$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: 3/mQ8NGxNz6lWy0N/BJ+2Mh5GaPa7AO5bNRpwANdixs= Subject key identifier: 79:A7:6F:85:2A:DE:E9:91:7C:B5:E9:9D:77:6E:CA:85:14:C2:A4:5F Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0BCC Signing time: Fri 30 May 2025 19:04:43 +0000 Manifest this update: Fri 30 May 2025 19:04:42 +0000 Manifest next update: Fri 06 Jun 2025 19:04:42 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: z494OkAVMBL4cZ4xyObIByQTYwaegcFy5gw4wkEFHVc=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: May 30 19:04:42 2025 GMT Not After : Jun 6 19:04:42 2025 GMT Subject: CN=683a014b-131f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:6c:77:4d:ce:9e:92:24:7c:70:6d:e2:5e: 7a:9a:00:f5:e9:b3:76:e9:64:63:ee:a2:f8:06:25: b5:71:e0:5d:c0:32:49:5b:74:42:b0:5f:b8:50:c9: 1b:51:c0:a5:5b:c8:61:c1:bc:24:24:54:ca:14:70: 2a:f6:9e:92:33:40:0f:a9:f3:de:ad:56:b0:96:85: 1d:c6:08:05:22:c5:e9:7f:6b:1f:64:41:4e:ae:a2: 41:5b:6f:7c:f3:9f:f5:5e:95:33:fd:6a:9b:f0:82: 59:b1:85:f3:ab:2a:d0:f4:fc:c0:05:16:bd:d4:2d: ec:c7:d2:9c:56:5d:c4:d7:aa:3c:6c:ca:7d:33:a4: e2:de:41:cb:0e:11:cf:db:ff:95:ad:11:cb:30:23: 32:b7:3d:d3:88:b4:b2:43:b7:b4:46:c1:74:e1:b8: b2:2a:c3:e9:bc:54:70:ec:86:e6:a0:3a:0c:75:1f: 6e:1b:ca:b5:65:59:78:fe:85:b4:ff:02:00:f2:c7: 1f:f1:a0:c0:8c:b3:d8:7e:45:a7:65:48:ea:89:e0: fc:5f:1a:75:c5:d7:8d:04:67:81:f0:12:38:1f:68: 51:fa:d4:50:dc:fa:1b:a2:5f:6d:46:7a:e0:c8:66: 66:20:ab:96:61:1f:87:30:7e:2e:e0:37:40:23:41: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A7:6F:85:2A:DE:E9:91:7C:B5:E9:9D:77:6E:CA:85:14:C2:A4:5F X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:38:e9:48:20:5f:b9:d8:79:97:81:19:08:33:21:cb:c3:f9: 5c:74:6a:15:72:fd:2c:60:fa:92:d2:96:60:64:1a:44:2c:fa: df:17:25:5f:a6:55:80:1f:32:d7:23:72:e1:1e:72:a0:6b:7e: 9c:5b:c9:50:ed:95:04:28:5c:82:85:66:00:5c:c8:4c:18:83: 84:2b:78:82:00:5a:9b:40:e7:df:28:be:2c:04:b2:3c:61:6b: c3:2d:ca:a1:f2:e1:00:14:af:e4:ca:42:6f:44:1c:cd:d1:43: 0b:17:ac:ad:b4:2e:7a:a6:47:ca:5f:87:06:e8:28:fd:79:43: 4a:05:86:7e:de:63:54:80:9f:a3:ed:f7:71:30:41:94:ea:73: 5f:80:10:ba:f9:c0:0b:63:2d:8d:37:90:e5:bc:2c:0e:00:26: e1:65:e5:e6:08:65:80:ec:84:a6:93:f9:82:e3:d1:ce:13:c7: 30:be:63:21:b5:72:19:46:66:a4:3a:8e:67:27:bd:f2:1d:fb: 32:0b:c8:c7:fe:bd:57:7e:73:43:48:01:4a:c4:d2:1e:c0:6b: dd:16:1b:28:d0:4c:d7:1b:16:60:d5:d3:bd:ea:c6:fe:12:e4: f2:a9:3b:f8:b7:1a:dc:7e:4a:d6:7f:56:87:60:38:62:a5:5b: fc:de:d6:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUwNTMwMTkwNDQyWhcNMjUwNjA2MTkwNDQyWjAYMRYwFAYD VQQDEw02ODNhMDE0Yi0xMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NZsd03OnpIkfHBt4l56mgD16bN26WRj7qL4BiW1ceBdwDJJW3RCsF+4UMkb UcClW8hhwbwkJFTKFHAq9p6SM0APqfPerVawloUdxggFIsXpf2sfZEFOrqJBW298 85/1XpUz/Wqb8IJZsYXzqyrQ9PzABRa91C3sx9KcVl3E16o8bMp9M6Ti3kHLDhHP 2/+VrRHLMCMytz3TiLSyQ7e0RsF04biyKsPpvFRw7IbmoDoMdR9uG8q1ZVl4/oW0 /wIA8scf8aDAjLPYfkWnZUjqieD8Xxp1xdeNBGeB8BI4H2hR+tRQ3Pobol9tRnrg yGZmIKuWYR+HMH4u4DdAI0HG2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmnb4Uq 3umRfLXpnXduyoUUwqRfMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKOOlIIF+52HmXgRkIMyHLw/lcdGoVcv0sYPqS0pZgZBpELPrfFyVf plWAHzLXI3LhHnKga36cW8lQ7ZUEKFyChWYAXMhMGIOEK3iCAFqbQOffKL4sBLI8 YWvDLcqh8uEAFK/kykJvRBzN0UMLF6yttC56pkfKX4cG6Cj9eUNKBYZ+3mNUgJ+j 7fdxMEGU6nNfgBC6+cALYy2NN5DlvCwOACbhZeXmCGWA7ISmk/mC49HOE8cwvmMh tXIZRmakOo5nJ73yHfsyC8jH/r1XfnNDSAFKxNIewGvdFhso0EzXGxZg1dO96sb+ EuTyqTv4txrcfkrWf1aHYDhipVv83tbH -----END CERTIFICATE-----Generated at Sat May 31 17:46:32 2025 by rpki-client