$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: +XUtGhcLCpXtGsQ66o9D/ILWTiGC18VMqtM5/qWZAb4= Subject key identifier: D6:B9:A8:28:B2:B0:60:9E:90:24:03:E0:97:BE:BA:A3:DB:22:B2:52 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: 89 Signing time: Sun 01 Jun 2025 00:03:39 +0000 Manifest this update: Sun 01 Jun 2025 00:03:39 +0000 Manifest next update: Sun 08 Jun 2025 00:03:39 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: bPijOtno0AszoDnkCW57qWQiWwwIXD1IjlAYYGMcjbY=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Jun 1 00:03:39 2025 GMT Not After : Jun 8 00:03:39 2025 GMT Subject: CN=683b98db-a606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:85:a3:ef:89:1c:15:5a:0f:4d:3f:01:f7: 26:37:c0:bf:73:a7:61:41:69:a3:51:88:0c:2d:ca: d3:94:67:0d:43:70:86:f4:c8:b6:a4:f2:5d:56:cd: fe:10:96:15:f6:57:b7:71:bd:fb:ef:02:b6:ec:c4: f0:b3:5d:a6:6c:e9:1e:0e:99:21:be:ac:5a:08:8d: a5:8c:d9:93:c7:e5:b8:a7:da:6d:7d:ae:cd:1b:7d: 0d:98:48:f8:f4:f3:4f:26:6a:88:e3:62:d6:96:c7: c9:cc:e7:81:69:04:b9:c2:56:c9:af:3c:3a:63:cb: 9b:22:73:c5:3e:b4:73:0a:18:98:d9:ef:22:71:12: b7:ad:2b:e5:21:70:81:36:56:47:fd:d2:fe:f0:18: cf:82:3e:98:00:7a:47:10:25:36:e9:bb:e1:05:f3: 5d:91:eb:87:ac:cb:d8:3f:9f:e4:80:da:3f:b5:84: 46:eb:6a:79:54:06:77:22:2a:3d:c7:1c:36:1e:64: f9:63:af:36:9b:8e:b7:c8:a7:ac:df:15:a6:29:05: ed:d1:a0:62:d3:bf:5e:f0:f9:38:d7:69:3e:ef:dc: 95:8b:0b:d1:0f:33:57:f4:7b:bf:34:b9:9e:8a:33: eb:51:9c:0b:48:27:5a:f0:44:82:a0:24:6f:87:90: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B9:A8:28:B2:B0:60:9E:90:24:03:E0:97:BE:BA:A3:DB:22:B2:52 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:79:aa:9d:37:bd:60:6c:ca:6b:76:93:d5:00:cb:b6:e6:e5: 7e:5d:18:57:00:64:2b:c0:a2:6f:05:8c:4b:e1:02:aa:03:d0: f7:5a:35:66:c6:42:33:4a:bc:19:9f:59:49:ad:27:2e:46:29: bf:f3:a8:57:f5:b9:37:af:98:a0:66:8e:77:90:d5:ba:a3:e8: 85:00:b9:ca:0a:2a:c4:b4:32:95:c1:be:94:f0:f2:03:37:08: d0:9c:69:bb:31:81:72:3a:a0:a4:a0:45:8c:64:53:2e:83:1d: 3a:8f:a4:40:10:9e:69:59:b0:c9:15:04:a3:75:b3:a9:42:d8: 84:46:e1:68:bf:ca:67:f6:75:36:fd:ce:de:0b:4c:b8:3f:6f: 62:af:6b:4d:3c:1a:bc:c3:ec:70:33:5d:81:5b:34:ab:86:82: 29:28:5c:8b:80:a9:ea:48:e9:8d:c6:a2:24:81:42:c0:88:a0: 4a:6f:2d:d3:0f:23:2a:8c:fe:aa:bf:29:7c:e7:e5:2a:dc:cb: 11:80:b7:7a:3c:cd:f2:ee:37:69:5f:f4:95:00:8b:a0:73:b9: 3b:98:73:48:11:a7:e3:d0:b5:9a:11:83:bc:12:a2:2d:ad:a2: bf:96:19:d7:c6:ed:bd:fe:ea:9c:63:3b:04:98:1a:87:51:08: 1e:36:e6:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUwNjAxMDAwMzM5WhcNMjUwNjA4MDAwMzM5WjAYMRYwFAYD VQQDEw02ODNiOThkYi1hNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofuFo++JHBVaD00/AfcmN8C/c6dhQWmjUYgMLcrTlGcNQ3CG9Mi2pPJdVs3+ EJYV9le3cb377wK27MTws12mbOkeDpkhvqxaCI2ljNmTx+W4p9ptfa7NG30NmEj4 9PNPJmqI42LWlsfJzOeBaQS5wlbJrzw6Y8ubInPFPrRzChiY2e8icRK3rSvlIXCB NlZH/dL+8BjPgj6YAHpHECU26bvhBfNdkeuHrMvYP5/kgNo/tYRG62p5VAZ3Iio9 xxw2HmT5Y682m463yKes3xWmKQXt0aBi079e8Pk412k+79yViwvRDzNX9Hu/NLme ijPrUZwLSCda8ESCoCRvh5B0+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa5qCiy sGCekCQD4Je+uqPbIrJSMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaeaqdN71gbMprdpPVAMu25uV+XRhXAGQrwKJvBYxL4QKqA9D3WjVm xkIzSrwZn1lJrScuRim/86hX9bk3r5igZo53kNW6o+iFALnKCirEtDKVwb6U8PID NwjQnGm7MYFyOqCkoEWMZFMugx06j6RAEJ5pWbDJFQSjdbOpQtiERuFov8pn9nU2 /c7eC0y4P29ir2tNPBq8w+xwM12BWzSrhoIpKFyLgKnqSOmNxqIkgULAiKBKby3T DyMqjP6qvyl85+Uq3MsRgLd6PM3y7jdpX/SVAIugc7k7mHNIEafj0LWaEYO8EqIt raK/lhnXxu29/uqcYzsEmBqHUQgeNuYj -----END CERTIFICATE-----Generated at Mon Jun 2 18:51:35 2025 by rpki-client