$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: pebD3pUmb5LI5ks1p5Eoq5O7i6X97tOqHhrcDH0DOrc= Subject key identifier: AD:AB:A0:7A:2D:88:1E:4E:1E:FE:7C:22:27:5F:B2:E6:17:8F:56:A3 Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:11:42 +0000 Manifest this update: Thu 03 Jul 2025 06:11:41 +0000 Manifest next update: Thu 10 Jul 2025 06:11:41 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: AQk/SU3SiO0m6SxvK173NlwO8gztW8wVRjZNVD/0AR4=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: Jul 3 06:11:41 2025 GMT Not After : Jul 10 06:11:41 2025 GMT Subject: CN=68661f1d-897e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:65:6a:cd:58:0a:16:00:49:65:40:f9:16: f8:b5:76:67:03:0b:59:ab:28:bb:b2:65:d6:0c:25: 8a:00:3d:69:73:f6:ce:05:26:09:3f:c3:b7:13:e5: 50:9b:41:d2:52:e3:cd:11:a2:e3:6e:02:0f:a6:a9: 04:e5:c0:dc:79:64:53:07:c7:81:56:23:5b:18:fd: 94:dd:a9:d3:8a:c1:3b:af:73:1d:7c:c9:e3:7e:21: ce:2b:19:c5:bc:5b:48:40:28:be:34:ac:e6:05:cc: 7a:2a:71:79:b0:ea:db:b4:3a:d3:08:bd:5a:a4:1c: 33:31:26:bd:fd:91:04:dc:28:80:58:56:1b:5a:85: 0e:39:8e:c2:b4:a1:0d:11:96:14:43:7c:74:65:ba: 80:dd:0e:35:d7:a1:76:8f:ab:60:38:da:1a:af:f7: c6:73:19:3e:07:45:23:c4:01:93:55:59:2f:32:0b: 8d:d9:bf:ba:16:1b:b3:76:54:15:e4:3e:86:74:50: 2e:55:39:de:92:ca:f2:79:4f:d2:93:1d:4c:33:f4: 82:3d:fa:11:37:75:c3:f7:04:e2:e1:91:4d:66:14: d0:a5:31:31:d8:ed:1d:24:a4:0e:17:21:1e:4a:c7: 86:e3:49:b1:1c:c2:5e:ff:2f:12:31:45:59:3f:4f: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AB:A0:7A:2D:88:1E:4E:1E:FE:7C:22:27:5F:B2:E6:17:8F:56:A3 X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:43:4a:cd:f4:17:69:ae:c3:04:7c:28:03:4b:85:8a:16:65: 27:81:85:89:e0:0c:59:d1:9c:03:86:8d:9b:b8:51:33:c6:7f: 7b:b7:3e:a3:6d:c6:72:10:82:2f:e1:58:16:d7:88:55:7d:aa: 73:53:39:fa:18:a1:51:c0:1c:50:93:6c:c8:3c:32:59:94:6f: 03:73:6c:7f:be:08:4a:95:81:d2:f8:16:4f:2d:21:09:79:a9: 34:4f:a3:d7:d6:3e:fa:d2:a9:3b:ff:48:5d:9d:24:47:05:5b: 72:ec:28:6a:82:96:c4:26:39:38:f3:c4:14:41:a1:ea:9e:ee: 94:a9:45:6d:e5:81:35:8f:a9:f3:79:e4:bb:c6:0f:e4:5d:76: 04:1a:25:76:bf:bf:b1:53:20:1d:0e:d2:81:3d:78:81:6b:fe: 53:d9:80:c9:f3:3a:65:ff:64:d3:95:48:8d:cc:ac:fc:bf:a6: 24:64:71:c9:95:3b:a9:90:24:2f:92:5c:89:f7:a5:39:5e:9e: b3:4d:a6:1a:32:1e:c8:f8:e6:f6:c9:b2:53:6c:da:c5:66:88: d3:a2:17:7d:3c:4d:59:8e:e2:d4:57:2d:36:c8:6c:fb:f1:14: 94:4a:0f:6d:dc:93:77:6e:0e:1e:80:f3:46:11:82:34:9e:5e: 88:a9:49:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDE3MjdFRDE1MUY0MDg5MjEwRUMzRTM2OEE1QTY5RUUz OTQ4NEUzRTYwHhcNMjUwNzAzMDYxMTQxWhcNMjUwNzEwMDYxMTQxWjAYMRYwFAYD VQQDEw02ODY2MWYxZC04OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiRlas1YChYASWVA+Rb4tXZnAwtZqyi7smXWDCWKAD1pc/bOBSYJP8O3E+VQ m0HSUuPNEaLjbgIPpqkE5cDceWRTB8eBViNbGP2U3anTisE7r3MdfMnjfiHOKxnF vFtIQCi+NKzmBcx6KnF5sOrbtDrTCL1apBwzMSa9/ZEE3CiAWFYbWoUOOY7CtKEN EZYUQ3x0ZbqA3Q4116F2j6tgONoar/fGcxk+B0UjxAGTVVkvMguN2b+6FhuzdlQV 5D6GdFAuVTneksryeU/Skx1MM/SCPfoRN3XD9wTi4ZFNZhTQpTEx2O0dJKQOFyEe SseG40mxHMJe/y8SMUVZP0+HFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2roHot iB5OHv58IidfsuYXj1ajMB8GA1UdIwQYMBaAFBcn7RUfQIkhDsPjaKWmnuOUhOPm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS83REQ3QkJCQzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlTRU93LU5vcGFhZTQ1U0U0 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS83REQ3QkJCQzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlT RU93LU5vcGFhZTQ1U0U0LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApQ0rN9BdprsMEfCgDS4WKFmUngYWJ4AxZ0ZwDho2buFEzxn97tz6j bcZyEIIv4VgW14hVfapzUzn6GKFRwBxQk2zIPDJZlG8Dc2x/vghKlYHS+BZPLSEJ eak0T6PX1j760qk7/0hdnSRHBVty7ChqgpbEJjk488QUQaHqnu6UqUVt5YE1j6nz eeS7xg/kXXYEGiV2v7+xUyAdDtKBPXiBa/5T2YDJ8zpl/2TTlUiNzKz8v6YkZHHJ lTupkCQvklyJ96U5Xp6zTaYaMh7I+Ob2ybJTbNrFZojTohd9PE1ZjuLUVy02yGz7 8RSUSg9t3JN3bg4egPNGEYI0nl6IqUnI -----END CERTIFICATE-----Generated at Thu Jul 3 22:48:41 2025 by rpki-client