$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: TwLrjXH1kbwQC95b+hO/p1Fd9UjfLne+rRUwScFJ1x4= Subject key identifier: 31:EB:A9:CE:4D:2D:11:57:D7:9C:FD:D7:AA:C7:B5:DE:1A:EF:FB:05 Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0BC5 Signing time: Wed 14 May 2025 19:01:15 +0000 Manifest this update: Wed 14 May 2025 19:01:15 +0000 Manifest next update: Wed 21 May 2025 19:01:15 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: 85g2XsPJsk+aHoMBcq45W5WnE9xYTWrwSeehka00rxg=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: May 14 19:01:15 2025 GMT Not After : May 21 19:01:15 2025 GMT Subject: CN=6824e87b-1bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3a:50:d9:9f:8d:2d:36:13:83:bd:28:87:dd: 8f:a3:e1:b2:47:2c:42:f6:bd:08:8e:f0:43:7c:d4: 0a:c0:a6:ac:5f:ba:0d:3a:d2:bb:51:c9:2c:1b:e2: ad:b4:bc:6e:17:4d:74:67:54:18:62:e3:04:6a:da: a3:0f:2e:e4:16:48:a2:21:4a:17:57:e5:a2:33:69: 59:70:e7:78:4e:6e:ba:fc:34:86:2c:31:b8:4b:59: 90:7d:10:e0:a2:2f:72:63:ad:e8:39:60:18:d5:f7: 9f:21:28:ff:03:3f:c6:23:c4:ba:15:00:9a:b0:07: 0f:76:27:7c:1f:04:1d:a3:f3:6b:af:16:51:01:7a: f1:5f:7f:83:4f:88:bc:7a:fa:16:c8:91:ca:98:17: 81:4d:04:51:14:75:c5:b9:4d:63:30:dd:42:8d:31: 6f:1d:72:81:d5:11:6d:5d:09:69:18:eb:2f:d0:70: 41:06:dc:df:ad:72:b8:b8:4a:70:13:f5:07:ad:4a: cf:3c:22:be:ac:76:d1:97:d4:a5:30:5b:05:0b:66: 93:bc:2b:d2:59:50:fb:6b:df:72:a2:88:85:6e:6c: ba:86:ac:90:d2:1e:26:3c:18:67:1a:fd:a6:d7:39: b8:91:45:7f:d4:f8:e7:2d:3e:55:b8:dd:01:20:53: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EB:A9:CE:4D:2D:11:57:D7:9C:FD:D7:AA:C7:B5:DE:1A:EF:FB:05 X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:e2:01:a1:8c:fe:a6:01:64:96:cd:fe:e5:60:96:6e:7b:cd: 12:57:3f:30:b8:21:88:14:d8:1d:e8:be:1a:22:7b:3b:78:e5: 0d:99:56:42:2d:7e:ef:98:be:a8:66:32:9a:1e:b3:69:52:f3: ad:54:7e:cf:41:a4:95:40:2c:8c:2b:8d:7a:48:80:07:c6:85: 60:71:e5:5c:c7:54:9a:b8:8c:de:03:2f:7b:b9:41:b1:82:70: e4:96:9e:47:41:b4:4e:79:a4:ec:ec:ff:59:e0:5c:0b:a3:6a: 31:ab:25:d7:cc:af:a4:b5:49:a2:02:ef:96:28:73:90:1f:73: 0b:11:8a:40:eb:f5:76:11:a2:de:c6:94:85:bf:12:45:b3:66: 90:bd:e8:c4:e3:95:39:1a:ee:8f:f1:bf:b6:70:e3:ff:f4:57: 14:df:56:35:d9:cd:5b:c0:7b:33:a9:f1:23:c9:44:3e:36:3a: c7:6f:cc:63:26:1d:cc:3c:75:10:05:d8:39:74:c4:f3:eb:42: cb:fb:50:5c:d9:ae:ba:83:69:e8:2f:8e:2e:69:1b:78:7b:d0: 06:e2:c0:f7:2e:28:9e:da:33:ac:11:79:32:2c:f1:d0:25:58: d2:c5:bc:10:17:09:60:5e:fb:14:54:e4:88:1f:d4:17:7c:9c: d1:38:c9:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUwNTE0MTkwMTE1WhcNMjUwNTIxMTkwMTE1WjAYMRYwFAYD VQQDEw02ODI0ZTg3Yi0xYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jpQ2Z+NLTYTg70oh92Po+GyRyxC9r0IjvBDfNQKwKasX7oNOtK7UcksG+Kt tLxuF010Z1QYYuMEatqjDy7kFkiiIUoXV+WiM2lZcOd4Tm66/DSGLDG4S1mQfRDg oi9yY63oOWAY1fefISj/Az/GI8S6FQCasAcPdid8HwQdo/NrrxZRAXrxX3+DT4i8 evoWyJHKmBeBTQRRFHXFuU1jMN1CjTFvHXKB1RFtXQlpGOsv0HBBBtzfrXK4uEpw E/UHrUrPPCK+rHbRl9SlMFsFC2aTvCvSWVD7a99yooiFbmy6hqyQ0h4mPBhnGv2m 1zm4kUV/1PjnLT5VuN0BIFN9kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHrqc5N LRFX15z916rHtd4a7/sFMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU4gGhjP6mAWSWzf7lYJZue80SVz8wuCGIFNgd6L4aIns7eOUNmVZC LX7vmL6oZjKaHrNpUvOtVH7PQaSVQCyMK416SIAHxoVgceVcx1SauIzeAy97uUGx gnDklp5HQbROeaTs7P9Z4FwLo2oxqyXXzK+ktUmiAu+WKHOQH3MLEYpA6/V2EaLe xpSFvxJFs2aQvejE45U5Gu6P8b+2cOP/9FcU31Y12c1bwHszqfEjyUQ+NjrHb8xj Jh3MPHUQBdg5dMTz60LL+1Bc2a66g2noL44uaRt4e9AG4sD3Liie2jOsEXkyLPHQ JVjSxbwQFwlgXvsUVOSIH9QXfJzROMlL -----END CERTIFICATE-----Generated at Fri May 16 09:50:38 2025 by rpki-client