$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: HDRlD+OPrD+ab7t4AMRaJ82a520yvDsZf/3odCbg+e8= Subject key identifier: 9E:82:5B:B4:49:7F:93:3C:4E:F7:09:BA:42:E5:10:09:53:16:E2:34 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: 0107 Signing time: Sat 19 Jul 2025 05:15:15 +0000 Manifest this update: Sat 19 Jul 2025 05:15:14 +0000 Manifest next update: Sat 26 Jul 2025 05:15:14 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: ufa9j9u/fMU/Y43bgDvYr6MisQO/wjGWgMywWO/noSU=) 2: 30CC4814FE4D11EFBFE66B1AC4F9AE02.roa (hash: CsZn/2/QnSvPMN1U3HaNIbfp6BBtY5cFDgdleZuzI7Q=) 3: 318E4414FE4D11EFBFE66B1AC4F9AE02.roa (hash: bnz/Gz2cIiz69/78S45wyomzGwSQuid2xoDm6Wpn25U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Jul 19 05:15:14 2025 GMT Not After : Jul 26 05:15:14 2025 GMT Subject: CN=687b29e3-5f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:45:00:2a:49:8c:39:be:ba:b2:17:fc:e7: eb:91:80:f9:e1:b2:d8:27:cd:a7:06:9a:32:77:78: da:48:9b:f4:62:b2:2d:fe:16:26:3b:e8:87:5e:05: 7f:5e:e8:68:37:51:e4:9a:6b:56:33:c3:1f:ba:db: 79:70:0f:1c:3b:f1:89:62:d5:31:51:11:1f:80:35: fa:0b:83:74:6f:96:87:76:42:f6:20:ba:5d:cd:fe: 39:9f:40:f2:41:7c:02:e6:7d:d1:c0:54:7b:53:88: 5f:76:99:1c:dc:23:61:9e:06:39:3a:b2:6d:38:75: 90:62:0b:36:02:68:b5:08:a8:48:6a:05:b9:cd:fd: 70:94:88:9e:61:70:71:7b:9c:b2:56:90:88:45:ab: 45:a7:c0:e0:a4:ff:26:79:d2:32:e7:53:25:5a:39: ba:19:aa:b2:06:59:a0:cc:46:d3:94:fb:2c:0f:13: 78:10:8d:48:73:6d:15:2a:99:c4:a9:29:d2:bd:45: 46:74:f7:61:ed:c5:99:35:85:f1:ac:4a:94:5e:21: 6c:ff:9e:34:35:69:ca:c6:4a:cf:21:2e:c3:6a:a4: 46:8e:35:c3:b8:45:dc:3d:5e:a5:9a:45:a1:b6:3d: 67:ee:fb:d1:1c:63:2c:e7:e7:c9:8b:d4:d9:86:41: bb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:82:5B:B4:49:7F:93:3C:4E:F7:09:BA:42:E5:10:09:53:16:E2:34 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:94:6a:13:21:b9:20:da:d5:00:c4:98:ab:01:3a:c0:4b:44: 03:ff:53:3a:5a:f7:e4:0e:0b:af:c1:a9:7b:e4:57:d3:5b:f2: e2:e7:25:90:08:c2:78:27:2e:db:0a:42:ea:32:27:14:85:b4: 67:99:e6:e3:3f:e1:df:bf:7d:fe:b9:d0:b7:f1:91:d3:bb:2a: f3:bf:43:7b:0d:03:d1:87:21:12:f2:ec:31:0a:fb:d1:9b:d7: e1:8f:ff:56:f8:fe:ec:6a:79:47:89:c3:2c:69:ee:9a:78:48: 54:d1:45:aa:8e:b0:ce:8a:80:38:d6:a4:d2:1c:ae:4f:5b:e0: 6d:e8:ee:91:40:e4:f2:4f:ac:a7:ba:5d:58:53:bf:4e:ac:52: 49:bb:2d:12:44:5e:b5:68:56:e9:9b:58:23:2b:4c:fb:27:e7: 78:a4:75:88:8c:50:33:cd:7e:b3:5a:b6:bb:7d:d8:08:56:48: 27:9c:e3:80:ae:69:97:24:4e:0b:b7:bb:9c:ec:b7:19:73:ec: a5:0c:99:ab:cb:74:73:3d:fd:e6:6f:9c:b2:60:7f:c1:59:a1: 6a:77:2d:11:06:27:e9:48:5d:d5:e5:74:9a:e6:2d:b1:a3:fb: ef:5f:a7:39:9c:06:61:ef:1e:8d:38:ea:06:4a:5f:79:d3:b2: 5c:52:6e:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUwNzE5MDUxNTE0WhcNMjUwNzI2MDUxNTE0WjAYMRYwFAYD VQQDEw02ODdiMjllMy01ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02ZFACpJjDm+urIX/OfrkYD54bLYJ82nBpoyd3jaSJv0YrIt/hYmO+iHXgV/ XuhoN1HkmmtWM8Mfutt5cA8cO/GJYtUxUREfgDX6C4N0b5aHdkL2ILpdzf45n0Dy QXwC5n3RwFR7U4hfdpkc3CNhngY5OrJtOHWQYgs2Ami1CKhIagW5zf1wlIieYXBx e5yyVpCIRatFp8DgpP8medIy51MlWjm6GaqyBlmgzEbTlPssDxN4EI1Ic20VKpnE qSnSvUVGdPdh7cWZNYXxrEqUXiFs/540NWnKxkrPIS7DaqRGjjXDuEXcPV6lmkWh tj1n7vvRHGMs5+fJi9TZhkG7oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6CW7RJ f5M8TvcJukLlEAlTFuI0MB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJK a2djNkk0Qk1uMWtGT1B1ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCslGoTIbkg2tUAxJirATrAS0QD/1M6WvfkDguvwal75FfTW/Li5yWQ CMJ4Jy7bCkLqMicUhbRnmebjP+Hfv33+udC38ZHTuyrzv0N7DQPRhyES8uwxCvvR m9fhj/9W+P7sanlHicMsae6aeEhU0UWqjrDOioA41qTSHK5PW+Bt6O6RQOTyT6yn ul1YU79OrFJJuy0SRF61aFbpm1gjK0z7J+d4pHWIjFAzzX6zWra7fdgIVkgnnOOA rmmXJE4Lt7uc7LcZc+ylDJmry3RzPf3mb5yyYH/BWaFqdy0RBifpSF3V5XSa5i2x o/vvX6c5nAZh7x6NOOoGSl9507JcUm4S -----END CERTIFICATE-----Generated at Sun Jul 20 07:15:53 2025 by rpki-client