:f1: 53:b7:63:35:98:ce:75:e5:46:20:2a:f1:8d:f4:d8:b2:be:e5: b6:77:ce:d8:dd:5a:3e:b2:b0:f6:78:37:89:69:11:71:65:fb: 4e:1b:2d:0b:19:c4:ba:80:87:eb:c2:51:17:ea:ef:f7:02:90: 09:41:82:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMjQxMTAvBgNVBAUTKDRCMjhGNUYzQTlCRTZDOTU1RkYxQkUwRjdCNTA4MDNB QjE3RUI0NjAwHhcNMjUwNDI1MDUxNDI1WhcNMjUwNTAyMDUxNDI1WjAYMRYwFAYD VQQDEw02ODBiMWEzMS0xMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArul2Wqw78oovZFkVUS5IPqWVRj1woirjiSWRT3Wpt+VpQRLzPAZWLdJ9wGgM n3/JoQmxmKkjhWp71uK5CLU7Skgf+17Es18iMsuKBMJ9qz6y/ZfmY11k2tymhFeT 7Bowm9RvwEmE48We0WSbJ+vf+/iEw7Yebcdrt1XsYFQHbjDml1LC8d+lbNImTPUQ XhR45mBNbQZmA3btcivy7GhsMpp+j+6Kz5FQd8+mwWMwqwqRM2lUrMzPuKpJtVIO yWk0pVRzdBoRqDQNb7pMtAkPwESIpSsP1OH86z4tb3OzyPw9hEphLDjxe1dtoVY1 vB/esUYduva+tYUFRrgAl8Tn+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVXbNRy 0xhg8i2dfAltnZSuDUX/MB8GA1UdIwQYMBaAFEso9fOpvmyVX/G+D3tQgDqxfrRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMyNC85ODJDNzYxMjMx RTAxMUVGOTk5NTNEMjJDNEY5QUUwMi9TeWoxODZtLWJKVmY4YjRQZTFDQU9yRi10 R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N5ajE4Nm0tYkpWZjhiNFBlMUNBT3JGLXRHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMyNC85ODJDNzYxMjMxRTAxMUVGOTk5NTNEMjJDNEY5QUUwMi9TeWoxODZtLWJK VmY4YjRQZTFDQU9yRi10R0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArGpmPfJNrQZVvihHPZ3iuDMHdKn41xBo6pT7mFciE4dS4tYETaqml iV0hEkpu3L5F3SR1oOIOG9BA5YKthT9aXeTabm23r0V8+Pn3OsTu2Vnicg3CHR1J VuEabqWkAL4+2v4jkem+JDW6mZ1K2UIaCTYSReiJRJNIm+glibZ269xs83eKYaTl zsYDQO9TwAsAyiGWSH6P8JQWdQj41yWc9lzevu4Y1rxOWcTB3Pn96g/fbekqNLVC Jjxu7MJ3rooFgNM6jPFTt2M1mM515UYgKvGN9NiyvuW2d87Y3Vo+srD2eDeJaRFx ZftOGy0LGcS6gIfrwlEX6u/3ApAJQYI7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:43 2025 by rpki-client