$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: ER1Y/lgsjthcAbiSyTDAn7qKMukuN3Jv2RpTPd254fg= Subject key identifier: 93:00:26:AE:0A:A1:0C:16:A8:7E:CE:52:1F:DC:1F:EE:3F:F6:67:21 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: A2 Signing time: Sun 20 Jul 2025 23:58:09 +0000 Manifest this update: Sun 20 Jul 2025 23:58:09 +0000 Manifest next update: Sun 27 Jul 2025 23:58:09 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: gFI0qbs0FFiW9sgUp2biKTP2TKV/1Uc1PUtMAtW9N7M=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Jul 20 23:58:09 2025 GMT Not After : Jul 27 23:58:09 2025 GMT Subject: CN=687d8291-8dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:9b:3e:74:08:b8:1f:35:ba:0a:c1:15:75: 66:ba:2f:42:df:17:80:a8:b2:a0:c2:74:a4:a5:f9: 26:60:9b:11:ef:96:03:c4:75:bd:6e:60:01:70:8b: 2e:50:58:f8:26:5d:90:e6:a7:e4:2f:49:d7:18:8b: ea:52:62:67:a1:bc:c2:b7:b5:87:a8:bb:15:25:e6: da:72:6e:33:e4:54:8d:31:ef:9d:38:d2:e4:3c:05: 71:e8:95:87:83:55:0f:29:63:23:6b:25:ce:4f:96: be:8b:95:a1:22:43:cc:7c:82:75:6c:b6:c6:e4:ab: d1:21:c5:bf:3b:4b:62:ee:bc:61:e8:79:90:47:de: ea:14:03:97:b7:ed:1b:ca:7f:8c:40:14:cb:58:75: c8:de:30:d1:aa:f2:7d:7f:c2:51:cf:fa:64:0f:a4: 6e:cf:fc:1c:1d:93:2d:8b:e3:49:1a:f5:e5:c4:b1: dc:58:a0:bf:5d:a9:b3:c5:2a:b4:b5:5b:ac:cf:7b: ad:10:8c:67:0b:38:06:8b:84:9e:b3:96:65:6f:de: ec:23:c8:81:16:04:80:f9:88:76:4d:7d:8c:29:b5: 87:c1:28:34:70:b0:6a:69:81:cd:e6:32:76:40:2f: 1f:d9:45:e5:43:08:e3:46:03:b7:b2:04:b8:23:0f: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:00:26:AE:0A:A1:0C:16:A8:7E:CE:52:1F:DC:1F:EE:3F:F6:67:21 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2c:44:c7:51:a2:cd:44:d9:96:0a:18:31:82:f0:89:24:72: f7:44:e0:ce:96:14:c9:73:d2:4c:0d:a9:78:da:28:e6:3f:82: 23:7e:91:f2:87:e7:3d:b2:99:51:14:ea:dd:15:6a:81:de:f0: ef:10:fd:97:e5:57:1d:94:d7:06:c3:14:84:a1:d3:59:e9:b8: 22:1b:2c:2e:a9:a8:50:93:2d:1a:12:93:f3:8c:0d:55:90:45: 46:23:1b:25:c7:d0:73:d7:f8:1b:b0:bd:d5:bf:90:a9:0d:2c: 66:f9:47:4b:af:d6:6d:13:2c:a5:3d:27:bf:aa:2a:8e:86:ab: 28:fa:c5:0a:01:67:45:49:fd:be:dc:97:8a:1f:4a:46:01:69: 11:a3:a0:1c:78:4d:1c:f2:72:22:6f:73:21:ae:e8:2b:e4:d8: 19:60:aa:7e:3d:a7:e5:cc:08:4f:c8:cb:ce:42:94:ce:65:7d: 62:71:99:69:0b:99:29:67:ad:16:76:91:02:c9:25:a4:7d:15: e7:28:ed:15:ab:22:75:6f:6d:cc:31:43:7a:e5:91:61:49:ba: ad:b7:1a:37:3f:ed:72:9f:ed:5b:76:a3:44:a5:3d:4f:71:68: 53:64:2a:b9:7d:df:66:a8:ba:ec:eb:e5:01:41:be:0c:c7:c2: 52:46:da:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUwNzIwMjM1ODA5WhcNMjUwNzI3MjM1ODA5WjAYMRYwFAYD VQQDEw02ODdkODI5MS04ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo42bPnQIuB81ugrBFXVmui9C3xeAqLKgwnSkpfkmYJsR75YDxHW9bmABcIsu UFj4Jl2Q5qfkL0nXGIvqUmJnobzCt7WHqLsVJebacm4z5FSNMe+dONLkPAVx6JWH g1UPKWMjayXOT5a+i5WhIkPMfIJ1bLbG5KvRIcW/O0ti7rxh6HmQR97qFAOXt+0b yn+MQBTLWHXI3jDRqvJ9f8JRz/pkD6Ruz/wcHZMti+NJGvXlxLHcWKC/XamzxSq0 tVusz3utEIxnCzgGi4Ses5Zlb97sI8iBFgSA+Yh2TX2MKbWHwSg0cLBqaYHN5jJ2 QC8f2UXlQwjjRgO3sgS4Iw9NYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMAJq4K oQwWqH7OUh/cH+4/9mchMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6LETHUaLNRNmWChgxgvCJJHL3RODOlhTJc9JMDal42ijmP4IjfpHy h+c9splRFOrdFWqB3vDvEP2X5VcdlNcGwxSEodNZ6bgiGywuqahQky0aEpPzjA1V kEVGIxslx9Bz1/gbsL3Vv5CpDSxm+UdLr9ZtEyylPSe/qiqOhqso+sUKAWdFSf2+ 3JeKH0pGAWkRo6AceE0c8nIib3Mhrugr5NgZYKp+PaflzAhPyMvOQpTOZX1icZlp C5kpZ60WdpECySWkfRXnKO0VqyJ1b23MMUN65ZFhSbqttxo3P+1yn+1bdqNEpT1P cWhTZCq5fd9mqLrs6+UBQb4Mx8JSRtop -----END CERTIFICATE-----Generated at Mon Jul 21 12:45:10 2025 by rpki-client