$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: YD3Ok/MlOG6XSBgRHxCBBBhldhvvJRKbbZAOCp1kyR0= Subject key identifier: EC:0F:58:6E:D6:07:35:41:14:55:9C:18:86:9C:20:0C:6F:ED:C1:FC Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: E6 Signing time: Tue 13 May 2025 04:37:11 +0000 Manifest this update: Tue 13 May 2025 04:37:11 +0000 Manifest next update: Tue 20 May 2025 04:37:11 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: 3usPB349rbOT1UtEUXfD4aSK/gmC0yvWyxY17+iaTrE=) 2: 30CC4814FE4D11EFBFE66B1AC4F9AE02.roa (hash: CsZn/2/QnSvPMN1U3HaNIbfp6BBtY5cFDgdleZuzI7Q=) 3: 318E4414FE4D11EFBFE66B1AC4F9AE02.roa (hash: bnz/Gz2cIiz69/78S45wyomzGwSQuid2xoDm6Wpn25U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: May 13 04:37:11 2025 GMT Not After : May 20 04:37:11 2025 GMT Subject: CN=6822cc77-0540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:17:3c:94:9a:2b:ba:dd:e7:aa:6d:ee:90: b7:83:74:97:e1:8c:b7:bc:88:a5:23:81:ed:15:2f: 32:21:58:8e:a2:8b:fe:2a:1f:5e:3b:35:08:3f:b8: db:22:89:12:56:83:da:61:fd:3a:a4:be:bb:15:fe: b5:62:42:ed:ad:e0:6b:10:aa:62:85:74:79:18:1c: e8:02:70:68:2e:02:9b:f5:d8:dd:49:6f:a0:ca:39: 69:26:60:25:e8:47:94:08:c3:5d:6b:e4:ad:44:81: 33:9e:e3:3f:0a:30:5f:6b:ce:96:24:99:ad:63:b3: d1:bc:dc:0d:62:91:64:45:ed:19:81:1e:84:86:be: ed:40:2b:b9:18:22:f0:e5:0e:69:09:28:ab:8a:1e: a8:b3:a6:a8:82:12:38:f7:65:42:13:f5:a8:ed:ee: 4b:4e:1d:a7:22:0e:8f:88:51:0f:15:1b:90:ce:38: 0f:89:11:e4:de:f3:e4:fa:1a:94:a1:4c:e6:0c:c8: 02:e3:0c:b6:06:62:df:d6:96:ae:ce:45:81:b7:cf: d0:4c:7a:c4:6d:b9:ce:de:02:d2:c1:c6:3b:07:8a: de:a5:ea:3f:5e:a2:0a:7e:3e:f4:5b:67:bd:99:50: f1:fb:24:96:0b:01:4e:48:60:e4:18:3a:52:8c:d7: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0F:58:6E:D6:07:35:41:14:55:9C:18:86:9C:20:0C:6F:ED:C1:FC X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:95:c9:48:f1:c0:1f:42:d2:39:23:e7:7b:ba:79:81:77:fe: 4e:b4:d1:96:42:a8:fb:49:18:3c:3d:fc:72:86:a4:47:c4:7e: e2:df:f0:d1:f4:da:f9:51:2a:42:0c:a7:95:9a:3e:87:32:6f: 8e:cc:44:b5:fc:cc:7b:17:60:ae:b2:73:d8:6b:66:8a:29:ad: 3a:1d:54:a9:b4:cd:bb:b9:97:de:15:2f:58:51:4d:8a:ac:c3: 04:11:1a:b0:19:94:b5:83:14:96:85:cd:2d:39:46:de:83:3a: b4:a0:28:4d:b8:23:88:8e:c7:14:2c:05:5b:59:ac:32:14:e6: 43:5a:35:98:e6:7b:ba:43:04:f3:1e:3d:54:fc:c5:86:4b:4b: 59:48:cb:9a:99:02:74:6f:3f:71:da:68:3a:e0:6e:c5:7f:28: fe:ce:4b:51:32:f8:34:6a:d1:7b:fe:60:e0:50:07:9e:ea:7d: 35:c8:6f:d3:22:61:85:76:7c:ec:aa:60:da:8c:5b:a9:95:0a: bc:93:3b:57:a8:12:96:e3:c6:7f:44:e2:f9:7d:c2:a6:4b:de: 00:58:ee:81:1d:9c:a0:c6:28:4f:d6:e5:4d:32:1b:04:05:af: 2c:85:1c:5b:4f:7f:e6:93:ea:8b:8b:1d:01:8f:5b:41:1a:fb: 17:ca:fb:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUwNTEzMDQzNzExWhcNMjUwNTIwMDQzNzExWjAYMRYwFAYD VQQDEw02ODIyY2M3Ny0wNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYUXPJSaK7rd56pt7pC3g3SX4Yy3vIilI4HtFS8yIViOoov+Kh9eOzUIP7jb IokSVoPaYf06pL67Ff61YkLtreBrEKpihXR5GBzoAnBoLgKb9djdSW+gyjlpJmAl 6EeUCMNda+StRIEznuM/CjBfa86WJJmtY7PRvNwNYpFkRe0ZgR6Ehr7tQCu5GCLw 5Q5pCSirih6os6aoghI492VCE/Wo7e5LTh2nIg6PiFEPFRuQzjgPiRHk3vPk+hqU oUzmDMgC4wy2BmLf1pauzkWBt8/QTHrEbbnO3gLSwcY7B4repeo/XqIKfj70W2e9 mVDx+ySWCwFOSGDkGDpSjNca/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwPWG7W BzVBFFWcGIacIAxv7cH8MB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJK a2djNkk0Qk1uMWtGT1B1ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAblclI8cAfQtI5I+d7unmBd/5OtNGWQqj7SRg8PfxyhqRHxH7i3/DR 9Nr5USpCDKeVmj6HMm+OzES1/Mx7F2CusnPYa2aKKa06HVSptM27uZfeFS9YUU2K rMMEERqwGZS1gxSWhc0tOUbegzq0oChNuCOIjscULAVbWawyFOZDWjWY5nu6QwTz Hj1U/MWGS0tZSMuamQJ0bz9x2mg64G7Ffyj+zktRMvg0atF7/mDgUAee6n01yG/T ImGFdnzsqmDajFuplQq8kztXqBKW48Z/ROL5fcKmS94AWO6BHZygxihP1uVNMhsE Ba8shRxbT3/mk+qLix0Bj1tBGvsXyvuL -----END CERTIFICATE-----Generated at Wed May 14 21:28:31 2025 by rpki-client