$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: YgDFuDoHJZAEsxyy35ozcZ9TJIP872Pj5HJCy8Ng0IU= Subject key identifier: C7:52:BB:B1:2C:81:34:C7:3D:F4:CE:2E:DD:3F:87:9A:F4:7B:23:9F Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0C1C Signing time: Sun 02 Nov 2025 18:43:57 +0000 Manifest this update: Sun 02 Nov 2025 18:43:56 +0000 Manifest next update: Sun 09 Nov 2025 18:43:56 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: F8ML55sGAtEULR4dO7FObhMHuAhmNzPPEY2awDH8kr8=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: Nov 2 18:43:56 2025 GMT Not After : Nov 9 18:43:56 2025 GMT Subject: CN=6907a66d-1d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:58:d4:13:29:66:dd:34:97:53:2b:d1:94: 66:8f:93:3f:91:74:4f:07:24:3e:13:a7:cd:ab:00: 9e:4a:c7:a9:eb:22:3a:f3:e3:5c:de:42:0f:ac:ab: e4:c8:a1:9c:98:5b:b0:85:6b:64:33:1b:3e:e4:45: 78:94:0c:6d:f8:c6:e3:a1:71:74:da:a0:a4:a6:75: 91:8e:48:40:49:85:13:43:9c:fc:de:65:ab:64:c1: 3b:9f:95:c2:22:70:90:89:5b:1f:5a:51:4f:0d:d0: 7a:b7:66:e7:85:62:4b:ae:90:80:69:51:1b:30:99: 18:ca:55:fe:88:fb:40:5b:99:a2:f9:72:6e:8b:aa: 6b:8c:37:f7:13:b6:08:5f:58:ba:42:99:e0:ef:d2: 7c:a4:6b:65:16:ab:a1:74:e1:aa:20:b8:ff:48:be: 61:ca:0d:95:95:4c:75:ce:45:43:b5:f7:e9:49:6f: db:52:c1:c1:35:e9:77:55:c9:37:88:f1:78:98:27: 80:26:b8:02:20:60:af:a8:16:78:1a:f9:09:65:2b: 7c:92:11:36:2d:b6:d8:fb:1a:76:1c:a0:2f:dc:bb: e0:c1:5b:0d:f9:c5:ca:71:ae:0f:9e:7a:a4:72:fb: 09:22:60:58:c8:12:66:45:33:d9:61:6a:70:ec:e3: 96:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:BB:B1:2C:81:34:C7:3D:F4:CE:2E:DD:3F:87:9A:F4:7B:23:9F X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:64:cc:cf:85:3f:0a:8a:38:af:b2:2a:15:8e:54:a9:8b:8a: dc:db:23:e2:67:9f:d7:ef:5f:5c:3d:57:41:68:96:7b:dc:e7: 96:60:d3:93:aa:20:7c:64:95:85:0f:18:d6:00:ad:9c:98:cf: 58:7d:8b:45:df:c9:a8:c4:b7:9e:28:c1:3f:fd:ca:9f:25:ef: c2:0b:85:bb:a4:1b:8a:97:ee:11:a8:38:6c:dd:6c:8e:95:3b: 65:6d:9e:04:5b:30:17:be:ec:fa:9b:4b:75:11:35:59:f0:bc: 87:bb:1e:30:87:20:a9:e8:c0:1f:d8:3b:d2:1c:4f:60:46:67: 96:23:2f:5d:99:de:f2:ca:fe:6d:b2:42:7e:e1:26:d1:e9:0a: 8b:40:58:59:79:14:f2:4e:3a:66:0c:0b:94:7f:22:ac:42:f2: dc:5e:51:7d:14:42:2a:df:51:51:e2:b4:fe:2c:59:0e:16:81: 86:4a:9c:f0:79:83:b0:c2:c4:2b:81:eb:70:c3:b6:90:95:9b: 4f:7c:44:ca:ec:78:99:fc:3b:7a:ad:9b:f5:d2:a5:5e:0c:a8: c7:b7:08:48:20:c5:94:da:21:64:75:46:aa:16:63:62:61:01: d4:4f:70:b7:7e:cc:7e:9f:88:a2:8b:51:82:92:87:ef:8e:ec: cc:ba:18:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUxMTAyMTg0MzU2WhcNMjUxMTA5MTg0MzU2WjAYMRYwFAYD VQQDEw02OTA3YTY2ZC0xZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h1Y1BMpZt00l1Mr0ZRmj5M/kXRPByQ+E6fNqwCeSsep6yI68+Nc3kIPrKvk yKGcmFuwhWtkMxs+5EV4lAxt+MbjoXF02qCkpnWRjkhASYUTQ5z83mWrZME7n5XC InCQiVsfWlFPDdB6t2bnhWJLrpCAaVEbMJkYylX+iPtAW5mi+XJui6prjDf3E7YI X1i6Qpng79J8pGtlFquhdOGqILj/SL5hyg2VlUx1zkVDtffpSW/bUsHBNel3Vck3 iPF4mCeAJrgCIGCvqBZ4GvkJZSt8khE2LbbY+xp2HKAv3LvgwVsN+cXKca4Pnnqk cvsJImBYyBJmRTPZYWpw7OOW9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdSu7Es gTTHPfTOLt0/h5r0eyOfMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoZMzPhT8KijivsioVjlSpi4rc2yPiZ5/X719cPVdBaJZ73OeWYNOT qiB8ZJWFDxjWAK2cmM9YfYtF38moxLeeKME//cqfJe/CC4W7pBuKl+4RqDhs3WyO lTtlbZ4EWzAXvuz6m0t1ETVZ8LyHux4whyCp6MAf2DvSHE9gRmeWIy9dmd7yyv5t skJ+4SbR6QqLQFhZeRTyTjpmDAuUfyKsQvLcXlF9FEIq31FR4rT+LFkOFoGGSpzw eYOwwsQrgetww7aQlZtPfETK7HiZ/Dt6rZv10qVeDKjHtwhIIMWU2iFkdUaqFmNi YQHUT3C3fsx+n4iii1GCkofvjuzMuhh0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:25 2025 by rpki-client