$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: Tz1oMuxAeoJsEntufzyPQTQcOnckYVtqKZ8q8UgFCpU= Subject key identifier: A6:7B:AC:52:C4:A5:68:A3:57:F8:A0:34:C6:6D:33:76:98:2B:E3:ED Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: BC Signing time: Sat 19 Jul 2025 06:07:16 +0000 Manifest this update: Sat 19 Jul 2025 06:07:15 +0000 Manifest next update: Sat 26 Jul 2025 06:07:15 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: UYgz7BU0MPhExMiF6hVa7KNcFLt6aAkQPE9FJstw1p4=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: Jul 19 06:07:15 2025 GMT Not After : Jul 26 06:07:15 2025 GMT Subject: CN=687b3614-8da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:40:7a:1b:fc:fd:5e:28:99:6a:39:a0:60: 50:3d:bc:da:0f:78:61:b2:c3:e1:64:23:45:74:37: 69:99:3e:33:3f:4e:9f:99:0b:86:75:b7:c3:8d:9b: a5:ec:79:ac:44:ca:6d:72:a4:71:98:83:4b:59:3a: c4:15:18:f3:f1:57:50:0e:e8:26:8b:71:d3:60:51: 9d:cc:d3:de:71:26:7e:b0:66:96:38:55:80:45:77: 68:79:3d:7f:f3:62:f9:a8:c8:03:4e:17:7a:32:a6: f4:f3:be:9d:7b:ed:dc:4f:63:48:10:08:c2:3c:fd: 9d:a1:59:f6:9c:4c:a0:5d:3a:af:19:52:31:56:82: b0:54:30:24:16:fb:24:9b:2a:91:b5:44:16:22:c3: be:91:17:9a:4c:9f:76:3c:28:21:78:54:7b:87:7a: c8:a4:b6:4d:6f:18:7b:b5:84:57:bc:19:e7:db:46: b8:d2:ee:17:03:d2:e9:e1:c2:7e:e7:e4:d6:c6:54: 41:26:6a:18:ed:af:09:bb:b3:c1:ff:0d:6c:ce:67: f3:7e:23:b2:7c:1f:9c:c6:84:9a:b5:24:9a:c5:15: 8f:79:a3:99:b4:e8:f2:e6:e3:bf:a8:0e:6b:b9:c9: a1:c5:f5:b2:7e:27:1b:66:7d:b6:e4:75:50:61:c3: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:AC:52:C4:A5:68:A3:57:F8:A0:34:C6:6D:33:76:98:2B:E3:ED X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:79:dc:32:9d:b2:dd:2c:fe:80:68:85:b0:a2:0e:ce:8b:5e: f4:a7:f5:d9:45:7f:8c:7c:3e:89:77:a3:4f:99:54:9e:ba:20: 7f:e5:77:a1:69:f3:41:1d:e1:e5:8c:9b:b1:5e:2d:45:4a:ce: b0:f7:ee:97:33:17:75:d3:0b:ad:05:b0:83:0a:ad:1d:4c:06: 91:47:4c:55:df:93:a9:64:37:23:8b:b4:9e:6a:d1:7a:35:dd: f1:38:2e:9e:76:63:98:e5:85:f2:66:5b:7a:84:f8:2f:ad:7b: a6:74:79:cb:72:be:55:26:ee:e0:cc:03:60:47:f6:b0:29:7a: 73:9e:74:ab:fa:42:d5:a6:d4:b2:c7:20:3c:32:b2:14:ab:f2: 6b:91:04:d4:11:91:21:4a:1d:46:8c:61:98:a1:86:bf:0b:d5: 87:b5:64:07:f2:ba:9a:09:a2:27:12:a3:1e:83:7c:3a:dc:83: de:71:d7:54:11:1e:dd:b0:0f:09:0f:e1:ed:19:79:b1:8d:15: e6:79:f0:c5:bd:04:8a:f7:1e:dd:33:70:c7:be:28:2d:eb:75: 22:3a:50:3e:db:75:ef:da:18:ff:47:d7:c8:ea:42:4d:f2:71: 13:c3:6c:88:a7:70:57:f4:de:dd:47:b2:0c:27:9c:7f:25:10: d1:e6:85:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDE3MjdFRDE1MUY0MDg5MjEwRUMzRTM2OEE1QTY5RUUz OTQ4NEUzRTYwHhcNMjUwNzE5MDYwNzE1WhcNMjUwNzI2MDYwNzE1WjAYMRYwFAYD VQQDEw02ODdiMzYxNC04ZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3k1Aehv8/V4omWo5oGBQPbzaD3hhssPhZCNFdDdpmT4zP06fmQuGdbfDjZul 7HmsRMptcqRxmINLWTrEFRjz8VdQDugmi3HTYFGdzNPecSZ+sGaWOFWARXdoeT1/ 82L5qMgDThd6Mqb0876de+3cT2NIEAjCPP2doVn2nEygXTqvGVIxVoKwVDAkFvsk myqRtUQWIsO+kReaTJ92PCgheFR7h3rIpLZNbxh7tYRXvBnn20a40u4XA9Lp4cJ+ 5+TWxlRBJmoY7a8Ju7PB/w1szmfzfiOyfB+cxoSatSSaxRWPeaOZtOjy5uO/qA5r ucmhxfWyficbZn225HVQYcOigwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ7rFLE pWijV/igNMZtM3aYK+PtMB8GA1UdIwQYMBaAFBcn7RUfQIkhDsPjaKWmnuOUhOPm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS83REQ3QkJCQzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlTRU93LU5vcGFhZTQ1U0U0 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS83REQ3QkJCQzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlT RU93LU5vcGFhZTQ1U0U0LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnedwynbLdLP6AaIWwog7Oi170p/XZRX+MfD6Jd6NPmVSeuiB/5Xeh afNBHeHljJuxXi1FSs6w9+6XMxd10wutBbCDCq0dTAaRR0xV35OpZDcji7SeatF6 Nd3xOC6edmOY5YXyZlt6hPgvrXumdHnLcr5VJu7gzANgR/awKXpznnSr+kLVptSy xyA8MrIUq/JrkQTUEZEhSh1GjGGYoYa/C9WHtWQH8rqaCaInEqMeg3w63IPecddU ER7dsA8JD+HtGXmxjRXmefDFvQSK9x7dM3DHvigt63UiOlA+23Xv2hj/R9fI6kJN 8nETw2yIp3BX9N7dR7IMJ5x/JRDR5oV+ -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:15 2025 by rpki-client