$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json) Hash identifier: f6HohEiAMvBOMB0KgPwVv6CI2asZI4TcmkqG9bnFlxw= Subject key identifier: F5:02:81:D9:1E:E1:79:E5:A7:9E:7E:43:8C:44:7E:76:ED:01:49:AB Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Certificate serial: 3473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft Manifest number: 3473 Signing time: Sun 04 May 2025 15:09:22 +0000 Manifest this update: Sun 04 May 2025 15:09:21 +0000 Manifest next update: Sun 11 May 2025 15:09:21 +0000 Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: yW8TTt6NETAVBXA3TLErxYUExkNxl9s9CB8KgfJkKNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13427 (0x3473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Validity Not Before: May 4 15:09:21 2025 GMT Not After : May 11 15:09:21 2025 GMT Subject: CN=68178321-07d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0f:c1:3a:84:24:96:99:66:cf:94:5e:d5:61: f4:3c:d0:1d:4a:d1:d4:69:5f:17:39:59:15:2b:9d: 64:e5:f1:01:24:b6:e3:9e:04:34:74:94:72:1a:a1: bf:eb:17:c2:19:87:fa:2f:dc:22:f7:b1:db:c6:4a: ba:77:e2:d6:e2:d8:62:26:a5:21:ff:b0:a9:85:00: 74:7a:48:19:54:fa:90:4e:ab:73:90:c9:af:13:f4: 5d:0e:0e:81:9b:64:31:98:c4:0a:96:a1:34:92:f1: 10:d9:f6:cf:98:ad:50:ec:c6:14:57:c3:50:40:58: 67:96:5f:b6:da:25:8b:22:99:0d:00:fd:44:d5:dc: 73:0b:26:82:8b:9b:b4:af:6a:6c:17:7d:af:8d:95: 77:7c:d2:a9:e0:81:d5:fb:78:2f:f5:6f:01:61:55: 11:4f:bb:04:4a:d4:ba:0a:d5:17:9c:6b:d0:64:94: 67:7e:38:34:87:58:08:2f:69:95:b8:a9:ec:83:51: 71:27:3e:c6:17:bd:9a:d3:e4:06:f0:31:cb:03:38: 5e:3c:50:60:55:33:65:aa:95:5e:18:ca:9a:57:d7: 29:fb:04:16:3c:8a:ba:6f:0a:30:0d:71:47:55:89: f9:87:d4:ba:86:3c:a9:63:ff:ca:c1:8b:db:0e:72: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:02:81:D9:1E:E1:79:E5:A7:9E:7E:43:8C:44:7E:76:ED:01:49:AB X509v3 Authority Key Identifier: keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1b:6c:0a:4b:db:01:09:92:0c:3d:2f:d3:83:79:0a:63:64: 98:c0:e9:34:cd:bf:25:f0:4d:90:b4:3e:0a:2f:d6:7a:a7:9f: 10:f5:61:39:bc:c5:50:83:f2:ca:cf:3b:68:43:08:73:15:cc: b8:2d:49:1a:2e:2a:b8:cd:8b:a7:64:bd:20:06:65:67:4b:a5: c1:64:ae:f1:e4:1d:92:3f:8a:1b:3f:f4:a8:ae:18:97:0c:95: 45:bd:8c:8d:83:91:07:b3:29:25:49:03:df:e3:e6:69:e7:d8: 89:50:33:2d:29:79:42:e0:f8:5d:d6:86:fa:4f:83:96:7c:30: 5f:47:72:07:33:0e:ce:87:cc:23:8f:9c:d8:ba:e4:f3:84:7d: 5f:c5:f5:83:e7:32:70:c4:01:68:d9:26:2e:25:54:2a:16:6c: bd:19:41:a9:b5:2c:ee:80:50:5f:2e:1c:7c:5e:13:41:8c:7d: 42:16:02:97:f3:cd:e0:11:15:f4:71:c5:89:a1:2e:ce:65:23: 07:9b:73:34:a1:55:e8:5e:10:f0:5a:bb:e1:87:c2:34:26:59: aa:02:56:5d:f5:b6:67:8b:b3:fe:9b:56:02:82:f1:82:45:04: 3f:c0:a9:bb:ad:82:c0:39:69:26:b1:09:75:e4:17:11:77:a7: a1:32:89:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGMDExMTAvBgNVBAUTKEYxMjYwRDY1MzA1RTNBODk1REIyQzY5MUI2QURDMDNF NTE5RjNEMDAwHhcNMjUwNTA0MTUwOTIxWhcNMjUwNTExMTUwOTIxWjAYMRYwFAYD VQQDEw02ODE3ODMyMS0wN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Q/BOoQklplmz5Re1WH0PNAdStHUaV8XOVkVK51k5fEBJLbjngQ0dJRyGqG/ 6xfCGYf6L9wi97Hbxkq6d+LW4thiJqUh/7CphQB0ekgZVPqQTqtzkMmvE/RdDg6B m2QxmMQKlqE0kvEQ2fbPmK1Q7MYUV8NQQFhnll+22iWLIpkNAP1E1dxzCyaCi5u0 r2psF32vjZV3fNKp4IHV+3gv9W8BYVURT7sEStS6CtUXnGvQZJRnfjg0h1gIL2mV uKnsg1FxJz7GF72a0+QG8DHLAzhePFBgVTNlqpVeGMqaV9cp+wQWPIq6bwowDXFH VYn5h9S6hjypY//KwYvbDnIhiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUCgdke 4Xnlp55+Q4xEfnbtAUmrMB8GA1UdIwQYMBaAFPEmDWUwXjqJXbLGkbatwD5Rnz0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0YwMS9DNEI4OEJGMDFE QTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9vbGRzc2FSdHEzQVBsR2ZQ UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTWU5aVEJlT29sZHNzYVJ0cTNBUGxHZlBRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0YwMS9DNEI4OEJGMDFEQTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9v bGRzc2FSdHEzQVBsR2ZQUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbG2wKS9sBCZIMPS/Tg3kKY2SYwOk0zb8l8E2QtD4KL9Z6p58Q9WE5 vMVQg/LKzztoQwhzFcy4LUkaLiq4zYunZL0gBmVnS6XBZK7x5B2SP4obP/SorhiX DJVFvYyNg5EHsyklSQPf4+Zp59iJUDMtKXlC4Phd1ob6T4OWfDBfR3IHMw7Oh8wj j5zYuuTzhH1fxfWD5zJwxAFo2SYuJVQqFmy9GUGptSzugFBfLhx8XhNBjH1CFgKX 883gERX0ccWJoS7OZSMHm3M0oVXoXhDwWrvhh8I0JlmqAlZd9bZni7P+m1YCgvGC RQQ/wKm7rYLAOWkmsQl15BcRd6ehMolG -----END CERTIFICATE-----Generated at Mon May 5 09:58:57 2025 by rpki-client