$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: TTyISZrDijhB9YcFnvGpO97bnEC3+5bBPmvCbj/n0TM= Subject key identifier: 47:05:76:2C:74:37:72:83:DC:7C:33:8B:81:5B:6E:91:2E:1E:D0:84 Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: 98 Signing time: Wed 07 May 2025 05:29:09 +0000 Manifest this update: Wed 07 May 2025 05:29:09 +0000 Manifest next update: Wed 14 May 2025 05:29:09 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: kE1eMd5iDKr15MFxgkKqo0rnHURDlvaoS1OL7gD8rXM=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: May 7 05:29:09 2025 GMT Not After : May 14 05:29:09 2025 GMT Subject: CN=681aefa5-e467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:75:66:71:dc:34:04:e7:2b:4e:25:29:65: fa:a0:4f:7c:76:51:fb:14:04:5e:84:97:7f:39:4a: bf:15:d3:55:c1:fd:c7:d4:f4:50:4b:f2:4f:3d:8f: 8e:aa:77:4a:a9:4c:7f:4e:c7:01:aa:a6:c0:45:8d: 26:93:b6:af:ea:52:1f:6a:bc:4e:32:7b:f3:ff:66: af:b2:47:cb:9d:53:32:b1:dc:56:e7:30:5d:cb:95: 28:b9:71:d4:b2:15:3c:cf:11:65:d4:68:6a:06:81: f4:87:c3:9b:15:f4:64:77:a1:69:3d:8f:b2:15:21: 68:7b:c9:fb:c3:04:72:d1:72:83:74:67:d3:eb:ff: 1b:05:98:62:3c:49:a5:95:91:7e:8d:e0:5d:45:64: a2:4d:98:79:88:64:fa:d7:58:b7:25:4a:b5:31:15: 3d:ae:da:4d:6a:14:3f:67:bd:2e:24:ba:32:62:86: f4:36:07:11:cd:01:87:d9:87:e6:8b:5f:3f:f2:4a: 1b:a2:d6:f9:34:c3:f4:aa:91:1e:1e:73:61:a7:4f: d5:c6:f5:e8:c8:9c:50:26:2f:75:9c:20:75:44:c2: 11:cb:5f:19:bb:44:b2:6c:4d:8e:8e:22:e4:d4:20: 16:14:a7:15:e5:cf:6b:7e:42:eb:aa:bd:c4:6d:79: 5d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:76:2C:74:37:72:83:DC:7C:33:8B:81:5B:6E:91:2E:1E:D0:84 X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:65:0a:7b:e2:b6:db:8f:6b:56:1a:de:d5:a2:a6:29:c5:79: da:f7:c4:e1:09:50:f1:ea:00:43:44:a3:04:5e:00:9a:78:91: 11:61:d3:da:40:06:79:2f:79:89:6b:be:f5:b6:9e:51:20:3e: c0:b7:56:b9:18:a5:5c:d8:ca:4e:8e:38:da:19:88:23:59:a0: fe:e7:72:bc:18:1c:8a:a0:01:bf:38:e8:39:f1:03:84:d3:da: 72:ff:d6:b9:31:ab:f7:bd:af:0b:bb:7e:dc:ef:24:bc:0e:a9: b3:b0:9b:d1:06:81:0a:2d:a5:ac:4b:ed:ff:97:55:60:a4:f6: 5c:49:16:19:f8:5e:40:59:90:54:32:cd:e6:f8:8f:12:9e:11: f2:01:88:25:45:50:98:1b:cf:82:9b:84:13:d1:91:23:7e:c3: 5d:09:05:c0:59:81:90:18:5e:1d:97:3e:68:1d:fe:af:27:6f: 4b:bc:ba:41:9d:43:c4:59:6e:a8:9c:65:2d:e5:3b:00:e7:82: 52:5f:a7:2a:ac:46:01:b2:1b:8c:3e:e6:2c:36:5a:5e:71:ea: 34:71:a0:91:29:13:95:4b:44:62:58:36:6a:ea:d2:b3:6b:3f: eb:98:02:37:a6:6a:f4:4b:45:38:70:0c:d9:47:de:d4:db:47: 80:69:e0:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDE3MjdFRDE1MUY0MDg5MjEwRUMzRTM2OEE1QTY5RUUz OTQ4NEUzRTYwHhcNMjUwNTA3MDUyOTA5WhcNMjUwNTE0MDUyOTA5WjAYMRYwFAYD VQQDEw02ODFhZWZhNS1lNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EV1ZnHcNATnK04lKWX6oE98dlH7FARehJd/OUq/FdNVwf3H1PRQS/JPPY+O qndKqUx/TscBqqbARY0mk7av6lIfarxOMnvz/2avskfLnVMysdxW5zBdy5UouXHU shU8zxFl1GhqBoH0h8ObFfRkd6FpPY+yFSFoe8n7wwRy0XKDdGfT6/8bBZhiPEml lZF+jeBdRWSiTZh5iGT611i3JUq1MRU9rtpNahQ/Z70uJLoyYob0NgcRzQGH2Yfm i18/8kobotb5NMP0qpEeHnNhp0/VxvXoyJxQJi91nCB1RMIRy18Zu0SybE2OjiLk 1CAWFKcV5c9rfkLrqr3EbXldRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcFdix0 N3KD3Hwzi4FbbpEuHtCEMB8GA1UdIwQYMBaAFBcn7RUfQIkhDsPjaKWmnuOUhOPm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS83REQ3QkJCQzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlTRU93LU5vcGFhZTQ1U0U0 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS83REQ3QkJCQzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlT RU93LU5vcGFhZTQ1U0U0LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSZQp74rbbj2tWGt7VoqYpxXna98ThCVDx6gBDRKMEXgCaeJERYdPa QAZ5L3mJa771tp5RID7At1a5GKVc2MpOjjjaGYgjWaD+53K8GByKoAG/OOg58QOE 09py/9a5Mav3va8Lu37c7yS8DqmzsJvRBoEKLaWsS+3/l1VgpPZcSRYZ+F5AWZBU Ms3m+I8SnhHyAYglRVCYG8+Cm4QT0ZEjfsNdCQXAWYGQGF4dlz5oHf6vJ29LvLpB nUPEWW6onGUt5TsA54JSX6cqrEYBshuMPuYsNlpeceo0caCRKROVS0RiWDZq6tKz az/rmAI3pmr0S0U4cAzZR97U20eAaeDu -----END CERTIFICATE-----Generated at Thu May 8 23:33:48 2025 by rpki-client