$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft File: fysutbj095VolfExLY3MQiOcmmI.mft (raw, json) Hash identifier: hQoY/ViVfjGc82jQLbC05hqJ1uxnxgEy9zEwN1v7i6s= Subject key identifier: 7F:5E:6B:0B:3F:17:DA:08:0A:50:25:DE:3C:A3:C7:4D:FC:CD:C1:DC Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Certificate serial: 0E17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft Manifest number: 0E09 Signing time: Thu 24 Apr 2025 17:48:01 +0000 Manifest this update: Thu 24 Apr 2025 17:48:00 +0000 Manifest next update: Thu 01 May 2025 17:48:00 +0000 Files and hashes: 1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: aHkVnqliZopcyv6BFekHdhqJkptZE3pcN7tJVgnXgb4=) 2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: H3PZR2Ocqd5DrHweNG98HWtY6eO+2MOa7m6IWNzWQmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3607 (0xe17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Validity Not Before: Apr 24 17:48:00 2025 GMT Not After : May 1 17:48:00 2025 GMT Subject: CN=680a7950-ec01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:87:14:d3:97:81:e6:03:25:a0:35:56:69: e2:9e:9a:47:9a:68:20:b7:fe:47:9d:54:79:1c:b3: a2:ad:15:b2:ed:25:60:ba:e3:d7:4f:95:0b:73:64: d7:4b:8a:92:84:be:6a:9c:24:68:3f:32:1a:a0:53: 27:75:37:bb:0e:45:30:92:54:70:4b:b7:e3:bf:14: 3a:22:e2:8b:f8:a9:08:28:f9:44:d9:dd:72:a5:8c: 04:86:4c:be:0d:01:d7:20:33:03:8b:32:00:c1:b7: 02:76:91:19:b8:2b:2b:d1:fe:0e:22:eb:4b:19:9c: 7b:cf:7d:00:06:e7:73:a3:ec:c8:3c:a7:f5:8b:aa: 69:fa:f4:7c:19:be:d2:3b:e9:97:86:92:e5:fb:62: 79:e5:33:75:73:ac:a0:dc:74:5d:b0:c6:0c:8f:08: 02:6b:c9:77:73:ad:c6:a4:84:0f:82:c5:68:28:7d: f5:f4:e9:19:ee:4b:02:77:eb:9d:b7:2d:51:f4:3c: cc:6f:36:86:d7:53:bc:ac:a8:8a:fa:47:fb:60:7d: 29:66:fb:32:cd:d6:06:74:a5:d5:32:86:58:85:b2: 2b:b5:66:91:01:f3:43:9b:08:a6:77:b5:64:af:38: 39:df:31:6e:d4:8f:52:0e:ea:4d:3e:35:e7:04:cd: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:6B:0B:3F:17:DA:08:0A:50:25:DE:3C:A3:C7:4D:FC:CD:C1:DC X509v3 Authority Key Identifier: keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:54:70:73:81:dc:34:e2:3e:bc:86:2c:7c:da:20:8c:33:4b: 01:c7:95:e6:43:cc:c1:aa:76:21:34:84:57:64:7e:f5:f2:0e: 53:ac:6c:e7:5d:51:e6:ff:0e:6e:3a:d7:bb:cf:04:52:99:c1: d0:39:15:55:54:8a:12:ad:c8:fa:87:a1:7b:b8:fc:c3:f5:dd: 34:2d:e8:82:93:fb:da:06:0b:fd:2d:f9:23:6e:24:d5:59:04: 9c:5e:20:f4:43:47:43:91:ff:d6:d0:72:03:08:34:e6:16:36: 70:99:40:09:fa:3d:ee:03:bc:71:dd:e0:a0:40:5f:f2:71:ec: 5c:65:3c:fd:1f:c9:08:ad:8c:26:90:ff:38:82:0d:6e:92:b9: 24:79:a4:de:b1:ba:b8:c5:6c:d1:31:0b:d2:30:63:75:42:82: 54:b5:1c:b0:30:a1:9d:b0:3b:dc:12:f2:02:2c:d1:df:17:a2: bd:20:db:5a:bd:4e:39:85:34:28:a9:16:c7:88:77:a2:08:a0: a2:11:aa:2a:04:71:1a:0d:49:87:5c:9a:83:56:01:ca:a6:e5: 3a:41:c9:84:33:82:c5:eb:05:1a:7f:25:fd:a9:97:c2:bd:82: 1c:11:1a:0b:14:de:db:05:3f:17:db:2a:6a:41:4d:a4:ad:f4: f2:56:17:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy MjM5QzlBNjIwHhcNMjUwNDI0MTc0ODAwWhcNMjUwNTAxMTc0ODAwWjAYMRYwFAYD VQQDEw02ODBhNzk1MC1lYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXyHFNOXgeYDJaA1VmninppHmmggt/5HnVR5HLOirRWy7SVguuPXT5ULc2TX S4qShL5qnCRoPzIaoFMndTe7DkUwklRwS7fjvxQ6IuKL+KkIKPlE2d1ypYwEhky+ DQHXIDMDizIAwbcCdpEZuCsr0f4OIutLGZx7z30ABudzo+zIPKf1i6pp+vR8Gb7S O+mXhpLl+2J55TN1c6yg3HRdsMYMjwgCa8l3c63GpIQPgsVoKH319OkZ7ksCd+ud ty1R9DzMbzaG11O8rKiK+kf7YH0pZvsyzdYGdKXVMoZYhbIrtWaRAfNDmwimd7Vk rzg53zFu1I9SDupNPjXnBM3TawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9eaws/ F9oIClAl3jyjx038zcHcMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5 MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ1Ny85RkQyQzlEMEE5MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1 Vm9sZkV4TFkzTVFpT2NtbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByVHBzgdw04j68hix82iCMM0sBx5XmQ8zBqnYhNIRXZH718g5TrGzn XVHm/w5uOte7zwRSmcHQORVVVIoSrcj6h6F7uPzD9d00LeiCk/vaBgv9LfkjbiTV WQScXiD0Q0dDkf/W0HIDCDTmFjZwmUAJ+j3uA7xx3eCgQF/ycexcZTz9H8kIrYwm kP84gg1ukrkkeaTesbq4xWzRMQvSMGN1QoJUtRywMKGdsDvcEvICLNHfF6K9INta vU45hTQoqRbHiHeiCKCiEaoqBHEaDUmHXJqDVgHKpuU6QcmEM4LF6wUafyX9qZfC vYIcERoLFN7bBT8X2ypqQU2krfTyVhcE -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:49 2025 by rpki-client