$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: DD+bIj6Lf+8uVtZN7ylsFvpSrMYb1xhlzRz68BcgVkQ= Subject key identifier: 93:DA:FC:2A:8E:40:5F:61:13:68:E7:E1:C1:4D:77:D2:4E:3B:9C:9F Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: 92 Signing time: Fri 25 Apr 2025 05:26:11 +0000 Manifest this update: Fri 25 Apr 2025 05:26:10 +0000 Manifest next update: Fri 02 May 2025 05:26:10 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: OR4+5wYJrsB13VW2puTGIMpHXE1iaM4itHISGrNcgo0=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: Apr 25 05:26:10 2025 GMT Not After : May 2 05:26:10 2025 GMT Subject: CN=680b1cf2-4c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:f6:2e:90:26:b9:c3:41:55:5f:6c:8c:de: fc:78:dc:72:9d:f0:9b:73:1d:24:26:8e:67:8e:e2: 16:3a:13:83:59:69:db:62:28:e2:e7:d8:b0:0f:9b: fe:00:db:e6:49:8b:38:2c:ea:ab:91:ce:a3:a2:37: 5c:50:30:b5:ba:f8:30:24:5c:3a:af:c1:be:a4:55: 85:29:42:dd:69:99:87:d9:b8:36:35:28:f3:8d:f0: 1f:e8:83:1a:ea:4e:63:be:88:75:8c:8c:3b:49:31: 88:28:9b:d5:82:9f:c7:aa:21:c9:d0:1f:c2:f9:f7: ff:84:fd:87:d9:f0:f6:b6:d6:db:69:a8:ce:c1:f4: a2:c1:95:d0:bc:10:5d:00:16:87:4a:6e:18:63:11: 8e:90:a2:10:7a:3f:70:0d:9d:1e:b4:a4:71:e1:2a: e4:2b:88:74:9a:14:47:a3:ea:ad:e3:04:61:ac:51: a0:72:f2:1b:46:8c:7d:6f:5b:c4:b4:c4:63:6b:05: 5a:72:38:49:f7:de:92:4c:88:5e:2b:4d:10:ad:6f: 0e:0e:2c:3b:c5:3e:22:66:48:3e:9d:1b:21:3d:19: 81:23:b9:50:1f:1a:4f:d4:34:72:41:3e:c9:7b:da: 5a:3f:d4:75:2f:f7:57:85:cf:2b:9e:b0:46:39:bc: 69:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DA:FC:2A:8E:40:5F:61:13:68:E7:E1:C1:4D:77:D2:4E:3B:9C:9F X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:66:b6:f2:d5:a8:08:1a:e4:b6:44:00:91:ae:a2:21:f3:52: 10:38:87:e9:26:ca:5a:0d:2d:f7:67:96:cd:48:ee:9c:bd:50: 77:23:bc:c5:3e:0e:91:b3:9e:1f:15:0b:85:22:e5:83:d8:59: 17:56:3f:22:19:f4:e3:94:9e:92:b6:0e:34:13:93:30:bd:60: dc:21:13:2f:73:43:af:a6:2a:11:a0:e8:11:7e:2b:fa:9d:9c: 68:d8:6a:55:8a:28:c7:6d:0e:05:88:79:70:8c:0a:e7:16:47: e7:8c:49:68:11:68:28:7f:96:03:88:cc:67:a8:05:80:86:5b: eb:03:4a:2e:38:ad:10:21:56:08:98:4b:c3:f4:72:a8:de:b0: 9a:a5:40:b1:75:4f:6f:cd:f8:7c:28:b2:76:50:ae:24:77:19: 23:a9:84:5a:0b:8e:b3:bc:4a:4b:e8:a2:74:e8:fa:47:c0:d4: 02:b5:68:f5:b0:4d:7a:61:5a:20:8b:ba:c0:fd:31:be:0c:ca: 4a:ce:af:e0:62:51:de:d8:28:57:19:be:c4:06:71:28:b1:da: 50:8f:e0:19:95:53:f3:bf:14:1e:29:eb:97:45:e4:4b:fa:13: b8:a5:e5:fe:53:1a:36:62:49:8c:28:92:40:23:26:a0:02:79: b2:7b:ae:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDE3MjdFRDE1MUY0MDg5MjEwRUMzRTM2OEE1QTY5RUUz OTQ4NEUzRTYwHhcNMjUwNDI1MDUyNjEwWhcNMjUwNTAyMDUyNjEwWjAYMRYwFAYD VQQDEw02ODBiMWNmMi00YzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3P2LpAmucNBVV9sjN78eNxynfCbcx0kJo5njuIWOhODWWnbYiji59iwD5v+ ANvmSYs4LOqrkc6jojdcUDC1uvgwJFw6r8G+pFWFKULdaZmH2bg2NSjzjfAf6IMa 6k5jvoh1jIw7STGIKJvVgp/HqiHJ0B/C+ff/hP2H2fD2ttbbaajOwfSiwZXQvBBd ABaHSm4YYxGOkKIQej9wDZ0etKRx4SrkK4h0mhRHo+qt4wRhrFGgcvIbRox9b1vE tMRjawVacjhJ996STIheK00QrW8ODiw7xT4iZkg+nRshPRmBI7lQHxpP1DRyQT7J e9paP9R1L/dXhc8rnrBGObxpMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPa/CqO QF9hE2jn4cFNd9JOO5yfMB8GA1UdIwQYMBaAFBcn7RUfQIkhDsPjaKWmnuOUhOPm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS83REQ3QkJCQzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlTRU93LU5vcGFhZTQ1U0U0 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS83REQ3QkJCQzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlT RU93LU5vcGFhZTQ1U0U0LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Zrby1agIGuS2RACRrqIh81IQOIfpJspaDS33Z5bNSO6cvVB3I7zF Pg6Rs54fFQuFIuWD2FkXVj8iGfTjlJ6Stg40E5MwvWDcIRMvc0OvpioRoOgRfiv6 nZxo2GpViijHbQ4FiHlwjArnFkfnjEloEWgof5YDiMxnqAWAhlvrA0ouOK0QIVYI mEvD9HKo3rCapUCxdU9vzfh8KLJ2UK4kdxkjqYRaC46zvEpL6KJ06PpHwNQCtWj1 sE16YVogi7rA/TG+DMpKzq/gYlHe2ChXGb7EBnEosdpQj+AZlVPzvxQeKeuXReRL +hO4peX+Uxo2YkmMKJJAIyagAnmye64R -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:01 2025 by rpki-client