$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: wW0eQS23i/B651R/WihTFd08ddN2ORDF21QM4FEs0O4= Subject key identifier: 2F:C4:1E:9F:DA:83:A3:38:76:13:42:6F:F1:1E:0F:BA:A3:2C:F0:D5 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 01:23:09 +0000 Manifest this update: Sun 19 Oct 2025 01:23:09 +0000 Manifest next update: Sun 26 Oct 2025 01:23:09 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: Y9wg+Z9JHRLDjhw9HBbWX2tL4xD0KT5f2cjjOuSu9HE=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: uoDT5F7S64QhLS2Zprh4X3DnbqtCN+iY00UgCBuklGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Oct 19 01:23:09 2025 GMT Not After : Oct 26 01:23:09 2025 GMT Subject: CN=68f43d7d-88d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:8c:03:be:98:40:3e:15:03:2a:e5:3e:54: 94:33:79:79:3c:4e:b7:68:d6:f3:c3:0b:2d:51:f0: 8d:79:bc:f9:1d:56:89:2a:72:51:09:b7:75:95:fd: b1:5c:2c:e6:ca:03:0b:42:7c:58:36:6c:c3:c7:e9: ae:60:4c:a0:06:54:73:2d:60:e9:19:12:65:74:d0: 9b:bc:c3:ff:9d:55:c4:a1:be:66:96:aa:8c:be:02: b0:cd:aa:f4:5f:fd:dd:33:1b:d5:bb:20:35:75:92: 5f:67:db:57:2c:5f:10:18:1e:b8:ce:81:19:db:bf: f5:59:29:da:80:da:a8:87:40:2b:60:21:2d:17:24: 57:f2:ba:53:6e:de:b7:0a:84:6c:8c:69:36:f8:54: 5d:0f:58:c4:79:ca:53:35:97:2b:51:b8:26:9a:3c: be:3a:0a:12:2b:57:79:62:b5:6b:ee:a5:76:c7:a4: df:be:56:e0:df:d2:f0:ea:8a:b5:c4:b5:30:3f:14: 05:aa:a8:98:29:ac:d1:a8:4f:8b:cb:0d:19:b6:e7: b1:e5:6e:af:e0:d9:78:52:06:86:57:39:f6:22:31: f2:a9:35:7a:77:0d:7a:91:d7:42:5d:16:37:93:3e: 65:cd:5e:57:9d:69:bf:5e:fc:17:5e:a7:0c:67:a0: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C4:1E:9F:DA:83:A3:38:76:13:42:6F:F1:1E:0F:BA:A3:2C:F0:D5 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:8f:cf:cc:7d:66:37:29:ec:2f:67:05:aa:cb:f2:7d:0e:f7: b5:61:b3:39:3a:d8:44:c2:0e:19:84:8f:03:8d:f6:14:59:5b: 95:03:87:4a:7c:d8:40:6e:3e:7e:43:c0:15:63:63:a2:7c:f9: 9d:5a:3f:28:1e:1c:a6:84:e0:74:76:d7:c5:b8:9b:4a:62:6e: 98:ff:32:a2:b1:24:48:65:c3:fb:e6:d3:a7:36:f5:1f:77:23: 78:9c:9d:fc:87:0e:2d:08:9c:54:82:64:c2:c1:88:7d:cd:c0: f5:37:19:90:5f:66:ba:ad:e3:f2:dd:15:8b:37:99:96:eb:58: 76:b4:f4:ec:fd:56:97:d7:2c:cf:61:ba:e8:d8:be:19:67:c9: df:d9:5a:88:c6:62:62:f6:27:d0:af:ef:d8:08:ff:0b:3b:c6: ba:e4:a8:b5:d8:3c:c7:8d:b7:97:76:4c:79:db:fc:39:3f:15: 37:24:e5:58:e6:a4:28:08:77:e5:f5:db:4e:43:df:73:1a:f3: 70:27:d2:bc:70:0d:8b:c5:10:f4:bf:7d:55:f7:d8:8a:36:64: 9b:aa:d9:55:9e:73:79:00:d4:56:68:ba:0d:ce:51:e5:68:3a: 32:3f:01:a7:4a:8e:95:6f:96:86:24:d9:36:2a:a1:ec:8f:c6: 3a:26:72:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUxMDE5MDEyMzA5WhcNMjUxMDI2MDEyMzA5WjAYMRYwFAYD VQQDEw02OGY0M2Q3ZC04OGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIOMA76YQD4VAyrlPlSUM3l5PE63aNbzwwstUfCNebz5HVaJKnJRCbd1lf2x XCzmygMLQnxYNmzDx+muYEygBlRzLWDpGRJldNCbvMP/nVXEob5mlqqMvgKwzar0 X/3dMxvVuyA1dZJfZ9tXLF8QGB64zoEZ27/1WSnagNqoh0ArYCEtFyRX8rpTbt63 CoRsjGk2+FRdD1jEecpTNZcrUbgmmjy+OgoSK1d5YrVr7qV2x6Tfvlbg39Lw6oq1 xLUwPxQFqqiYKazRqE+Lyw0Ztuex5W6v4Nl4UgaGVzn2IjHyqTV6dw16kddCXRY3 kz5lzV5XnWm/XvwXXqcMZ6AyyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/EHp/a g6M4dhNCb/EeD7qjLPDVMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXj8/MfWY3KewvZwWqy/J9Dve1YbM5OthEwg4ZhI8DjfYUWVuVA4dK fNhAbj5+Q8AVY2OifPmdWj8oHhymhOB0dtfFuJtKYm6Y/zKisSRIZcP75tOnNvUf dyN4nJ38hw4tCJxUgmTCwYh9zcD1NxmQX2a6rePy3RWLN5mW61h2tPTs/VaX1yzP Ybro2L4ZZ8nf2VqIxmJi9ifQr+/YCP8LO8a65Ki12DzHjbeXdkx52/w5PxU3JOVY 5qQoCHfl9dtOQ99zGvNwJ9K8cA2LxRD0v31V99iKNmSbqtlVnnN5ANRWaLoNzlHl aDoyPwGnSo6Vb5aGJNk2KqHsj8Y6JnLN -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:42 2025 by rpki-client