$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: p3dH97Wrfj9SJyapkL4IgAByNoU90Yw5D7ZHaizTDOY= Subject key identifier: B1:4A:A0:6A:7E:7A:C9:33:F6:73:14:04:67:82:1C:E1:BC:3C:E6:AC Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0C0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0C05 Signing time: Thu 18 Sep 2025 18:58:45 +0000 Manifest this update: Thu 18 Sep 2025 18:58:45 +0000 Manifest next update: Thu 25 Sep 2025 18:58:45 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: TaEbe9Xjwa9g7c9KYh51HH7pVurJiA7Q9uMmnDWgask=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3085 (0xc0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: Sep 18 18:58:45 2025 GMT Not After : Sep 25 18:58:45 2025 GMT Subject: CN=68cc5665-3363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:09:b7:94:eb:b0:b2:78:92:e5:04:93:1b: cc:d9:a7:39:d2:34:f9:66:02:14:90:35:44:47:8e: fb:43:1f:a9:d1:a5:9a:80:6b:18:4f:a5:d6:51:be: 5a:fb:41:cb:c4:b0:e5:61:2e:5d:5f:64:ff:89:2b: b1:8a:8a:ba:9a:7e:b0:cf:72:8c:c2:9e:e8:be:fc: 47:87:0f:e7:16:0c:90:20:e4:77:fc:e9:0c:70:b4: 3c:81:1b:11:12:8d:df:67:c8:17:26:8e:7b:c3:fc: ca:d4:31:d9:1d:61:a9:a8:21:9c:42:1a:5a:1c:3a: aa:6a:8b:4e:80:b5:85:fa:ca:1c:7f:1f:87:78:b7: 22:a4:b7:d7:c3:ff:17:cf:a3:ca:1c:01:53:73:b2: 70:d4:a7:b0:78:e4:a9:ee:02:23:e3:ce:e0:0c:3c: dc:fd:65:5d:8b:d2:ba:55:b3:e2:2f:44:0a:00:06: 02:ae:d9:42:5d:f4:7d:14:5c:ed:c7:fe:7f:d9:4a: 70:05:ea:45:ee:ad:ee:f6:2b:8b:9f:f4:b5:ac:3a: 13:d6:3a:04:30:f8:39:b5:7f:f0:29:25:4e:8b:b0: b7:d1:6f:21:0e:52:00:4c:eb:ed:a9:43:f2:ee:5b: a0:21:53:72:19:fd:38:53:b1:17:2a:82:01:78:bd: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4A:A0:6A:7E:7A:C9:33:F6:73:14:04:67:82:1C:E1:BC:3C:E6:AC X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d4:1c:53:9b:d5:65:39:c8:50:3a:94:3d:f0:25:8b:53:3b: b5:c6:f9:12:59:99:f5:81:a1:42:4b:ef:22:ac:67:93:1e:9f: 08:f0:82:d7:ad:4d:69:f2:43:77:63:2b:f9:9e:17:c5:44:15: 17:c4:74:0e:81:d3:6c:a9:49:bd:28:d1:fc:82:1f:82:a7:fc: 27:cc:7b:91:8b:c7:b6:98:38:cd:6c:8e:11:b5:04:11:9e:ef: 25:0e:ea:e7:dd:15:4f:62:14:a3:b9:96:81:4b:37:ab:aa:2e: 62:17:05:6c:9d:c7:35:c3:4e:e0:08:f1:34:57:10:48:fb:f5: 9c:b7:d8:82:7a:e9:39:4f:aa:fc:f0:07:17:e6:9d:c4:3d:10: cc:ad:7e:a0:21:5f:64:a3:50:eb:58:64:09:0c:d5:25:64:1b: fe:e2:8e:a3:f0:48:ba:1c:3c:42:17:bf:b1:54:20:47:ea:88: 05:79:a7:36:8f:e2:02:d9:4a:7a:fa:70:5d:1e:b4:db:7b:0a: 6e:9a:72:fd:e3:a2:00:78:b7:e0:97:2a:47:3a:b3:20:be:2e: 82:83:1e:6f:bc:2d:d4:5a:cf:ff:ce:d4:c9:f3:6e:1e:6b:22: a1:8a:f6:f5:74:c0:2f:2d:07:06:1a:c6:ab:8b:8f:88:c8:3a: 05:51:69:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUwOTE4MTg1ODQ1WhcNMjUwOTI1MTg1ODQ1WjAYMRYwFAYD VQQDEw02OGNjNTY2NS0zMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArywJt5TrsLJ4kuUEkxvM2ac50jT5ZgIUkDVER477Qx+p0aWagGsYT6XWUb5a +0HLxLDlYS5dX2T/iSuxioq6mn6wz3KMwp7ovvxHhw/nFgyQIOR3/OkMcLQ8gRsR Eo3fZ8gXJo57w/zK1DHZHWGpqCGcQhpaHDqqaotOgLWF+socfx+HeLcipLfXw/8X z6PKHAFTc7Jw1KeweOSp7gIj487gDDzc/WVdi9K6VbPiL0QKAAYCrtlCXfR9FFzt x/5/2UpwBepF7q3u9iuLn/S1rDoT1joEMPg5tX/wKSVOi7C30W8hDlIATOvtqUPy 7lugIVNyGf04U7EXKoIBeL2rmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFKoGp+ eskz9nMUBGeCHOG8POasMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI1BxTm9VlOchQOpQ98CWLUzu1xvkSWZn1gaFCS+8irGeTHp8I8ILX rU1p8kN3Yyv5nhfFRBUXxHQOgdNsqUm9KNH8gh+Cp/wnzHuRi8e2mDjNbI4RtQQR nu8lDurn3RVPYhSjuZaBSzerqi5iFwVsncc1w07gCPE0VxBI+/Wct9iCeuk5T6r8 8AcX5p3EPRDMrX6gIV9ko1DrWGQJDNUlZBv+4o6j8Ei6HDxCF7+xVCBH6ogFeac2 j+IC2Up6+nBdHrTbewpumnL946IAeLfglypHOrMgvi6Cgx5vvC3UWs//ztTJ824e ayKhivb1dMAvLQcGGsari4+IyDoFUWkA -----END CERTIFICATE-----Generated at Thu Sep 18 22:16:16 2025 by rpki-client