$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json) Hash identifier: l1gYz5oLLbO57Jak4jRJ2W/hqJ03YriV0SHHtNIwsnY= Subject key identifier: DB:24:3A:81:82:5E:91:3D:AD:DA:FC:8F:6B:E2:5B:17:FB:14:97:D0 Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Certificate serial: 3499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft Manifest number: 3499 Signing time: Fri 18 Jul 2025 15:13:52 +0000 Manifest this update: Fri 18 Jul 2025 15:13:51 +0000 Manifest next update: Fri 25 Jul 2025 15:13:51 +0000 Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: 7uChvBbq3zny45/JUxZZoO7+HFPJ1EcImBeapXT1MO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Validity Not Before: Jul 18 15:13:51 2025 GMT Not After : Jul 25 15:13:51 2025 GMT Subject: CN=687a64b0-0d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:46:39:91:f4:86:83:79:ab:e9:46:6d:15: 76:63:05:1e:e6:1e:9b:ad:2f:0d:ca:ac:19:ad:c5: c5:e8:e3:8a:ec:c8:79:14:03:31:73:48:9f:3b:c3: 10:7c:c5:7d:96:af:9c:1f:31:54:93:8e:67:36:29: 43:b0:b4:76:75:25:46:45:4f:77:ea:1f:13:af:50: 4e:1d:4c:8f:af:7f:56:24:6e:97:e1:d2:67:dd:77: b6:8f:70:bd:b6:39:c2:0f:e3:5e:fd:ae:39:c5:09: e7:3c:48:05:83:e0:d5:c6:7a:f9:b4:ae:66:bc:f4: 00:20:e3:75:88:03:87:7b:da:02:23:2e:c6:79:b9: a3:32:4e:6d:27:28:40:bc:14:d7:79:d9:76:67:b2: a2:aa:4a:56:99:9e:a8:01:be:b3:2b:1d:7d:8c:de: d8:dc:bf:be:d0:8a:56:b2:f2:c7:a5:cc:1b:00:9e: dd:62:35:db:93:22:44:37:cd:2a:6b:84:1e:ad:0c: dc:27:51:f2:04:ba:e5:3f:a1:24:81:5c:70:a2:88: ed:ed:04:37:09:4e:e9:bb:8f:3f:1f:fa:e3:0f:a3: 97:68:fb:87:a9:51:a5:19:5c:8f:df:42:58:19:11: 4a:f7:41:c4:f2:7b:f9:c3:ff:14:2a:69:8a:75:56: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:24:3A:81:82:5E:91:3D:AD:DA:FC:8F:6B:E2:5B:17:FB:14:97:D0 X509v3 Authority Key Identifier: keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:da:d3:09:12:9a:10:29:e9:fd:5b:fa:e9:37:77:0d:51:6a: 29:cf:57:02:94:40:78:a2:7a:0b:b8:d7:98:4b:aa:6a:3a:78: 5f:9f:f0:23:83:d2:e0:de:3c:71:73:f1:00:49:87:41:7f:62: e6:77:84:96:04:5e:c6:d5:14:3c:4f:c7:73:2b:fa:fd:0b:12: 6f:3f:59:2c:33:67:f9:f9:99:b8:38:74:e6:3b:5b:8e:1b:22: fa:87:58:cc:ad:bf:d4:a5:39:08:89:7b:19:07:de:16:50:7e: 73:b0:42:79:8a:03:28:16:13:92:6a:de:64:de:8e:6f:84:fa: 29:1e:50:ab:bd:3a:b6:2c:f4:5c:e1:33:41:1c:7c:27:55:3a: 91:8e:7a:b7:61:23:55:aa:36:89:00:2c:fc:f4:28:76:92:3a: ae:03:f3:50:71:5b:27:59:40:89:79:46:87:a5:c2:4c:ad:1b: 63:9b:cb:95:0b:27:15:ab:30:6e:85:57:02:c6:e8:35:e3:24: 27:54:3f:de:8e:18:01:6b:41:a1:30:15:0e:0b:27:35:6c:eb: 8a:d0:34:18:b5:e0:4f:88:ff:39:7f:08:b8:2c:60:90:6f:2f: 29:30:04:4b:53:09:01:de:5b:86:5c:18:57:8c:6c:eb:9c:67: 50:e3:05:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGMDExMTAvBgNVBAUTKEYxMjYwRDY1MzA1RTNBODk1REIyQzY5MUI2QURDMDNF NTE5RjNEMDAwHhcNMjUwNzE4MTUxMzUxWhcNMjUwNzI1MTUxMzUxWjAYMRYwFAYD VQQDEw02ODdhNjRiMC0wZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L1GOZH0hoN5q+lGbRV2YwUe5h6brS8NyqwZrcXF6OOK7Mh5FAMxc0ifO8MQ fMV9lq+cHzFUk45nNilDsLR2dSVGRU936h8Tr1BOHUyPr39WJG6X4dJn3Xe2j3C9 tjnCD+Ne/a45xQnnPEgFg+DVxnr5tK5mvPQAION1iAOHe9oCIy7GebmjMk5tJyhA vBTXedl2Z7KiqkpWmZ6oAb6zKx19jN7Y3L++0IpWsvLHpcwbAJ7dYjXbkyJEN80q a4QerQzcJ1HyBLrlP6EkgVxwoojt7QQ3CU7pu48/H/rjD6OXaPuHqVGlGVyP30JY GRFK90HE8nv5w/8UKmmKdVZLpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNskOoGC XpE9rdr8j2viWxf7FJfQMB8GA1UdIwQYMBaAFPEmDWUwXjqJXbLGkbatwD5Rnz0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0YwMS9DNEI4OEJGMDFE QTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9vbGRzc2FSdHEzQVBsR2ZQ UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTWU5aVEJlT29sZHNzYVJ0cTNBUGxHZlBRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0YwMS9DNEI4OEJGMDFEQTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9v bGRzc2FSdHEzQVBsR2ZQUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA2tMJEpoQKen9W/rpN3cNUWopz1cClEB4onoLuNeYS6pqOnhfn/Aj g9Lg3jxxc/EASYdBf2Lmd4SWBF7G1RQ8T8dzK/r9CxJvP1ksM2f5+Zm4OHTmO1uO GyL6h1jMrb/UpTkIiXsZB94WUH5zsEJ5igMoFhOSat5k3o5vhPopHlCrvTq2LPRc 4TNBHHwnVTqRjnq3YSNVqjaJACz89Ch2kjquA/NQcVsnWUCJeUaHpcJMrRtjm8uV CycVqzBuhVcCxug14yQnVD/ejhgBa0GhMBUOCyc1bOuK0DQYteBPiP85fwi4LGCQ by8pMARLUwkB3luGXBhXjGzrnGdQ4wXk -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:21 2025 by rpki-client