$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft File: fysutbj095VolfExLY3MQiOcmmI.mft (raw, json) Hash identifier: 5NoZg9a0yEnBNXCfvdJ+y3j9wq1zXWS7WxA1zn3w9pE= Subject key identifier: A3:EE:65:1C:11:02:DB:60:B4:50:A3:D7:E4:DF:47:35:8F:40:F2:EF Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Certificate serial: 0E30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft Manifest number: 0E22 Signing time: Sat 14 Jun 2025 17:43:10 +0000 Manifest this update: Sat 14 Jun 2025 17:43:10 +0000 Manifest next update: Sat 21 Jun 2025 17:43:10 +0000 Files and hashes: 1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: tZna+Gziw3wChimF6ICXnmF0uDOo8pIOADlCB1P9YLI=) 2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: H3PZR2Ocqd5DrHweNG98HWtY6eO+2MOa7m6IWNzWQmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3632 (0xe30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Validity Not Before: Jun 14 17:43:10 2025 GMT Not After : Jun 21 17:43:10 2025 GMT Subject: CN=684db4ae-4858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bb:39:5c:05:2b:95:5a:94:b4:ca:95:9e:65: 92:0b:94:ec:fe:48:69:29:24:d1:92:d6:3e:94:9f: cf:3e:09:37:96:f2:14:4d:e3:9d:34:f2:e4:3c:a2: 81:38:5c:3d:6e:fd:a4:cd:21:71:6a:0d:aa:83:dd: 42:b0:f8:8f:2f:63:5b:4f:50:fc:14:e4:07:f8:e5: ea:03:a5:06:8a:65:fc:0b:df:62:0e:c7:b9:e1:aa: 34:f8:1d:f8:33:48:00:8a:ed:39:3e:08:82:83:f1: 9f:88:3c:7c:16:b8:6d:1f:b1:86:f4:68:45:a7:12: c1:ac:98:45:b5:ca:70:17:87:e8:67:04:27:1d:b5: 57:2e:e7:dd:27:29:5e:2e:12:d2:83:bd:af:3b:06: 80:d0:79:21:86:8d:a4:1c:60:12:29:7c:08:7c:7d: 23:31:88:5c:30:16:b2:9a:4d:e1:72:f1:20:6b:3e: 67:a2:bb:4c:bc:ee:8e:3e:2c:07:ea:ef:ff:56:0a: 21:b9:b2:16:bf:f5:f9:1f:85:a5:a7:65:ad:c3:7a: 71:70:12:c4:a6:c0:e1:d4:bb:58:41:90:3d:08:5a: fd:48:40:e9:43:e0:ea:d2:04:70:c5:4b:76:4c:d0: 69:39:3e:c3:09:e4:d5:4b:9c:01:6e:82:a4:3e:7c: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EE:65:1C:11:02:DB:60:B4:50:A3:D7:E4:DF:47:35:8F:40:F2:EF X509v3 Authority Key Identifier: keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c3:48:2e:fb:13:9a:af:91:e0:b5:75:90:40:ee:ef:9a:ed: 6f:23:1b:ad:d6:b4:9d:3a:25:19:bb:ae:6a:ae:24:72:90:a8: c5:c4:83:5f:ec:b8:86:a8:fc:1c:ee:0d:37:74:bc:52:37:5f: e1:48:57:91:6a:58:05:51:11:38:50:64:24:0b:1c:21:3a:a0: 3a:c5:bd:9a:7e:33:6b:89:b0:07:5b:0c:a8:c8:0c:d4:7c:9a: 0d:52:4c:76:d6:c4:b1:c4:e2:d2:7f:90:f6:62:96:ee:e2:e2: 21:cc:9e:72:ba:22:7d:20:ae:3c:b9:02:0f:3d:15:34:a3:03: aa:b7:ae:ee:1a:87:f9:d3:93:2a:72:cd:72:01:4d:e3:6a:d0: 40:0b:6a:3c:df:1f:79:42:3e:0d:43:34:9d:21:d7:55:03:a7: 29:83:1a:1f:10:1b:6c:16:04:15:22:81:eb:b0:0d:b4:09:db: 61:02:61:2a:b3:4e:f0:18:ed:23:26:59:f6:a5:de:b7:49:28: 38:3d:2f:d0:ec:f6:d2:cc:17:88:10:00:8c:41:88:e7:f5:7c: 40:a1:b2:d2:d1:36:09:14:c3:20:f6:01:09:40:02:e1:a3:4c: 09:1b:e1:23:fc:2a:09:41:c5:11:3e:cf:37:dd:7a:95:ab:35: f4:fe:68:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy MjM5QzlBNjIwHhcNMjUwNjE0MTc0MzEwWhcNMjUwNjIxMTc0MzEwWjAYMRYwFAYD VQQDEw02ODRkYjRhZS00ODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bs5XAUrlVqUtMqVnmWSC5Ts/khpKSTRktY+lJ/PPgk3lvIUTeOdNPLkPKKB OFw9bv2kzSFxag2qg91CsPiPL2NbT1D8FOQH+OXqA6UGimX8C99iDse54ao0+B34 M0gAiu05PgiCg/GfiDx8FrhtH7GG9GhFpxLBrJhFtcpwF4foZwQnHbVXLufdJyle LhLSg72vOwaA0Hkhho2kHGASKXwIfH0jMYhcMBaymk3hcvEgaz5nortMvO6OPiwH 6u//VgohubIWv/X5H4Wlp2Wtw3pxcBLEpsDh1LtYQZA9CFr9SEDpQ+Dq0gRwxUt2 TNBpOT7DCeTVS5wBboKkPnxmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPuZRwR AttgtFCj1+TfRzWPQPLvMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5 MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ1Ny85RkQyQzlEMEE5MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1 Vm9sZkV4TFkzTVFpT2NtbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjw0gu+xOar5HgtXWQQO7vmu1vIxut1rSdOiUZu65qriRykKjFxINf 7LiGqPwc7g03dLxSN1/hSFeRalgFURE4UGQkCxwhOqA6xb2afjNribAHWwyoyAzU fJoNUkx21sSxxOLSf5D2Ypbu4uIhzJ5yuiJ9IK48uQIPPRU0owOqt67uGof505Mq cs1yAU3jatBAC2o83x95Qj4NQzSdIddVA6cpgxofEBtsFgQVIoHrsA20CdthAmEq s07wGO0jJln2pd63SSg4PS/Q7PbSzBeIEACMQYjn9XxAobLS0TYJFMMg9gEJQALh o0wJG+Ej/CoJQcURPs833XqVqzX0/mj7 -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:57 2025 by rpki-client