$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft File: fysutbj095VolfExLY3MQiOcmmI.mft (raw, json) Hash identifier: XosM5lV9Yzt0C1o/IylFTylXqo5pNPGw1qpTu+yFzFA= Subject key identifier: 39:B2:49:7B:03:3E:8C:7A:EA:39:BD:9C:2B:D6:79:BE:82:67:96:90 Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Certificate serial: 0E39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft Manifest number: 0E2B Signing time: Wed 02 Jul 2025 18:00:45 +0000 Manifest this update: Wed 02 Jul 2025 18:00:44 +0000 Manifest next update: Wed 09 Jul 2025 18:00:44 +0000 Files and hashes: 1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: RzWgY9YgDa36MCBYyvTM70wkYhz2TWhUz2L2wQ+dUgo=) 2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: H3PZR2Ocqd5DrHweNG98HWtY6eO+2MOa7m6IWNzWQmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3641 (0xe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Validity Not Before: Jul 2 18:00:44 2025 GMT Not After : Jul 9 18:00:44 2025 GMT Subject: CN=686573cc-c079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:80:3f:91:87:eb:6b:2f:28:f4:dc:86:e2:42: 59:5f:d8:b6:38:b2:5b:03:f1:e0:f5:6a:c8:51:18: d5:fe:2c:a3:c5:a1:42:74:b4:be:4a:f9:ec:f4:d0: 29:7f:7a:29:bd:d2:55:81:4b:3c:b9:7d:4c:58:66: ce:e3:28:7f:0b:3c:7f:f3:58:3d:9e:28:35:99:c3: 4f:95:4a:ee:6f:eb:b4:e5:77:16:5a:5f:c8:6b:eb: 23:44:9c:c1:48:64:ca:09:b3:c7:ca:6a:47:32:0c: a8:ba:7d:44:37:f4:76:9b:71:97:59:7b:92:e7:2f: 62:e0:a1:0d:56:c9:1f:56:7e:04:b6:77:e0:51:6e: 87:33:64:03:ed:3f:b6:a4:77:6e:ab:ca:9e:1e:e7: e6:14:d9:3d:a4:79:eb:00:4d:7c:e7:64:32:0d:60: 4a:80:ef:ee:ad:9e:fb:fe:53:2b:6c:6c:61:50:a6: 0d:1c:7d:bc:a1:61:05:81:6d:25:2b:c2:9a:ea:78: 27:97:9a:25:c3:95:90:6b:8a:6b:8a:b7:1b:2b:17: a0:cc:8b:67:fb:1e:a9:ff:9c:c5:67:19:2b:fd:17: 00:8e:ed:ca:3d:c6:2f:5f:84:81:df:85:dc:38:e3: 4d:c1:90:41:b0:5a:b2:f6:ac:7f:28:5f:29:00:37: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B2:49:7B:03:3E:8C:7A:EA:39:BD:9C:2B:D6:79:BE:82:67:96:90 X509v3 Authority Key Identifier: keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5e:a9:b9:6a:17:11:e4:46:eb:d2:a8:e5:85:3f:b2:42:55: f3:6b:67:8a:eb:3d:98:46:bd:67:e6:e8:22:b8:dd:6f:bb:7b: 8a:ea:c8:3e:0c:50:95:23:6d:4c:c6:f8:3c:3e:7d:f6:4f:59: ad:c4:71:1c:05:e3:b7:d6:7e:1b:51:95:71:c6:74:19:69:d3: 66:a5:8e:97:73:bf:84:1c:a3:7b:ac:1b:05:4e:4f:71:05:18: 08:f4:a6:b0:dc:9f:55:2e:3c:a3:37:df:0d:e1:dc:fd:2b:e3: 8e:cb:a1:37:e7:a9:d5:e5:e1:f4:04:b0:15:7b:09:d6:56:24: ce:2b:fa:d8:83:69:cf:0e:59:1d:23:4a:49:97:14:dc:d2:b5: ab:6e:f7:d0:37:81:b8:eb:17:b5:3d:d6:f7:67:d7:14:a0:90: aa:0d:b3:6d:11:1d:3f:03:2f:de:c5:81:5d:06:92:c6:82:ac: 5f:b6:22:20:b6:1c:97:2b:74:fa:a7:00:b4:8c:6f:19:b0:12: 2d:b0:1a:f2:8e:4d:bf:52:63:64:f3:7a:fd:49:f7:9d:d9:f6: 96:97:39:10:d3:fc:13:b6:92:c9:d8:fa:96:65:f9:ff:41:ce: e5:59:b2:c6:75:37:ed:6a:9e:3a:dc:fa:3e:d5:4f:97:02:92: ac:16:38:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy MjM5QzlBNjIwHhcNMjUwNzAyMTgwMDQ0WhcNMjUwNzA5MTgwMDQ0WjAYMRYwFAYD VQQDEw02ODY1NzNjYy1jMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+IA/kYfray8o9NyG4kJZX9i2OLJbA/Hg9WrIURjV/iyjxaFCdLS+Svns9NAp f3opvdJVgUs8uX1MWGbO4yh/Czx/81g9nig1mcNPlUrub+u05XcWWl/Ia+sjRJzB SGTKCbPHympHMgyoun1EN/R2m3GXWXuS5y9i4KENVskfVn4EtnfgUW6HM2QD7T+2 pHduq8qeHufmFNk9pHnrAE1852QyDWBKgO/urZ77/lMrbGxhUKYNHH28oWEFgW0l K8Ka6ngnl5olw5WQa4prircbKxegzItn+x6p/5zFZxkr/RcAju3KPcYvX4SB34Xc OONNwZBBsFqy9qx/KF8pADexrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmySXsD Pox66jm9nCvWeb6CZ5aQMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5 MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ1Ny85RkQyQzlEMEE5MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1 Vm9sZkV4TFkzTVFpT2NtbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaXqm5ahcR5Ebr0qjlhT+yQlXza2eK6z2YRr1n5ugiuN1vu3uK6sg+ DFCVI21Mxvg8Pn32T1mtxHEcBeO31n4bUZVxxnQZadNmpY6Xc7+EHKN7rBsFTk9x BRgI9Kaw3J9VLjyjN98N4dz9K+OOy6E356nV5eH0BLAVewnWViTOK/rYg2nPDlkd I0pJlxTc0rWrbvfQN4G46xe1Pdb3Z9cUoJCqDbNtER0/Ay/exYFdBpLGgqxftiIg thyXK3T6pwC0jG8ZsBItsBryjk2/UmNk83r9Sfed2faWlzkQ0/wTtpLJ2PqWZfn/ Qc7lWbLGdTftap463Po+1U+XApKsFjgY -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:58 2025 by rpki-client