$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: aObQD2X4Rp5HH1PEbVFZfiA4dRCuXKUv88JcUEAmzbU= Subject key identifier: 55:E5:33:C2:7A:8D:36:DF:7B:3B:9D:9E:2F:31:6B:74:90:DD:DF:E9 Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: CE Signing time: Sat 23 Aug 2025 05:51:33 +0000 Manifest this update: Sat 23 Aug 2025 05:51:32 +0000 Manifest next update: Sat 30 Aug 2025 05:51:32 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: eCN3AzrVMs5uuNPOKGd5tCUuMT/cyZbmaroRD+jzlQ0=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: Aug 23 05:51:32 2025 GMT Not After : Aug 30 05:51:32 2025 GMT Subject: CN=68a956e4-e182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:f5:0d:70:5a:45:b3:16:56:3d:4e:3e:a9: f7:4e:27:e4:c9:a6:e2:80:97:77:6a:7f:bd:56:df: 84:8f:7a:6e:d5:43:43:36:c5:b8:56:1a:41:4f:13: c7:b3:f6:72:7b:00:b3:48:46:fb:9c:63:a6:b8:88: ca:da:c8:77:1f:8a:ed:b9:46:01:60:01:ed:f1:b9: 27:03:67:8d:c5:c4:a2:10:42:6c:f9:da:62:52:1a: 7c:8e:6c:e8:fd:b9:64:0a:53:57:d3:9f:fd:7d:8e: 77:2c:ba:11:13:7f:33:33:6b:21:5d:85:c5:2e:c5: 40:18:25:c6:e0:6c:47:c3:6e:20:9f:fc:49:d5:19: 79:84:b3:73:2e:9c:b0:03:f2:b9:c8:fe:6d:93:60: 9a:85:21:32:7e:4e:37:da:66:0d:21:ba:89:e2:e2: 6d:47:89:28:1b:35:62:e7:e1:a0:83:0b:aa:28:57: b6:23:9c:f4:ee:fa:6f:d4:f1:fd:bb:be:fb:17:e2: 26:8f:45:50:ac:e6:cc:df:1c:8a:70:5f:ca:ef:51: 23:4b:7b:5b:0d:64:3f:82:87:3e:de:a9:d8:2e:bc: d6:e6:85:de:81:bd:bf:96:6c:40:4f:9b:1b:5f:b6: 72:89:0d:dd:72:0b:38:11:cf:10:11:55:e0:eb:d4: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E5:33:C2:7A:8D:36:DF:7B:3B:9D:9E:2F:31:6B:74:90:DD:DF:E9 X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:67:9a:da:cf:a4:fa:96:0e:0e:38:4f:b4:b4:e4:54:ed:46: 18:87:d4:af:4a:5a:2d:17:a3:ea:4e:76:c8:42:e2:61:84:d4: 45:c5:9e:6e:38:23:db:8b:66:0d:0b:68:ea:7a:9d:08:36:2c: 84:d5:ae:b1:19:79:0a:45:d6:af:d7:4b:6a:21:38:9e:ae:04: 85:7e:b4:42:90:55:21:f7:8c:c5:bc:e2:be:53:8f:64:6a:5e: 3a:de:94:f6:d6:83:51:32:a8:46:6c:31:55:71:1a:2c:1f:ea: 5a:64:b7:91:60:ed:e9:e9:01:44:bc:4c:a2:df:34:5b:93:d9: 2a:5b:f7:58:50:01:48:df:f1:b3:e0:7c:ec:fe:36:e8:fd:04: b5:66:65:70:ed:36:d5:6d:f4:4d:fa:84:01:1b:17:4c:a5:15: c6:e0:e7:a7:9c:cc:47:f3:fc:35:2a:f6:bd:e2:34:be:34:a7: 84:92:1e:1d:06:47:8d:a9:0a:31:b3:36:ee:5f:b0:8b:1c:33: ad:a5:10:6b:bd:de:9d:b7:a7:ed:8f:84:e1:13:c6:27:2a:8d: a5:78:18:d4:7f:d6:0a:21:c3:59:18:b1:25:42:e1:d1:db:22: 7c:fa:08:e8:93:39:41:4a:96:6c:e6:df:48:73:a8:fc:7d:1e: 4b:ca:b8:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDE3MjdFRDE1MUY0MDg5MjEwRUMzRTM2OEE1QTY5RUUz OTQ4NEUzRTYwHhcNMjUwODIzMDU1MTMyWhcNMjUwODMwMDU1MTMyWjAYMRYwFAYD VQQDEw02OGE5NTZlNC1lMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAph71DXBaRbMWVj1OPqn3TifkyabigJd3an+9Vt+Ej3pu1UNDNsW4VhpBTxPH s/ZyewCzSEb7nGOmuIjK2sh3H4rtuUYBYAHt8bknA2eNxcSiEEJs+dpiUhp8jmzo /blkClNX05/9fY53LLoRE38zM2shXYXFLsVAGCXG4GxHw24gn/xJ1Rl5hLNzLpyw A/K5yP5tk2CahSEyfk432mYNIbqJ4uJtR4koGzVi5+GggwuqKFe2I5z07vpv1PH9 u777F+Imj0VQrObM3xyKcF/K71EjS3tbDWQ/goc+3qnYLrzW5oXegb2/lmxAT5sb X7ZyiQ3dcgs4Ec8QEVXg69SxVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXlM8J6 jTbfezudni8xa3SQ3d/pMB8GA1UdIwQYMBaAFBcn7RUfQIkhDsPjaKWmnuOUhOPm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS83REQ3QkJCQzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlTRU93LU5vcGFhZTQ1U0U0 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS83REQ3QkJCQzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlT RU93LU5vcGFhZTQ1U0U0LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKZ5raz6T6lg4OOE+0tORU7UYYh9SvSlotF6PqTnbIQuJhhNRFxZ5u OCPbi2YNC2jqep0INiyE1a6xGXkKRdav10tqITiergSFfrRCkFUh94zFvOK+U49k al463pT21oNRMqhGbDFVcRosH+paZLeRYO3p6QFEvEyi3zRbk9kqW/dYUAFI3/Gz 4Hzs/jbo/QS1ZmVw7TbVbfRN+oQBGxdMpRXG4OennMxH8/w1Kva94jS+NKeEkh4d BkeNqQoxszbuX7CLHDOtpRBrvd6dt6ftj4ThE8YnKo2leBjUf9YKIcNZGLElQuHR 2yJ8+gjokzlBSpZs5t9Ic6j8fR5LyrjK -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:59 2025 by rpki-client