$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: eCAD2GVe5f4uOV/Ym7EW6h40ISjOiRJxBfqKfmO3cNQ= Subject key identifier: 61:EB:8E:09:E5:97:0D:9E:8E:42:91:C5:EC:96:F9:98:81:70:AE:DF Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0C1D Signing time: Tue 04 Nov 2025 18:51:07 +0000 Manifest this update: Tue 04 Nov 2025 18:51:06 +0000 Manifest next update: Tue 11 Nov 2025 18:51:06 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: m39lDYgGVITBHe7peERl4RyMn4M08CckrUVOe4A7vQA=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: Nov 4 18:51:06 2025 GMT Not After : Nov 11 18:51:06 2025 GMT Subject: CN=690a4b1a-ea81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:53:a9:99:3f:ba:bb:2e:b0:3f:de:b2:1d: 93:75:9a:e6:a5:8c:6b:b0:15:a0:fd:85:c8:31:09: 5e:41:ad:59:f8:7e:a7:e1:88:f7:e4:5d:42:39:80: 34:b6:09:87:e7:fa:3a:5a:91:6d:df:b7:27:e8:b2: 2a:18:4c:82:ae:0d:9a:af:bd:11:00:87:fd:6d:82: ec:dd:42:74:0e:74:af:50:e2:df:33:5d:e0:7e:97: d4:a8:85:78:45:66:21:6f:fc:19:82:1c:8c:30:16: 9e:7d:19:54:2c:f6:dd:b8:77:b1:1a:80:63:76:08: d8:df:b6:c0:b2:84:0a:5e:00:34:e2:06:30:b0:c3: 4d:e4:ed:9c:3e:78:30:04:14:6a:1d:c7:b6:a6:f4: a4:35:66:7c:2c:86:e8:2f:88:73:7c:b0:88:9b:3a: 4b:7f:47:bb:e1:02:1c:4c:8c:ee:af:84:b0:e9:05: f9:00:44:0c:49:11:24:1c:7a:fa:fa:13:ca:56:4c: a2:9b:35:08:fb:ae:ad:2f:dc:5b:5b:49:fd:8c:72: 60:c2:aa:34:87:0c:2f:de:64:88:03:6d:6b:a6:c7: ee:70:bc:b2:8e:40:f7:3e:c2:50:2a:dc:a5:e8:a1: 77:ab:77:0b:6d:02:5b:b3:b9:bd:66:3c:d1:2d:3e: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EB:8E:09:E5:97:0D:9E:8E:42:91:C5:EC:96:F9:98:81:70:AE:DF X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:34:52:71:7d:50:a1:c3:0f:77:dd:bb:d1:1a:c0:ca:8e:c7: b6:68:84:17:3e:41:8b:4f:4a:cf:31:1e:a3:6b:c0:70:5b:e9: 78:7f:5c:6d:0c:c3:b8:32:3e:b2:db:83:74:b7:b5:9a:4f:46: 5d:70:24:76:c8:38:db:43:a7:ab:98:ed:b0:5c:93:e8:69:8b: 48:d5:c4:41:21:32:14:6b:42:50:7e:56:8c:b8:7c:e5:40:75: 6e:da:cd:25:6c:b5:06:3e:74:d8:07:69:ec:63:a1:94:eb:e0: 9b:f8:ff:4a:ac:11:ac:a0:d5:8a:73:aa:42:d3:6b:28:e2:2b: c6:07:f0:d2:6b:e6:7b:94:eb:c0:4d:55:34:88:b8:57:71:fa: b3:76:1b:4b:2d:da:86:08:4e:9f:77:e9:b1:14:49:7a:f0:f5: 36:0a:0b:90:dd:8a:df:21:71:1b:ee:1f:d4:22:f7:0b:8a:8f: c1:97:f1:85:3c:d0:72:6f:52:d5:1b:63:2a:7f:c7:d6:e4:53: fa:6c:97:53:f9:d3:35:6d:34:c8:f5:f2:71:e7:92:91:b7:0c: a1:49:00:18:c8:03:8f:0d:2e:96:8f:6c:dd:f7:fa:68:89:f0: d3:1d:62:c6:d4:eb:e1:e1:24:c2:ca:fe:e7:a7:ce:42:24:b0: 96:67:7c:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUxMTA0MTg1MTA2WhcNMjUxMTExMTg1MTA2WjAYMRYwFAYD VQQDEw02OTBhNGIxYS1lYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ1TqZk/ursusD/esh2TdZrmpYxrsBWg/YXIMQleQa1Z+H6n4Yj35F1COYA0 tgmH5/o6WpFt37cn6LIqGEyCrg2ar70RAIf9bYLs3UJ0DnSvUOLfM13gfpfUqIV4 RWYhb/wZghyMMBaefRlULPbduHexGoBjdgjY37bAsoQKXgA04gYwsMNN5O2cPngw BBRqHce2pvSkNWZ8LIboL4hzfLCImzpLf0e74QIcTIzur4Sw6QX5AEQMSREkHHr6 +hPKVkyimzUI+66tL9xbW0n9jHJgwqo0hwwv3mSIA21rpsfucLyyjkD3PsJQKtyl 6KF3q3cLbQJbs7m9ZjzRLT5pBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHrjgnl lw2ejkKRxeyW+ZiBcK7fMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLNFJxfVChww933bvRGsDKjse2aIQXPkGLT0rPMR6ja8BwW+l4f1xt DMO4Mj6y24N0t7WaT0ZdcCR2yDjbQ6ermO2wXJPoaYtI1cRBITIUa0JQflaMuHzl QHVu2s0lbLUGPnTYB2nsY6GU6+Cb+P9KrBGsoNWKc6pC02so4ivGB/DSa+Z7lOvA TVU0iLhXcfqzdhtLLdqGCE6fd+mxFEl68PU2CguQ3YrfIXEb7h/UIvcLio/Bl/GF PNByb1LVG2Mqf8fW5FP6bJdT+dM1bTTI9fJx55KRtwyhSQAYyAOPDS6Wj2zd9/po ifDTHWLG1Ovh4STCyv7np85CJLCWZ3yw -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:46 2025 by rpki-client