$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: pAgNcv8n6HB95N+qexxVFKkMjMwYcUVD+Z1+JLM9/6g= Subject key identifier: 07:BA:6B:AE:BB:4F:C0:74:6B:43:5B:43:FF:08:E3:B6:2E:D8:2A:DE Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0BD3 Signing time: Thu 12 Jun 2025 18:41:10 +0000 Manifest this update: Thu 12 Jun 2025 18:41:10 +0000 Manifest next update: Thu 19 Jun 2025 18:41:10 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: TK2PH/fNeGgkk+nHMKlW2fFU5/hPo8gXF4sfbWn97Hs=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3035 (0xbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: Jun 12 18:41:10 2025 GMT Not After : Jun 19 18:41:10 2025 GMT Subject: CN=684b1f46-8b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ba:28:21:45:9c:3a:e1:bf:ec:09:c7:a7:00: d2:a7:70:7a:83:0d:fa:12:c2:6e:37:b7:95:4e:49: 70:07:e6:39:ec:5b:2a:eb:f9:c2:e6:80:24:98:83: 5c:4f:39:ea:3d:55:5d:9e:16:15:10:7d:b7:bb:17: 3a:b0:80:0a:28:22:0d:45:68:dc:83:d6:8f:90:49: d3:dc:14:ac:81:d3:f6:df:60:20:f0:df:c4:47:6b: a4:6c:24:fe:59:53:21:bd:19:8a:0b:35:14:54:50: 2a:ef:34:76:98:fe:04:3e:89:54:19:5b:8a:19:80: 53:52:ed:18:e1:68:c0:15:b3:0c:b4:13:e7:dd:40: b7:6a:0f:1e:95:3c:7a:c2:1e:2a:7b:f2:84:4a:fc: 28:c5:fa:47:00:98:ba:ab:72:ab:f9:22:cf:7f:5a: 07:72:15:36:45:04:5c:8f:49:df:56:5e:5c:b8:e1: bd:c5:c0:c5:a4:43:a5:7a:1c:05:fa:32:56:1c:43: 73:93:89:77:98:1f:a3:99:77:3b:54:6f:de:44:00: f7:b2:5e:ff:24:08:b6:f8:3c:e0:39:14:97:ad:4c: 2c:82:11:35:32:84:5c:69:40:6b:66:95:71:e9:e6: 79:c5:2a:0a:1c:47:b9:91:72:f7:54:bc:69:43:41: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BA:6B:AE:BB:4F:C0:74:6B:43:5B:43:FF:08:E3:B6:2E:D8:2A:DE X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f5:27:c0:39:53:d7:33:f0:02:41:84:4e:46:f5:ca:8b:b8: 06:20:12:bd:d5:ef:1f:de:67:07:d1:bc:38:37:c1:33:3f:a3: e2:10:7d:d2:0c:9a:76:2f:cc:e7:92:ca:71:91:5b:af:55:95: 99:02:c0:d9:6a:94:74:16:42:88:06:fb:be:18:23:37:36:63: 23:2c:01:df:2f:5c:48:0d:9f:f4:74:0e:11:eb:87:37:aa:2a: 6a:92:c0:c1:f6:b9:dd:1d:91:2c:3a:67:7f:d7:2b:55:fb:ac: bb:64:85:f7:89:81:95:60:be:1d:98:1e:9e:2c:7d:8f:69:86: f1:63:44:1e:a0:82:c9:d9:55:92:d2:fa:9a:50:bb:59:65:2f: a8:13:f3:fb:ff:78:8f:c8:58:89:e0:9f:af:8d:c9:20:51:08: f7:44:a8:fc:38:4d:b8:4d:6e:4b:33:bc:12:56:9c:1c:ed:50: 01:2b:b1:c0:6e:af:d1:23:4f:40:71:9f:3c:29:fd:92:03:09: 87:77:f2:0a:9b:cf:49:8c:be:35:e6:fc:75:c5:73:a2:d1:a8: 1e:56:ff:26:63:e8:37:96:40:ef:5f:62:ab:6c:46:c4:fc:f8: 3a:66:95:ae:cb:e2:56:0b:d7:3e:6b:0f:fe:b1:18:c0:e8:be: 37:82:df:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUwNjEyMTg0MTEwWhcNMjUwNjE5MTg0MTEwWjAYMRYwFAYD VQQDEw02ODRiMWY0Ni04YjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8booIUWcOuG/7AnHpwDSp3B6gw36EsJuN7eVTklwB+Y57Fsq6/nC5oAkmINc TznqPVVdnhYVEH23uxc6sIAKKCINRWjcg9aPkEnT3BSsgdP232Ag8N/ER2ukbCT+ WVMhvRmKCzUUVFAq7zR2mP4EPolUGVuKGYBTUu0Y4WjAFbMMtBPn3UC3ag8elTx6 wh4qe/KESvwoxfpHAJi6q3Kr+SLPf1oHchU2RQRcj0nfVl5cuOG9xcDFpEOlehwF +jJWHENzk4l3mB+jmXc7VG/eRAD3sl7/JAi2+DzgORSXrUwsghE1MoRcaUBrZpVx 6eZ5xSoKHEe5kXL3VLxpQ0HNIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAe6a667 T8B0a0NbQ/8I47Yu2CreMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo9SfAOVPXM/ACQYRORvXKi7gGIBK91e8f3mcH0bw4N8EzP6PiEH3S DJp2L8znkspxkVuvVZWZAsDZapR0FkKIBvu+GCM3NmMjLAHfL1xIDZ/0dA4R64c3 qipqksDB9rndHZEsOmd/1ytV+6y7ZIX3iYGVYL4dmB6eLH2PaYbxY0QeoILJ2VWS 0vqaULtZZS+oE/P7/3iPyFiJ4J+vjckgUQj3RKj8OE24TW5LM7wSVpwc7VABK7HA bq/RI09AcZ88Kf2SAwmHd/IKm89JjL415vx1xXOi0ageVv8mY+g3lkDvX2KrbEbE /Pg6ZpWuy+JWC9c+aw/+sRjA6L43gt/c -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:13 2025 by rpki-client