$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: uEMSxx80SsRZ/K6io01tIrZLivotRwZ/T59H/OK8WwI= Subject key identifier: B6:A7:D4:DE:9A:E0:17:95:64:66:F0:B4:9B:EA:27:FE:7E:1E:E5:0B Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: 011B Signing time: Sat 23 Aug 2025 04:58:45 +0000 Manifest this update: Sat 23 Aug 2025 04:58:44 +0000 Manifest next update: Sat 30 Aug 2025 04:58:44 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: LePMKg1SUFyKaA2c3nY9Xek6qaC8cVt9YKuNAZrlorQ=) 2: 3FDD68D466B111F096217E0AC4F9AE02.roa (hash: OFsUhK9JC7w3rXtdxjhvb6l56OfeOTaDKO1jO9fchKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Aug 23 04:58:44 2025 GMT Not After : Aug 30 04:58:44 2025 GMT Subject: CN=68a94a85-76fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:06:a3:32:e4:70:63:1e:5c:0b:97:b4:9b: 12:d6:98:a3:72:cf:cd:f7:76:97:01:c6:4d:fa:e7: 80:ab:f0:49:14:64:96:92:6b:32:40:48:12:0e:e3: 31:59:1b:39:ed:17:1b:55:71:bc:3a:a4:12:df:33: d5:3e:35:f4:08:73:d0:52:10:5c:fb:60:c5:dd:fe: 82:b7:36:15:80:be:0f:b9:1b:67:c2:79:88:c0:65: d6:62:bd:27:b8:f2:1c:8d:86:14:86:48:0c:95:b7: e8:74:64:da:ee:08:a8:30:ce:96:88:02:dc:fa:b3: 27:67:e9:cf:81:22:ea:a0:eb:e7:8c:3a:28:c9:0c: 2e:32:c9:a0:d6:09:61:5e:92:89:ba:2a:2a:27:16: 09:05:2f:18:1f:71:61:0a:5c:f9:68:c5:a8:9a:e1: 09:38:0a:e4:e4:cd:b6:3c:f0:83:4c:8f:49:27:ad: a3:d7:ae:bb:85:48:f6:f1:eb:89:fc:b3:1b:c8:1d: 06:3e:8b:a3:82:35:60:1c:05:50:6b:50:23:35:d2: d0:05:1b:ca:68:f1:95:64:22:66:19:a4:82:0c:cd: 0b:9e:4f:4c:c4:e0:2c:99:4f:51:41:d7:74:10:24: 3d:09:33:ae:cf:cd:87:06:cd:6f:7b:f2:a5:b6:3e: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A7:D4:DE:9A:E0:17:95:64:66:F0:B4:9B:EA:27:FE:7E:1E:E5:0B X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e7:15:2f:08:37:ab:9c:1b:06:fb:28:19:50:67:7e:2a:94: 71:11:d0:4b:99:13:74:cd:e4:1f:bd:d5:7d:fe:1d:e1:12:94: 47:9d:3c:d6:40:5f:70:a8:47:8c:8b:ec:e2:e3:ae:38:bf:39: 12:47:ba:44:3c:57:c8:8e:4d:27:c9:26:5a:c6:55:f1:c4:bf: 6e:15:9b:b3:22:dc:0f:a1:a4:5e:d3:bc:39:99:00:99:84:58: 56:af:4d:d0:ec:58:5c:36:64:43:a6:cc:6f:8f:3f:13:93:c3: 47:0c:07:8e:c3:df:f2:5d:52:83:b0:a1:f5:d5:a0:56:1b:ba: 9b:64:79:3d:35:b6:1e:b4:fe:7d:d5:4b:29:90:b2:97:4c:7a: a4:50:be:94:e8:41:f8:eb:1e:08:77:0a:a9:1d:f4:36:49:03: 6b:e7:eb:67:af:37:a1:34:ac:16:93:fb:8b:2e:3e:59:f3:8d: 53:80:90:02:6d:b1:77:0f:5c:c8:8e:d0:da:18:ea:22:bb:c9: 32:2c:77:ea:10:3e:65:d2:0c:3f:cc:2d:ba:99:f9:3b:5c:c7: a6:3c:59:3e:dc:6f:7c:6d:14:95:b2:06:4c:75:58:06:9b:f4: c6:a9:0b:f1:17:b7:54:3b:31:39:52:64:4c:f9:05:64:e9:20: c3:8f:ad:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUwODIzMDQ1ODQ0WhcNMjUwODMwMDQ1ODQ0WjAYMRYwFAYD VQQDEw02OGE5NGE4NS03NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJAGozLkcGMeXAuXtJsS1pijcs/N93aXAcZN+ueAq/BJFGSWkmsyQEgSDuMx WRs57RcbVXG8OqQS3zPVPjX0CHPQUhBc+2DF3f6CtzYVgL4PuRtnwnmIwGXWYr0n uPIcjYYUhkgMlbfodGTa7gioMM6WiALc+rMnZ+nPgSLqoOvnjDooyQwuMsmg1glh XpKJuioqJxYJBS8YH3FhClz5aMWomuEJOArk5M22PPCDTI9JJ62j1667hUj28euJ /LMbyB0GPoujgjVgHAVQa1AjNdLQBRvKaPGVZCJmGaSCDM0Lnk9MxOAsmU9RQdd0 ECQ9CTOuz82HBs1ve/Kltj4F+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLan1N6a 4BeVZGbwtJvqJ/5+HuULMB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJK a2djNkk0Qk1uMWtGT1B1ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb5xUvCDernBsG+ygZUGd+KpRxEdBLmRN0zeQfvdV9/h3hEpRHnTzW QF9wqEeMi+zi4644vzkSR7pEPFfIjk0nySZaxlXxxL9uFZuzItwPoaRe07w5mQCZ hFhWr03Q7FhcNmRDpsxvjz8Tk8NHDAeOw9/yXVKDsKH11aBWG7qbZHk9NbYetP59 1UspkLKXTHqkUL6U6EH46x4IdwqpHfQ2SQNr5+tnrzehNKwWk/uLLj5Z841TgJAC bbF3D1zIjtDaGOoiu8kyLHfqED5l0gw/zC26mfk7XMemPFk+3G98bRSVsgZMdVgG m/TGqQvxF7dUOzE5UmRM+QVk6SDDj60Y -----END CERTIFICATE-----Generated at Sun Aug 24 05:14:47 2025 by rpki-client