$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft File: fysutbj095VolfExLY3MQiOcmmI.mft (raw, json) Hash identifier: pWCcH7JWlkpx/Biq38E2bq2x6ZQJTHrjENywrhbGs+M= Subject key identifier: AD:CE:46:78:F3:23:32:A2:01:97:04:0A:58:7B:D1:B1:D4:CA:E8:6C Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Certificate serial: 0E44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft Manifest number: 0E36 Signing time: Thu 24 Jul 2025 17:56:22 +0000 Manifest this update: Thu 24 Jul 2025 17:56:21 +0000 Manifest next update: Thu 31 Jul 2025 17:56:21 +0000 Files and hashes: 1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: asIloijcx12t5ve4Y9/M2rSBWbZsx08v12yMdeLVTRk=) 2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: H3PZR2Ocqd5DrHweNG98HWtY6eO+2MOa7m6IWNzWQmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3652 (0xe44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Validity Not Before: Jul 24 17:56:21 2025 GMT Not After : Jul 31 17:56:21 2025 GMT Subject: CN=688273c5-0bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bd:a1:18:13:ea:cb:f3:f7:62:ce:7c:d2:35: 33:3f:5c:2b:8f:93:66:53:34:15:1b:67:47:a7:1b: 3b:a7:a0:7b:e5:e3:8e:7b:ad:73:3e:69:01:ff:66: 7f:34:54:59:34:b3:f7:38:5c:ea:b8:51:1c:46:e7: ab:26:b6:36:64:bf:3a:6d:ef:19:54:bb:94:00:fc: fa:94:60:0f:d8:cb:f0:47:30:65:2f:ea:f7:e1:2a: b7:18:89:dc:47:bb:98:48:a1:cf:dd:25:2b:75:3d: 68:2f:8e:3f:b9:ea:23:d3:6a:96:11:19:8f:87:5e: 11:b3:1d:dd:bb:2e:e8:b1:f6:59:4a:59:bc:85:5f: 0d:16:d2:86:9b:70:2b:ce:0e:b6:29:73:79:f0:35: bc:57:38:8e:e8:70:3a:1e:92:f8:40:9e:62:a4:41: 9c:9b:01:08:23:18:99:0b:fe:0e:3f:51:fd:f1:c5: 1c:7f:91:11:c6:b0:83:9b:b6:65:99:70:a5:5f:e5: be:a3:70:a3:44:3d:86:6c:1a:4c:17:11:ed:0c:6a: b6:fb:7e:f5:df:68:40:7f:41:80:8f:7c:3d:df:ba: 28:0b:12:2e:20:2c:9d:74:db:d5:48:2d:d7:53:0f: f2:3f:77:c7:fb:cd:45:de:5e:2a:ef:58:17:dc:46: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CE:46:78:F3:23:32:A2:01:97:04:0A:58:7B:D1:B1:D4:CA:E8:6C X509v3 Authority Key Identifier: keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:bf:8b:fa:f8:18:36:07:97:c6:f1:ca:c4:56:f7:b8:f7:df: dd:3c:47:35:b8:12:dc:a5:89:f0:3f:36:e5:02:b5:ea:a4:c9: f2:b4:24:2d:3e:26:52:56:d2:47:27:a9:8a:8b:53:b3:f5:cc: 75:d6:78:48:f3:e7:66:33:87:9e:48:46:56:11:62:99:0c:c2: 49:3e:39:fc:e3:d5:c9:6d:33:d5:30:c9:9e:75:57:89:3d:39: 65:25:01:b6:c1:a2:65:b0:f0:14:d8:b5:20:1d:1f:b3:6e:2e: fb:b2:8a:c5:01:8f:bd:04:34:1e:9f:11:d5:8f:eb:ca:26:9a: b7:37:1c:a1:1a:82:a9:fa:3e:82:23:7e:d9:cb:98:ec:1c:b9: ae:22:7c:bb:1f:bd:1c:53:a0:cd:73:3d:0f:d5:2d:52:63:37: 09:73:ea:59:fb:6d:96:fb:b3:a6:a4:07:b2:71:6e:05:5f:02: 09:17:bf:92:f2:23:dd:5f:78:5c:da:b5:ae:a1:8c:f0:5b:6a: d0:d7:2e:17:14:90:94:91:dd:8d:13:43:9b:be:be:6d:f9:38: ec:f1:3c:71:fa:19:95:7f:79:45:c1:24:f1:42:59:a7:f3:03: 71:0a:4a:41:2a:00:f2:04:b7:10:df:7a:00:e1:c4:e1:e6:0f: 1e:1e:e0:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy MjM5QzlBNjIwHhcNMjUwNzI0MTc1NjIxWhcNMjUwNzMxMTc1NjIxWjAYMRYwFAYD VQQDEw02ODgyNzNjNS0wYmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8r2hGBPqy/P3Ys580jUzP1wrj5NmUzQVG2dHpxs7p6B75eOOe61zPmkB/2Z/ NFRZNLP3OFzquFEcRuerJrY2ZL86be8ZVLuUAPz6lGAP2MvwRzBlL+r34Sq3GInc R7uYSKHP3SUrdT1oL44/ueoj02qWERmPh14Rsx3duy7osfZZSlm8hV8NFtKGm3Ar zg62KXN58DW8VziO6HA6HpL4QJ5ipEGcmwEIIxiZC/4OP1H98cUcf5ERxrCDm7Zl mXClX+W+o3CjRD2GbBpMFxHtDGq2+37132hAf0GAj3w937ooCxIuICyddNvVSC3X Uw/yP3fH+81F3l4q71gX3EapRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3ORnjz IzKiAZcEClh70bHUyuhsMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5 MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ1Ny85RkQyQzlEMEE5MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1 Vm9sZkV4TFkzTVFpT2NtbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUv4v6+Bg2B5fG8crEVve499/dPEc1uBLcpYnwPzblArXqpMnytCQt PiZSVtJHJ6mKi1Oz9cx11nhI8+dmM4eeSEZWEWKZDMJJPjn849XJbTPVMMmedVeJ PTllJQG2waJlsPAU2LUgHR+zbi77sorFAY+9BDQenxHVj+vKJpq3NxyhGoKp+j6C I37Zy5jsHLmuIny7H70cU6DNcz0P1S1SYzcJc+pZ+22W+7OmpAeycW4FXwIJF7+S 8iPdX3hc2rWuoYzwW2rQ1y4XFJCUkd2NE0Obvr5t+Tjs8Txx+hmVf3lFwSTxQlmn 8wNxCkpBKgDyBLcQ33oA4cTh5g8eHuA6 -----END CERTIFICATE-----Generated at Fri Jul 25 07:10:28 2025 by rpki-client