$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: DpNkDYEn96d6U5Z/hDA21GEFPhx0pNf4DBC/g9Y40uY= Subject key identifier: 6A:7C:3D:BB:8C:91:5C:84:D5:62:31:36:DF:C0:D4:9D:CE:55:CD:34 Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0BB1 Signing time: Fri 04 Apr 2025 19:01:44 +0000 Manifest this update: Fri 04 Apr 2025 19:01:44 +0000 Manifest next update: Fri 11 Apr 2025 19:01:44 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: 20SKNsMBW5rFduAU+Okex/2inICBD5D8blsq1x2sGbs=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259 Validity Not Before: Apr 4 19:01:44 2025 GMT Not After : Apr 11 19:01:44 2025 GMT Subject: CN=67f02c98-525b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:22:1d:f0:dc:94:a9:1d:2c:21:a5:ee:96: 9d:9a:5e:89:cb:18:a7:62:06:97:b5:c1:cc:63:3b: 94:2d:31:66:0c:18:be:0f:aa:5b:96:fc:71:ef:19: ed:ad:c0:b5:ce:67:07:8f:6e:7a:6c:89:c6:63:6d: d3:03:6f:ab:83:88:a5:b3:64:bf:49:a5:96:d6:23: 43:f9:b6:8d:8d:22:63:24:f3:42:af:a0:48:af:a1: 71:c1:db:69:19:d4:fd:6c:d4:77:12:01:19:11:49: 2e:9b:b6:49:bd:3c:f0:04:36:55:f6:25:92:d0:84: cc:02:89:2e:d1:a0:fb:97:23:6a:7d:3a:e5:2e:86: dc:57:c6:97:26:08:50:9c:69:82:17:10:23:ef:6b: f2:c9:6d:3e:20:f8:67:df:cc:5f:ab:54:d9:c5:c2: 20:e3:34:11:ac:b0:73:be:48:ad:18:ea:a0:f7:ed: 21:bc:6d:73:8a:ca:9e:3b:5d:6a:30:7a:af:7e:4d: 7f:f4:e8:c7:b7:fe:59:0c:fa:76:04:5c:4e:38:f8: 3e:c5:8a:92:39:f7:8d:77:75:02:ff:94:b6:fa:5d: 25:a0:31:00:cb:54:ef:3c:24:76:5f:ec:48:0c:9a: 00:05:cb:d0:a6:ba:6b:bf:f1:18:2f:99:9b:3d:d9: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7C:3D:BB:8C:91:5C:84:D5:62:31:36:DF:C0:D4:9D:CE:55:CD:34 X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:25:89:89:71:c5:99:a0:08:65:a9:34:cc:8b:01:13:9e:6f: d1:ae:2e:89:ce:14:72:be:04:ae:a1:46:2a:92:ee:73:56:9f: ae:23:f3:9c:22:8c:0d:7b:4c:de:7c:97:62:8a:03:53:2d:4b: 88:8a:f4:0c:4e:40:e3:ef:76:06:9f:fd:ee:84:0a:da:9d:ca: 84:a7:6d:ff:45:54:2b:95:1a:bb:68:47:d7:73:d2:67:3b:d3: ae:03:36:5b:76:ed:e7:ba:b5:17:83:f6:d8:ca:eb:70:ec:45: 27:39:ff:0a:dd:0d:7b:57:26:b2:c9:00:38:81:40:82:a0:d0: 01:69:42:e7:3f:94:8e:61:c6:3d:02:5d:20:b0:9d:82:0b:32: 6b:22:c2:2c:e4:45:1c:4e:ad:a5:d1:08:ec:7e:41:5f:fa:8c: 51:44:b7:0a:b7:ad:9d:7c:57:5a:73:60:d5:be:cb:ea:d4:4f: d3:1a:4f:23:52:d7:ff:1e:2d:74:5f:00:44:f0:97:93:2c:ef: 4d:39:6d:a0:fa:31:ee:1c:bf:8e:ae:ee:d9:ab:33:f5:b1:5c: 7c:4c:03:12:56:29:88:d4:e2:35:4f:47:af:53:a8:8b:88:cd: 1e:db:ea:c0:51:74:c3:c8:2c:d7:c5:c1:97:d7:50:f0:56:7f: 1c:0a:f1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUwNDA0MTkwMTQ0WhcNMjUwNDExMTkwMTQ0WjAYMRYwFAYD VQQDEw02N2YwMmM5OC01MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yIiHfDclKkdLCGl7padml6JyxinYgaXtcHMYzuULTFmDBi+D6pblvxx7xnt rcC1zmcHj256bInGY23TA2+rg4ils2S/SaWW1iND+baNjSJjJPNCr6BIr6Fxwdtp GdT9bNR3EgEZEUkum7ZJvTzwBDZV9iWS0ITMAoku0aD7lyNqfTrlLobcV8aXJghQ nGmCFxAj72vyyW0+IPhn38xfq1TZxcIg4zQRrLBzvkitGOqg9+0hvG1zisqeO11q MHqvfk1/9OjHt/5ZDPp2BFxOOPg+xYqSOfeNd3UC/5S2+l0loDEAy1TvPCR2X+xI DJoABcvQprprv/EYL5mbPdk9MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGp8PbuM kVyE1WIxNt/A1J3OVc00MB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4JYmJccWZoAhlqTTMiwETnm/Rri6JzhRyvgSuoUYqku5zVp+uI/Oc IowNe0zefJdiigNTLUuIivQMTkDj73YGn/3uhArancqEp23/RVQrlRq7aEfXc9Jn O9OuAzZbdu3nurUXg/bYyutw7EUnOf8K3Q17VyayyQA4gUCCoNABaULnP5SOYcY9 Al0gsJ2CCzJrIsIs5EUcTq2l0QjsfkFf+oxRRLcKt62dfFdac2DVvsvq1E/TGk8j Utf/Hi10XwBE8JeTLO9NOW2g+jHuHL+Oru7ZqzP1sVx8TAMSVimI1OI1T0evU6iL iM0e2+rAUXTDyCzXxcGX11DwVn8cCvE5 -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:09 2025 by rpki-client