$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft File: fysutbj095VolfExLY3MQiOcmmI.mft (raw, json) Hash identifier: yFp5OdeGzCpSZ4z4+Uk7rXyMMT439+HHLDK6e8WlRis= Subject key identifier: 1F:30:CA:1D:00:B4:DD:21:4A:66:75:1F:F0:66:DE:0B:1E:7D:1F:4A Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Certificate serial: 0E28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft Manifest number: 0E1A Signing time: Fri 30 May 2025 17:59:15 +0000 Manifest this update: Fri 30 May 2025 17:59:15 +0000 Manifest next update: Fri 06 Jun 2025 17:59:15 +0000 Files and hashes: 1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: 0RhG9iBsh88Mvtp3DZnHVgw3hTwGgqqHyHkcXGGRLr4=) 2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: H3PZR2Ocqd5DrHweNG98HWtY6eO+2MOa7m6IWNzWQmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3624 (0xe28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Validity Not Before: May 30 17:59:15 2025 GMT Not After : Jun 6 17:59:15 2025 GMT Subject: CN=6839f1f3-9e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:87:1a:6f:1c:f3:c7:fe:51:96:ae:51:7e: e4:b1:63:42:04:cd:f8:78:ac:a7:80:ef:e3:ee:74: 7b:45:6b:04:c3:65:c9:92:e4:02:93:fe:3e:eb:93: a9:22:0e:0b:c0:69:1b:6c:03:b3:5a:db:c3:22:96: 56:d6:0c:73:bb:66:90:fa:c8:3a:c5:bf:99:2a:e6: 98:15:a1:33:15:9b:b7:e1:5f:39:60:09:70:93:49: c2:51:ea:59:41:e8:4d:3d:fd:aa:ab:16:53:a5:0c: f7:c9:a2:ec:87:6e:19:0f:34:f4:d3:2b:4e:ab:29: b4:77:11:f4:51:4d:8c:4c:42:e4:bd:8e:eb:1d:cc: 57:d4:0d:af:83:47:f3:b2:7b:3c:e6:6e:e8:8b:3b: 6f:1e:47:eb:26:00:95:e3:13:d2:a4:a6:e3:4d:46: 29:0c:a5:24:a8:0a:37:ce:a5:7c:35:c1:45:2b:c2: ec:39:81:02:78:88:64:82:73:91:12:79:38:55:76: cb:b6:ba:1c:eb:72:e8:b9:02:6e:e7:05:2d:0b:1a: c4:a1:eb:88:2a:b3:23:3f:06:c3:1c:86:11:2a:22: 67:56:cc:d7:02:9f:a2:bd:dd:5c:fa:55:d2:39:8a: d6:2e:50:25:f8:44:4a:6a:fd:52:2e:60:32:60:62: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:30:CA:1D:00:B4:DD:21:4A:66:75:1F:F0:66:DE:0B:1E:7D:1F:4A X509v3 Authority Key Identifier: keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:45:9a:8d:3d:1e:96:84:f6:95:54:e8:33:0e:85:4d:9b:2c: e1:72:55:c1:ce:ab:c0:98:90:78:50:bf:89:1e:8c:75:e1:22: 0a:e2:57:93:8d:12:d0:32:c7:af:a7:84:49:0a:c2:0b:b4:dc: 7c:ef:bb:f1:a8:ec:8b:68:38:a3:4c:70:96:38:38:41:62:d1: 27:f2:32:90:b8:65:3d:89:f4:41:4b:65:c7:f1:73:2e:0b:37: ee:2b:41:bc:df:3a:d0:3a:02:7f:4c:00:48:8a:a5:b0:98:c9: 9b:16:bd:e7:7c:2a:4b:da:8f:c6:b0:e4:1d:98:9e:96:66:56: 95:47:42:8c:20:84:e3:fb:c7:3e:6f:17:a0:e9:07:be:74:8a: 5a:8b:99:16:cd:b8:69:aa:de:41:79:47:ad:e6:87:01:d9:52: d2:a8:8c:1e:8b:29:2d:a2:58:8f:61:39:0e:da:e8:f6:9f:b5: 94:7b:ac:51:52:df:5e:45:1e:30:50:51:f3:95:30:c0:a1:f8: 84:f2:6c:e1:c5:a0:db:60:0e:1f:98:e5:78:b8:91:9c:08:a1: 3b:29:e8:8f:1b:be:e7:41:e8:66:4a:df:f9:cd:45:41:5c:3e: 83:08:28:fd:1e:e2:ee:9f:c5:b5:20:ea:6f:1a:e0:0e:a8:e3: a4:b0:97:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy MjM5QzlBNjIwHhcNMjUwNTMwMTc1OTE1WhcNMjUwNjA2MTc1OTE1WjAYMRYwFAYD VQQDEw02ODM5ZjFmMy05ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAOHGm8c88f+UZauUX7ksWNCBM34eKyngO/j7nR7RWsEw2XJkuQCk/4+65Op Ig4LwGkbbAOzWtvDIpZW1gxzu2aQ+sg6xb+ZKuaYFaEzFZu34V85YAlwk0nCUepZ QehNPf2qqxZTpQz3yaLsh24ZDzT00ytOqym0dxH0UU2MTELkvY7rHcxX1A2vg0fz sns85m7oiztvHkfrJgCV4xPSpKbjTUYpDKUkqAo3zqV8NcFFK8LsOYECeIhkgnOR Enk4VXbLtroc63LouQJu5wUtCxrEoeuIKrMjPwbDHIYRKiJnVszXAp+ivd1c+lXS OYrWLlAl+ERKav1SLmAyYGI71QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8wyh0A tN0hSmZ1H/Bm3gsefR9KMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5 MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ1Ny85RkQyQzlEMEE5MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1 Vm9sZkV4TFkzTVFpT2NtbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLRZqNPR6WhPaVVOgzDoVNmyzhclXBzqvAmJB4UL+JHox14SIK4leT jRLQMsevp4RJCsILtNx877vxqOyLaDijTHCWODhBYtEn8jKQuGU9ifRBS2XH8XMu CzfuK0G83zrQOgJ/TABIiqWwmMmbFr3nfCpL2o/GsOQdmJ6WZlaVR0KMIITj+8c+ bxeg6Qe+dIpai5kWzbhpqt5BeUet5ocB2VLSqIweiyktoliPYTkO2uj2n7WUe6xR Ut9eRR4wUFHzlTDAofiE8mzhxaDbYA4fmOV4uJGcCKE7KeiPG77nQehmSt/5zUVB XD6DCCj9HuLun8W1IOpvGuAOqOOksJef -----END CERTIFICATE-----Generated at Sat May 31 17:37:41 2025 by rpki-client