$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: DBWeZm28ROG+OmoVeoAWkOhf62ek0Lmn64nyMfGoXW0= Subject key identifier: 4F:F2:42:B3:A3:29:73:01:A7:CD:6B:A0:FA:F4:CA:97:E3:01:79:2A Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: 99 Signing time: Thu 03 Jul 2025 00:07:39 +0000 Manifest this update: Thu 03 Jul 2025 00:07:38 +0000 Manifest next update: Thu 10 Jul 2025 00:07:38 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: 7yu1MZcFW0Gjn4uhTXshUL6eaoat18POVGVqbqpZ47E=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Jul 3 00:07:38 2025 GMT Not After : Jul 10 00:07:38 2025 GMT Subject: CN=6865c9cb-e7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:96:6d:36:4e:bc:91:5a:2e:7b:ed:bb:1d: 93:58:04:21:eb:09:33:eb:28:b9:7f:df:98:ed:82: 91:15:1c:e1:38:5b:04:ec:4e:01:57:7e:e9:fb:31: 9b:bf:65:fe:48:37:8b:06:80:c6:88:f1:f6:7a:6b: 7e:02:cf:64:0e:2f:d6:f3:67:71:01:cd:5b:64:a1: c0:f2:ec:9b:93:77:f5:64:3a:d9:86:fd:86:15:13: 80:ae:2a:fd:9d:18:51:40:a0:86:c0:91:c3:f6:7c: 5c:7e:4b:f7:94:67:2f:fd:2a:71:4b:0f:dd:ba:57: 1b:e0:9b:35:47:a0:fc:6d:29:ba:66:d7:c6:26:9c: 6d:3d:7a:06:66:ab:15:37:94:a8:85:30:a2:7e:ee: 8c:61:cc:22:53:d0:f4:97:54:13:e8:66:99:ab:34: cb:28:51:fa:d0:71:5e:c5:24:ef:15:8d:91:18:d2: 51:a4:11:aa:19:7f:6a:e3:96:bc:fa:4d:41:49:95: 47:dc:4e:48:bc:e4:a2:0f:74:b6:a0:cd:2d:ef:57: 77:e3:f4:5f:3c:35:aa:ff:af:59:9f:df:92:e3:bf: 9a:9e:17:eb:22:07:b2:2f:b7:da:74:f0:aa:98:5e: 9e:d0:6f:b2:fb:c8:dd:0d:11:33:92:34:26:c2:d9: 6f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F2:42:B3:A3:29:73:01:A7:CD:6B:A0:FA:F4:CA:97:E3:01:79:2A X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c1:c5:02:34:ab:08:f2:39:f7:24:4a:9c:a6:75:2a:a4:bd: e8:a9:2f:9c:33:76:19:03:b6:d3:45:84:d9:19:3d:83:6d:b0: 6c:c1:34:7a:e0:fc:e4:de:bf:0e:ba:d6:53:bb:5e:e4:46:5a: ad:8b:76:d1:ec:09:26:a2:8a:7a:0c:7b:f9:df:3f:b4:da:d5: f3:58:fc:b1:99:a8:92:6c:0a:88:ba:2c:02:f9:bd:b9:ed:99: d1:c8:28:77:f6:e8:17:2a:01:2a:f2:36:cc:d3:87:7e:5a:dd: 7c:51:67:34:2f:c0:e6:d7:dd:b7:0a:79:ce:72:a9:05:f5:8e: 60:af:f4:4f:63:d6:29:e3:57:99:f8:7f:f2:73:e2:bb:a8:b6: 15:67:59:64:6b:0d:5d:c3:e6:22:a7:85:13:a4:bd:b9:a1:9b: 5d:97:c5:e7:a6:9f:0d:8e:a7:99:2b:85:49:0b:fd:84:03:0e: bf:b3:2b:a3:0e:74:f5:7b:b1:a6:b9:d6:1a:b7:5b:b6:f8:ed: dd:89:8d:07:b1:bc:2f:c9:b1:c1:03:52:04:6c:f7:ee:dc:59: 5e:a7:24:e3:fe:e4:91:ef:43:98:7d:7d:8e:a8:b5:58:e0:cb: 53:07:50:25:1e:30:b7:21:da:06:ee:6f:3c:86:a7:18:d8:fa: f1:8d:53:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUwNzAzMDAwNzM4WhcNMjUwNzEwMDAwNzM4WjAYMRYwFAYD VQQDEw02ODY1YzljYi1lN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPuWbTZOvJFaLnvtux2TWAQh6wkz6yi5f9+Y7YKRFRzhOFsE7E4BV37p+zGb v2X+SDeLBoDGiPH2emt+As9kDi/W82dxAc1bZKHA8uybk3f1ZDrZhv2GFROArir9 nRhRQKCGwJHD9nxcfkv3lGcv/SpxSw/dulcb4Js1R6D8bSm6ZtfGJpxtPXoGZqsV N5SohTCifu6MYcwiU9D0l1QT6GaZqzTLKFH60HFexSTvFY2RGNJRpBGqGX9q45a8 +k1BSZVH3E5IvOSiD3S2oM0t71d34/RfPDWq/69Zn9+S47+anhfrIgeyL7fadPCq mF6e0G+y+8jdDREzkjQmwtlvYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/yQrOj KXMBp81roPr0ypfjAXkqMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARwcUCNKsI8jn3JEqcpnUqpL3oqS+cM3YZA7bTRYTZGT2DbbBswTR6 4Pzk3r8OutZTu17kRlqti3bR7Akmoop6DHv53z+02tXzWPyxmaiSbAqIuiwC+b25 7ZnRyCh39ugXKgEq8jbM04d+Wt18UWc0L8Dm1923CnnOcqkF9Y5gr/RPY9Yp41eZ +H/yc+K7qLYVZ1lkaw1dw+Yip4UTpL25oZtdl8Xnpp8NjqeZK4VJC/2EAw6/syuj DnT1e7GmudYat1u2+O3diY0HsbwvybHBA1IEbPfu3FlepyTj/uSR70OYfX2OqLVY 4MtTB1AlHjC3IdoG7m88hqcY2PrxjVOi -----END CERTIFICATE-----Generated at Thu Jul 3 23:32:01 2025 by rpki-client