$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: Bw6Ix27IfI6V0WtlpaIYnqRZp9RPm9JmO2SEi7G+SHc= Subject key identifier: 51:AD:89:9A:AB:E7:74:DE:02:B5:5D:56:33:E5:06:C7:F5:2B:19:16 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: 0142 Signing time: Wed 05 Nov 2025 04:34:10 +0000 Manifest this update: Wed 05 Nov 2025 04:34:10 +0000 Manifest next update: Wed 12 Nov 2025 04:34:10 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: u3twt3NPhSIs33w11ZLyqfSlRt6btKeO4dqohFnQFRc=) 2: FFE844FA9A4111F0A04F703EC4F9AE02.roa (hash: CVNQ8o5vgUTo0mQqecmD6qlSNzDJS1qhWASENFVDXu8=) 3: FF5BF8249A4111F0A04F703EC4F9AE02.roa (hash: iScThtYyHAtRsJGeo4LgzdxeB5YiqkEobfpoS62JfqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Nov 5 04:34:10 2025 GMT Not After : Nov 12 04:34:10 2025 GMT Subject: CN=690ad3c2-883b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:d3:b7:b5:e0:8b:43:be:8e:43:71:58:5e: 9e:9a:5b:96:6d:a8:05:cf:3f:d2:f7:82:cc:c1:fd: 67:36:bd:83:d1:87:e2:a3:49:01:57:30:b3:d2:64: 89:5a:f9:b4:51:7d:14:eb:ae:9c:13:09:c7:17:d0: fb:43:1f:19:95:32:7e:8e:9a:f3:a7:73:9d:6a:7d: 0f:a2:aa:ad:8a:73:b0:2b:36:84:f3:5b:87:56:50: 52:55:b4:71:6f:98:f0:30:75:40:6b:a1:82:27:7e: 1b:4b:9b:12:f4:4f:ea:df:7b:d4:c9:dd:69:dc:91: e2:df:28:cf:9a:af:6c:30:46:52:25:6c:51:24:c0: 00:87:56:48:7c:02:4c:6b:6f:ce:c6:7b:05:59:c7: 92:bc:b4:ee:fd:57:69:3d:85:b9:14:8f:cd:5b:d4: a7:91:33:d7:fa:69:cc:7a:41:32:ce:c6:98:33:e5: 47:ff:90:29:52:47:cc:34:3d:4c:da:7b:4e:ff:4c: 63:9a:14:81:54:64:ef:ac:74:3f:c6:69:72:9b:64: 2a:32:60:77:24:22:5b:0c:2a:db:24:1f:3d:be:4e: 4f:b5:13:23:b9:ae:0d:66:ef:cc:93:4f:f0:2f:ce: 3d:1a:31:93:62:28:b8:48:2f:98:1e:d3:36:7d:75: c9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AD:89:9A:AB:E7:74:DE:02:B5:5D:56:33:E5:06:C7:F5:2B:19:16 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ac:39:75:0a:61:2e:0d:32:89:16:e4:0e:d2:39:87:f8:0c: a0:7e:47:f1:2e:8b:06:de:11:89:9a:a9:1a:a8:d5:72:de:98: 8d:0b:4c:24:f1:ea:22:f4:00:46:0d:8f:5b:74:47:2f:ad:c1: 02:d6:a7:c4:ff:47:32:58:f1:c8:38:b2:86:90:b2:e2:56:c8: 1b:7b:aa:d5:99:f0:bf:77:83:e5:25:f3:25:79:8e:f5:72:69: b1:57:44:03:43:bb:51:1e:f6:ae:1f:8f:20:90:c5:a0:54:b4: 5b:b0:dc:3c:4a:95:76:74:dd:c2:85:1b:ff:33:23:78:ab:07: e9:bd:78:b2:58:fe:fe:69:78:d2:66:c5:4e:b8:73:4e:d0:af: 99:24:d9:50:31:aa:99:7c:8a:a8:8f:9a:f7:d2:29:52:29:3d: 97:ef:7d:e3:5e:eb:2e:8b:22:a2:d4:b9:e0:a1:1d:bb:0d:ef: 2c:f9:27:4a:43:5e:51:62:21:64:a2:2a:ad:35:ea:75:d6:e4: 85:b9:43:87:c9:17:40:ad:3a:5c:7b:be:47:09:ab:d1:16:3a: bc:b5:3f:4a:7e:ef:ff:e4:40:38:1e:7e:b7:8e:d5:fb:dd:31: fd:91:57:e1:a9:0a:35:47:06:08:9b:e6:4d:fe:bc:a8:80:21: 62:2e:91:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUxMTA1MDQzNDEwWhcNMjUxMTEyMDQzNDEwWjAYMRYwFAYD VQQDEw02OTBhZDNjMi04ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL/Tt7Xgi0O+jkNxWF6emluWbagFzz/S94LMwf1nNr2D0Yfio0kBVzCz0mSJ Wvm0UX0U666cEwnHF9D7Qx8ZlTJ+jprzp3Odan0PoqqtinOwKzaE81uHVlBSVbRx b5jwMHVAa6GCJ34bS5sS9E/q33vUyd1p3JHi3yjPmq9sMEZSJWxRJMAAh1ZIfAJM a2/OxnsFWceSvLTu/VdpPYW5FI/NW9SnkTPX+mnMekEyzsaYM+VH/5ApUkfMND1M 2ntO/0xjmhSBVGTvrHQ/xmlym2QqMmB3JCJbDCrbJB89vk5PtRMjua4NZu/Mk0/w L849GjGTYii4SC+YHtM2fXXJcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGtiZqr 53TeArVdVjPlBsf1KxkWMB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJK a2djNkk0Qk1uMWtGT1B1ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACrDl1CmEuDTKJFuQO0jmH+AygfkfxLosG3hGJmqkaqNVy3piNC0wk 8eoi9ABGDY9bdEcvrcEC1qfE/0cyWPHIOLKGkLLiVsgbe6rVmfC/d4PlJfMleY71 cmmxV0QDQ7tRHvauH48gkMWgVLRbsNw8SpV2dN3ChRv/MyN4qwfpvXiyWP7+aXjS ZsVOuHNO0K+ZJNlQMaqZfIqoj5r30ilSKT2X733jXusuiyKi1LngoR27De8s+SdK Q15RYiFkoiqtNep11uSFuUOHyRdArTpce75HCavRFjq8tT9Kfu//5EA4Hn63jtX7 3TH9kVfhqQo1RwYIm+ZN/ryogCFiLpEB -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:34 2025 by rpki-client