$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: M8HCw2zInh9o+dNOBMkhJ/reIYf1d+glzZ+ZM1Aby1E= Subject key identifier: 1B:E0:4C:5E:DC:88:67:E8:13:15:33:1F:81:A7:7B:5C:DB:BE:95:9B Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: B3 Signing time: Fri 22 Aug 2025 23:54:50 +0000 Manifest this update: Fri 22 Aug 2025 23:54:50 +0000 Manifest next update: Fri 29 Aug 2025 23:54:50 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: iIWv1y7JXlZ4Q5HmEvJVOUQotmSYbr3nh8RgITRaSqk=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Aug 22 23:54:50 2025 GMT Not After : Aug 29 23:54:50 2025 GMT Subject: CN=68a9034a-1dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:90:7b:71:62:3d:a3:54:fd:24:31:6f:cc: 72:04:4a:49:4b:49:a5:6c:bf:41:32:04:b6:32:27: 4f:48:d5:ae:be:55:22:d2:ee:74:92:ec:a1:7b:fb: 2a:79:75:5b:a5:11:4b:c4:e5:59:d5:33:c1:20:4d: 5e:fb:d1:74:1d:53:63:61:93:65:cb:40:37:6a:02: e5:af:2c:3d:c3:3b:44:c4:98:b7:ff:2f:9a:a6:28: 52:a7:c4:2f:d1:a7:3a:30:8f:ad:8d:16:da:a3:74: 01:ca:8d:2c:35:61:7d:11:b2:9e:80:3a:9c:63:39: b4:04:33:32:3c:2b:6d:5b:d5:0e:60:8d:b0:70:fc: 2a:dc:e4:38:b5:49:72:4a:f6:6b:aa:9e:00:c1:b1: 61:a8:ea:cf:72:40:3c:5f:78:0f:8b:b9:44:7d:fc: de:10:ea:d0:7a:83:0c:db:0f:d4:fa:fb:c0:9e:41: 15:c4:74:58:d1:19:4c:7b:25:bb:9a:7e:0b:08:4e: 6e:ac:8d:c4:40:d5:24:47:cc:85:44:2f:d6:4d:ef: 37:cc:a4:7d:ef:79:39:f9:e0:51:db:4c:95:bf:67: 58:51:81:8b:c2:49:29:fc:62:66:f4:f8:26:35:ab: 1a:6f:99:9b:0b:01:9e:2c:7c:90:68:0f:69:a6:98: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E0:4C:5E:DC:88:67:E8:13:15:33:1F:81:A7:7B:5C:DB:BE:95:9B X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ee:6d:94:76:5d:6e:79:73:d8:69:32:cf:c7:fc:d6:38:fa: a5:86:b4:a0:5e:ae:0d:6a:00:2b:6b:40:28:a6:2a:ed:8f:09: a7:48:4b:e8:bc:a0:df:40:f9:b4:1a:ea:5c:1f:e5:da:ce:4b: a7:9e:17:9e:ec:e4:71:6e:15:9b:02:11:0c:2a:f8:30:d0:a2: 1c:30:38:67:62:4f:b6:d5:fd:a7:bd:2c:50:d7:5e:1a:9f:a8: a4:5f:d8:3f:97:fb:e2:36:84:cf:92:e9:46:9b:2f:98:df:d3: 1d:00:f5:1c:eb:02:0a:46:a2:b3:70:df:54:f2:9b:89:b3:3e: d3:bd:b9:2d:34:33:ec:fd:b3:4d:bb:dd:e3:2a:7e:3f:52:23: 6c:6f:b8:39:74:c0:85:fb:ec:a8:40:7e:26:8b:ce:7f:d1:d0: 73:7a:50:8f:b9:95:09:c4:cf:93:a8:01:21:1a:15:46:9e:56: af:fe:20:6c:ee:fb:31:dc:3e:8c:be:ef:f1:62:80:d6:6a:32: 52:65:01:73:c4:47:01:6f:3b:20:4b:1f:34:00:50:c8:16:4e: c3:b3:d3:84:a1:e6:15:48:1f:bf:49:99:cd:11:a7:87:c7:51: 55:52:b6:f1:83:41:9c:92:b4:d8:d6:ba:5c:d8:38:b8:cf:ba: 37:82:99:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKDRCMkM3N0JDMkRGNDNDNzI4NEQwMUU0NUIxMkRCM0JE RjAwOTE2RDEwHhcNMjUwODIyMjM1NDUwWhcNMjUwODI5MjM1NDUwWjAYMRYwFAYD VQQDEw02OGE5MDM0YS0xZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4uQe3FiPaNU/SQxb8xyBEpJS0mlbL9BMgS2MidPSNWuvlUi0u50kuyhe/sq eXVbpRFLxOVZ1TPBIE1e+9F0HVNjYZNly0A3agLlryw9wztExJi3/y+apihSp8Qv 0ac6MI+tjRbao3QByo0sNWF9EbKegDqcYzm0BDMyPCttW9UOYI2wcPwq3OQ4tUly SvZrqp4AwbFhqOrPckA8X3gPi7lEffzeEOrQeoMM2w/U+vvAnkEVxHRY0RlMeyW7 mn4LCE5urI3EQNUkR8yFRC/WTe83zKR973k5+eBR20yVv2dYUYGLwkkp/GJm9Pgm Nasab5mbCwGeLHyQaA9pppjjAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvgTF7c iGfoExUzH4Gne1zbvpWbMB8GA1UdIwQYMBaAFEssd7wt9DxyhNAeRbEts73wCRbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS82NzhFMTZCMDZG Q0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBIS0UwQjVGc1MyenZmQUpG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS82NzhFMTZCMDZGQ0UxMUVGODlCQjRDNUVDNEY5QUUwMi9TeXgzdkMzMFBI S0UwQjVGc1MyenZmQUpGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN7m2Udl1ueXPYaTLPx/zWOPqlhrSgXq4NagAra0AopirtjwmnSEvo vKDfQPm0GupcH+Xazkunnhee7ORxbhWbAhEMKvgw0KIcMDhnYk+21f2nvSxQ114a n6ikX9g/l/viNoTPkulGmy+Y39MdAPUc6wIKRqKzcN9U8puJsz7TvbktNDPs/bNN u93jKn4/UiNsb7g5dMCF++yoQH4mi85/0dBzelCPuZUJxM+TqAEhGhVGnlav/iBs 7vsx3D6Mvu/xYoDWajJSZQFzxEcBbzsgSx80AFDIFk7Ds9OEoeYVSB+/SZnNEaeH x1FVUrbxg0GckrTY1rpc2Di4z7o3gpk+ -----END CERTIFICATE-----Generated at Sat Aug 23 07:03:04 2025 by rpki-client