$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json) Hash identifier: dhyodDy0i40iX2ihzESAlofjnjKGeZRsfon7qDnv/iM= Subject key identifier: 63:B7:D2:29:F2:88:51:63:F8:BA:85:22:D7:DD:2A:B1:72:BF:A5:D0 Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft Manifest number: 34AB Signing time: Fri 22 Aug 2025 15:12:52 +0000 Manifest this update: Fri 22 Aug 2025 15:12:51 +0000 Manifest next update: Fri 29 Aug 2025 15:12:51 +0000 Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: Ozy6xHZjDOF4bDTiwRzlKVHM2XBjUZm/OaP0+DG4efA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Validity Not Before: Aug 22 15:12:51 2025 GMT Not After : Aug 29 15:12:51 2025 GMT Subject: CN=68a888f3-1e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:f6:46:92:bd:0c:ce:4e:82:6c:8f:8d:19: 31:82:f5:3d:b0:b1:2f:28:e5:15:1d:30:68:95:12: 9f:81:0c:21:7c:58:b5:3f:51:67:44:ca:3d:2b:93: aa:ca:51:13:7e:53:98:93:53:9b:52:32:6d:4b:54: 0a:3b:fc:9f:2e:dd:74:e9:a6:bf:20:81:9f:63:66: 5f:4f:f8:6d:7b:a4:1c:64:00:79:98:0b:a2:de:a4: b1:7e:e0:69:14:2e:0e:b0:58:ce:17:9e:a4:09:28: b5:8c:fc:4f:e4:34:98:5f:80:93:ed:48:eb:9d:11: d5:af:2d:9d:8d:e0:f5:7d:75:0e:5e:b8:c1:d4:65: 85:62:f4:08:2a:c9:e4:36:f9:fe:a0:6f:f2:65:34: fd:4e:3a:90:2c:67:00:30:dd:cb:5e:15:60:57:eb: 32:7c:d5:8f:65:0e:9a:74:fd:69:2d:bd:1b:0a:f4: ff:f7:1e:6d:d7:90:03:4a:05:f3:8e:55:5e:02:1f: 04:d0:45:03:bf:34:3d:30:8b:23:e8:63:3a:ad:10: e7:dc:59:3f:a7:68:f2:2c:5d:f7:b9:27:09:18:43: 0e:a1:a3:4c:58:cc:f8:26:fa:3f:63:f6:81:69:1b: af:70:84:97:d6:8a:ef:96:21:fd:12:59:6e:db:a7: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B7:D2:29:F2:88:51:63:F8:BA:85:22:D7:DD:2A:B1:72:BF:A5:D0 X509v3 Authority Key Identifier: keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4b:92:94:21:07:ad:76:a6:1a:eb:ca:06:17:07:24:2c:4a: cc:48:a1:67:0e:d0:39:70:88:d0:8c:6a:3d:71:0a:85:7e:61: 02:19:6b:3c:e9:9d:57:53:a9:27:00:f8:d8:de:e3:f4:98:77: 7a:56:6d:7e:83:40:1c:1c:e0:11:ca:7c:6a:e8:74:5a:06:62: 53:76:b1:89:4a:02:4b:95:66:64:b4:35:99:c1:4a:59:d8:22: 92:c8:8d:59:99:7b:e0:b8:9a:9b:15:d9:05:59:aa:3d:5e:02: 29:70:bb:fd:6c:67:2b:b9:c2:10:47:d4:01:47:f0:50:07:ed: 7b:09:c8:81:f7:ce:9c:12:fe:aa:d6:5f:79:1f:a1:4d:05:92: ba:40:b2:38:55:44:f7:91:24:4a:f0:d5:71:f2:9f:4d:71:8b: 7c:39:47:a5:ab:13:2f:ca:3d:e6:46:41:0e:15:80:21:69:bc: fe:74:ad:36:fc:71:fc:3f:b9:a4:56:4d:82:a4:40:4a:15:08: 83:c0:83:a1:04:46:26:14:38:93:87:df:ff:77:8b:d2:57:d7: 8c:56:c6:8c:92:ef:c9:34:64:9e:eb:92:70:5a:46:7b:97:c8: e4:0d:2f:e7:02:65:ac:f9:84:8b:58:aa:3d:a9:cc:a7:9c:e9: 9a:8c:f4:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGMDExMTAvBgNVBAUTKEYxMjYwRDY1MzA1RTNBODk1REIyQzY5MUI2QURDMDNF NTE5RjNEMDAwHhcNMjUwODIyMTUxMjUxWhcNMjUwODI5MTUxMjUxWjAYMRYwFAYD VQQDEw02OGE4ODhmMy0xZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstX2RpK9DM5OgmyPjRkxgvU9sLEvKOUVHTBolRKfgQwhfFi1P1FnRMo9K5Oq ylETflOYk1ObUjJtS1QKO/yfLt106aa/IIGfY2ZfT/hte6QcZAB5mAui3qSxfuBp FC4OsFjOF56kCSi1jPxP5DSYX4CT7UjrnRHVry2djeD1fXUOXrjB1GWFYvQIKsnk Nvn+oG/yZTT9TjqQLGcAMN3LXhVgV+syfNWPZQ6adP1pLb0bCvT/9x5t15ADSgXz jlVeAh8E0EUDvzQ9MIsj6GM6rRDn3Fk/p2jyLF33uScJGEMOoaNMWMz4Jvo/Y/aB aRuvcISX1orvliH9Ellu26ePswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO30iny iFFj+LqFItfdKrFyv6XQMB8GA1UdIwQYMBaAFPEmDWUwXjqJXbLGkbatwD5Rnz0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0YwMS9DNEI4OEJGMDFE QTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9vbGRzc2FSdHEzQVBsR2ZQ UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTWU5aVEJlT29sZHNzYVJ0cTNBUGxHZlBRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0YwMS9DNEI4OEJGMDFEQTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9v bGRzc2FSdHEzQVBsR2ZQUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwS5KUIQetdqYa68oGFwckLErMSKFnDtA5cIjQjGo9cQqFfmECGWs8 6Z1XU6knAPjY3uP0mHd6Vm1+g0AcHOARynxq6HRaBmJTdrGJSgJLlWZktDWZwUpZ 2CKSyI1ZmXvguJqbFdkFWao9XgIpcLv9bGcrucIQR9QBR/BQB+17CciB986cEv6q 1l95H6FNBZK6QLI4VUT3kSRK8NVx8p9NcYt8OUelqxMvyj3mRkEOFYAhabz+dK02 /HH8P7mkVk2CpEBKFQiDwIOhBEYmFDiTh9//d4vSV9eMVsaMku/JNGSe65JwWkZ7 l8jkDS/nAmWs+YSLWKo9qcynnOmajPRd -----END CERTIFICATE-----Generated at Sat Aug 23 18:34:13 2025 by rpki-client