$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json) Hash identifier: VQD5HntiMT2iWa7UD83Rr+VKrHo5dYQKVUrosLt/AG4= Subject key identifier: DE:83:4F:91:06:56:1E:04:5A:CA:98:F8:A0:BE:5E:BA:1C:B5:06:87 Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Certificate serial: 348F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft Manifest number: 348F Signing time: Sat 28 Jun 2025 15:07:52 +0000 Manifest this update: Sat 28 Jun 2025 15:07:51 +0000 Manifest next update: Sat 05 Jul 2025 15:07:51 +0000 Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: G74qeoS0eT2VkxOPSfe3Wi+B8x+I+eNkKldsuj1+Iqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13455 (0x348f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Validity Not Before: Jun 28 15:07:51 2025 GMT Not After : Jul 5 15:07:51 2025 GMT Subject: CN=68600547-9fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:a9:65:4f:91:29:69:18:f4:16:5f:49:16: b3:ca:f7:b2:d2:a3:97:c1:9b:b8:c1:12:14:c4:99: a6:bc:c5:8b:c8:85:cf:b8:c4:63:16:bf:dd:5c:23: f4:3c:7c:6b:d4:86:ee:26:ef:a4:92:c7:d2:26:dc: 56:48:ff:bd:10:89:fc:5e:0b:31:62:17:60:9a:9e: ca:12:3f:7c:8d:2d:cb:7c:3f:0c:f1:e9:f5:53:ea: 63:5c:2a:26:d8:e6:c1:c3:fb:8d:17:42:73:a1:c1: 0e:f5:5b:f4:e7:69:f5:e8:bf:14:5f:74:f8:67:39: 01:30:eb:95:b8:00:89:9d:10:b1:e4:06:8d:29:24: 80:35:92:2c:21:86:cd:4a:34:3c:ba:fd:3b:f8:93: 6d:82:13:5c:2c:45:04:03:d4:2e:ee:d8:b9:e3:41: 0c:05:2e:9f:53:c2:80:8d:a8:7c:59:f8:5c:81:14: 48:45:5e:c2:e6:0f:5d:e9:5a:15:76:b0:07:bb:2c: 90:d6:b6:d1:d3:cb:c2:d8:7c:b5:16:62:b1:ff:66: 1e:99:d8:a0:cf:ea:98:d3:35:e4:a5:67:a2:48:71: 1a:89:f3:1c:42:48:23:91:81:65:a3:fa:6a:25:45: 57:d9:9c:d4:3f:b5:c2:01:34:ff:63:db:0c:24:3d: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:83:4F:91:06:56:1E:04:5A:CA:98:F8:A0:BE:5E:BA:1C:B5:06:87 X509v3 Authority Key Identifier: keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1d:cc:1f:07:95:cc:92:71:76:3e:bd:18:06:d6:84:ac:74: d5:71:22:bb:14:39:76:f7:18:63:66:a2:51:14:fd:4b:61:40: b0:ae:22:69:1b:b9:bb:3c:ba:66:17:c2:e4:ab:d5:5b:90:b9: a5:8d:89:89:bc:a8:1a:b7:54:8f:c5:67:2f:f7:d0:f6:03:23: c5:4a:46:ed:e6:db:47:55:4e:73:ff:6e:74:73:24:68:19:98: d8:0c:f7:80:f9:c3:73:28:34:0f:8a:4d:31:1b:09:2c:b4:73: e0:c1:54:e1:09:cd:16:1e:98:1e:b8:c5:c1:42:42:cb:7b:73: 01:00:b3:c0:d2:61:65:9f:c4:cb:46:21:a6:e8:59:36:ba:62: db:ad:fa:58:fd:3e:be:43:bd:f7:c5:73:75:3d:08:35:85:10: 24:a5:83:6a:e0:88:e0:a7:2c:80:c3:8e:dc:5f:a8:63:e6:c7: 0b:01:84:4d:2d:86:6a:9d:6f:49:a4:f6:43:30:47:e2:ae:54: 37:6b:d1:98:73:77:a1:88:75:80:1d:d5:89:40:fe:45:96:40: 2c:d9:cb:01:df:69:3c:f5:be:aa:e8:f4:a2:8a:fa:f3:53:77: 19:7c:cd:af:ca:b6:b2:87:e5:88:b4:c7:5e:82:ae:5c:d6:82: 29:1a:3c:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGMDExMTAvBgNVBAUTKEYxMjYwRDY1MzA1RTNBODk1REIyQzY5MUI2QURDMDNF NTE5RjNEMDAwHhcNMjUwNjI4MTUwNzUxWhcNMjUwNzA1MTUwNzUxWjAYMRYwFAYD VQQDEw02ODYwMDU0Ny05ZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSKpZU+RKWkY9BZfSRazyvey0qOXwZu4wRIUxJmmvMWLyIXPuMRjFr/dXCP0 PHxr1IbuJu+kksfSJtxWSP+9EIn8XgsxYhdgmp7KEj98jS3LfD8M8en1U+pjXCom 2ObBw/uNF0JzocEO9Vv052n16L8UX3T4ZzkBMOuVuACJnRCx5AaNKSSANZIsIYbN SjQ8uv07+JNtghNcLEUEA9Qu7ti540EMBS6fU8KAjah8WfhcgRRIRV7C5g9d6VoV drAHuyyQ1rbR08vC2Hy1FmKx/2Yemdigz+qY0zXkpWeiSHEaifMcQkgjkYFlo/pq JUVX2ZzUP7XCATT/Y9sMJD3NwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6DT5EG Vh4EWsqY+KC+XroctQaHMB8GA1UdIwQYMBaAFPEmDWUwXjqJXbLGkbatwD5Rnz0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0YwMS9DNEI4OEJGMDFE QTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9vbGRzc2FSdHEzQVBsR2ZQ UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTWU5aVEJlT29sZHNzYVJ0cTNBUGxHZlBRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0YwMS9DNEI4OEJGMDFEQTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9v bGRzc2FSdHEzQVBsR2ZQUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbHcwfB5XMknF2Pr0YBtaErHTVcSK7FDl29xhjZqJRFP1LYUCwriJp G7m7PLpmF8Lkq9VbkLmljYmJvKgat1SPxWcv99D2AyPFSkbt5ttHVU5z/250cyRo GZjYDPeA+cNzKDQPik0xGwkstHPgwVThCc0WHpgeuMXBQkLLe3MBALPA0mFln8TL RiGm6Fk2umLbrfpY/T6+Q733xXN1PQg1hRAkpYNq4IjgpyyAw47cX6hj5scLAYRN LYZqnW9JpPZDMEfirlQ3a9GYc3ehiHWAHdWJQP5FlkAs2csB32k89b6q6PSiivrz U3cZfM2vyrayh+WItMdegq5c1oIpGjwc -----END CERTIFICATE-----Generated at Sun Jun 29 16:54:55 2025 by rpki-client