$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: 5c0X7r8+M5pPlT1jPud6GV8avc/Pat9LNtPsXyPmB7U= Subject key identifier: 78:4A:E3:FA:07:04:AC:E0:27:FB:AB:2D:0F:9E:10:C5:8B:CD:F3:F3 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: 6E Signing time: Sun 06 Apr 2025 23:32:46 +0000 Manifest this update: Sun 06 Apr 2025 23:32:46 +0000 Manifest next update: Sun 13 Apr 2025 23:32:45 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: QlqYeukvHazeBnpQVFx6h4ge42y35li/fD483/sRxfQ=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 23:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE Validity Not Before: Apr 6 23:32:46 2025 GMT Not After : Apr 13 23:32:45 2025 GMT Subject: CN=67f30f1e-3b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:27:1a:1c:15:46:46:24:5f:db:b3:29:7f: 74:3f:5d:87:41:67:8e:64:83:7d:e6:2f:34:d7:5c: b5:ff:89:9a:e8:c9:d1:9d:99:ca:a7:3d:00:ac:4d: 8f:fa:a3:e9:a9:9d:07:6e:bb:51:e2:7e:b9:d9:35: 60:ff:99:1e:b7:db:43:15:69:1a:a4:74:77:d3:4d: 6e:d1:59:9c:73:4f:6e:9a:a7:89:75:1a:b6:e1:8c: e4:d5:a3:ab:16:d3:4b:80:fb:df:b7:ef:45:95:94: 6c:27:51:c4:19:9d:3d:26:42:e4:9a:fa:aa:94:61: 4b:0d:de:6b:94:bf:33:3e:52:a4:8f:04:85:47:ff: e6:5f:f4:ac:7f:39:5d:14:f7:ea:29:3a:c5:83:ad: ca:37:9d:53:01:c8:78:c6:1c:ef:4f:42:d5:a5:00: af:7d:fd:f5:96:de:b0:ec:43:7c:52:05:c7:c5:b5: 59:06:29:10:30:05:b2:c6:8a:f1:01:35:87:5e:3c: a8:b7:9f:ff:a2:d7:36:b4:ae:b9:41:da:b9:7b:e3: ff:89:dc:8b:49:d8:ee:d4:77:13:d5:f7:70:95:06: e8:21:9e:67:ee:86:a7:20:c5:cc:79:65:e4:89:ac: 5c:c5:ec:e2:e9:2c:a1:18:ac:02:7d:2d:1b:85:60: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:E3:FA:07:04:AC:E0:27:FB:AB:2D:0F:9E:10:C5:8B:CD:F3:F3 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:e6:85:9f:dc:53:b1:e7:fb:11:fc:da:ca:e5:cc:f8:be:e4: 1a:d7:7a:c9:23:f8:db:2e:bd:18:a8:fb:46:f6:fc:cf:6a:64: fa:43:fe:c7:48:84:f3:b8:00:e1:d0:13:a5:da:04:0f:bd:7b: b0:f1:04:bc:0e:92:ae:aa:ec:57:64:40:a4:45:38:4d:34:50: b3:03:ff:b3:81:27:d6:99:7a:1c:18:ab:e7:3d:ce:93:37:18: a9:04:5b:11:3e:cd:a1:79:b9:f1:86:a8:d9:df:2a:dd:61:0c: 91:0c:21:53:f9:ff:81:fa:45:65:d5:b6:6d:d4:13:b6:5c:f3: cb:de:44:70:7a:e5:8d:c3:49:53:6e:99:b9:1a:be:17:86:ef: d0:98:9d:16:ed:56:9a:f4:87:fd:20:b2:08:29:a8:6a:1e:48: dc:fc:d2:96:e0:a2:64:b1:29:6f:a5:bb:52:34:b8:88:f0:2a: 45:7f:81:31:99:e3:5d:7f:02:f1:be:05:71:0e:2a:43:00:01: 7a:51:9b:37:a1:e8:07:a7:f1:9f:36:a8:41:58:6b:63:67:7b: 5b:9b:f8:8e:6f:43:1c:69:35:4f:7f:27:25:43:25:30:7b:e4: 4a:f8:1c:37:e5:d0:69:54:41:b8:42:67:d4:de:9c:e5:52:54: 3a:0f:76:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTNCRTExMC8GA1UEBRMoNEIyQzc3QkMyREY0M0M3Mjg0RDAxRTQ1QjEyREIzQkRG MDA5MTZEMTAeFw0yNTA0MDYyMzMyNDZaFw0yNTA0MTMyMzMyNDVaMBgxFjAUBgNV BAMTDTY3ZjMwZjFlLTNiOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0LCcaHBVGRiRf27Mpf3Q/XYdBZ45kg33mLzTXXLX/iZroydGdmcqnPQCsTY/6 o+mpnQduu1HifrnZNWD/mR6320MVaRqkdHfTTW7RWZxzT26ap4l1GrbhjOTVo6sW 00uA+9+370WVlGwnUcQZnT0mQuSa+qqUYUsN3muUvzM+UqSPBIVH/+Zf9Kx/OV0U 9+opOsWDrco3nVMByHjGHO9PQtWlAK99/fWW3rDsQ3xSBcfFtVkGKRAwBbLGivEB NYdePKi3n/+i1za0rrlB2rl74/+J3ItJ2O7UdxPV93CVBughnmfuhqcgxcx5ZeSJ rFzF7OLpLKEYrAJ9LRuFYHZRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeErj+gcE rOAn+6stD54QxYvN8/MwHwYDVR0jBBgwFoAUSyx3vC30PHKE0B5FsS2zvfAJFtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBM0JFLzY3OEUxNkIwNkZD RTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3l4M3ZDMzBQSEtFMEI1RnNTMnp2ZkFKRnRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB M0JFLzY3OEUxNkIwNkZDRTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhL RTBCNUZzUzJ6dmZBSkZ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM3mhZ/cU7Hn+xH82srlzPi+5BrXeskj+NsuvRio+0b2/M9qZPpD/sdI hPO4AOHQE6XaBA+9e7DxBLwOkq6q7FdkQKRFOE00ULMD/7OBJ9aZehwYq+c9zpM3 GKkEWxE+zaF5ufGGqNnfKt1hDJEMIVP5/4H6RWXVtm3UE7Zc88veRHB65Y3DSVNu mbkavheG79CYnRbtVpr0h/0gsggpqGoeSNz80pbgomSxKW+lu1I0uIjwKkV/gTGZ 411/AvG+BXEOKkMAAXpRmzeh6Aen8Z82qEFYa2Nne1ub+I5vQxxpNU9/JyVDJTB7 5Er4HDfl0GlUQbhCZ9TenOVSVDoPdmI= -----END CERTIFICATE-----Generated at Mon Apr 7 20:26:57 2025 by rpki-client