$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json) Hash identifier: q/9JTcv8zLErZxbutelsYOU4CrKKDw2+HooUbx54AoU= Subject key identifier: B0:86:99:69:92:3A:8D:31:DC:17:75:AD:06:1A:C2:84:53:97:86:79 Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Certificate serial: 0C1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft Manifest number: 0C15 Signing time: Mon 20 Oct 2025 19:24:37 +0000 Manifest this update: Mon 20 Oct 2025 19:24:36 +0000 Manifest next update: Mon 27 Oct 2025 19:24:36 +0000 Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: bm19oaa4RZ4xxtueJ8bpghnv+cNcw5Yo5Rwqz1U/OrI=) 2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34 Validity Not Before: Oct 20 19:24:36 2025 GMT Not After : Oct 27 19:24:36 2025 GMT Subject: CN=68f68c75-8c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:93:ff:21:71:7f:f8:4b:0a:30:f4:bb:5c: 41:b2:38:b5:67:2e:f2:90:07:04:c7:38:61:e9:ca: cf:8e:e7:7e:fb:d7:d9:29:d5:25:f4:b0:81:bc:e7: 8c:56:c1:87:03:eb:8e:23:ea:ce:b2:b2:a7:eb:7e: 15:ce:01:e7:b5:2e:b8:10:7a:12:3d:c7:92:55:56: 00:50:31:bd:2f:8b:e6:b8:20:79:33:b3:60:ff:47: d4:b2:6c:19:0b:65:0c:9c:35:1b:17:6d:5a:26:d0: ff:41:ed:38:8c:2b:97:fc:27:76:74:27:a7:f6:05: 8a:2d:ca:62:e1:ce:74:dd:d3:ef:0f:71:9e:a9:cd: 9b:6c:96:b5:95:a1:16:f0:d4:e5:e6:d9:6f:17:93: 67:e1:2d:76:96:81:09:ee:68:61:e2:99:19:5b:fe: 6d:4e:2a:c4:d5:60:8f:8e:de:3f:61:ef:7f:b4:95: 4f:95:7f:e2:8b:e0:fd:31:53:a3:a3:16:0a:42:ab: b0:fa:44:a6:7b:7d:9a:0e:53:c0:9c:cc:9b:0d:1e: 06:18:35:ca:cc:47:e3:64:65:6c:aa:f1:de:2b:b0: 36:c8:60:a7:58:f8:a8:17:bb:ca:a5:aa:bb:c2:94: 6c:35:76:aa:bf:4c:95:6a:7e:27:70:6e:3d:6c:35: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:86:99:69:92:3A:8D:31:DC:17:75:AD:06:1A:C2:84:53:97:86:79 X509v3 Authority Key Identifier: keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:86:bc:43:15:5a:77:0d:fe:88:0e:f9:8c:11:1f:ba:47:53: a3:e6:d5:d5:d0:6e:b8:b7:e0:e6:ed:38:c5:c7:a1:23:d3:2c: fc:1f:8d:9c:e9:a5:63:bb:ca:60:7b:3e:34:c4:0e:96:dc:22: a0:3f:aa:52:e7:cd:b9:52:e3:ba:2d:55:45:f1:cc:cb:4a:3c: 98:b3:af:c6:33:6e:5a:42:4f:d3:b8:e2:d5:b2:d2:9d:9b:64: 52:65:18:b9:2f:99:d2:33:76:22:93:b4:f3:c5:3c:55:03:8f: e1:2c:ff:ad:b4:de:37:2a:0e:1a:04:ac:0a:93:87:cf:87:27: c4:f0:91:83:a7:1c:48:b2:99:8f:e2:42:25:17:6a:03:4a:6a: 64:91:d7:dc:74:a5:35:ce:82:45:e7:d9:1e:37:db:ff:99:1e: 8a:20:2b:51:5f:bc:eb:60:55:5d:c2:28:c6:ab:07:3b:61:0d: 79:eb:8e:04:e3:fe:e2:87:f4:e3:7a:e4:4c:9d:8e:13:3a:09: 4f:02:6c:b4:a2:f7:1c:fb:52:36:b2:65:a7:d6:53:36:ee:59: 54:73:e1:24:bc:0a:f5:b6:7f:95:34:ef:14:98:56:f6:5f:23: 1e:4d:1d:64:1b:a7:cb:4e:e6:23:9a:62:25:1e:22:86:03:6e: 79:6e:10:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE NjlCQzJGMzQwHhcNMjUxMDIwMTkyNDM2WhcNMjUxMDI3MTkyNDM2WjAYMRYwFAYD VQQDEw02OGY2OGM3NS04YzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV2T/yFxf/hLCjD0u1xBsji1Zy7ykAcExzhh6crPjud++9fZKdUl9LCBvOeM VsGHA+uOI+rOsrKn634VzgHntS64EHoSPceSVVYAUDG9L4vmuCB5M7Ng/0fUsmwZ C2UMnDUbF21aJtD/Qe04jCuX/Cd2dCen9gWKLcpi4c503dPvD3Geqc2bbJa1laEW 8NTl5tlvF5Nn4S12loEJ7mhh4pkZW/5tTirE1WCPjt4/Ye9/tJVPlX/ii+D9MVOj oxYKQquw+kSme32aDlPAnMybDR4GGDXKzEfjZGVsqvHeK7A2yGCnWPioF7vKpaq7 wpRsNXaqv0yVan4ncG49bDWGIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCGmWmS Oo0x3Bd1rQYawoRTl4Z5MB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2 dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGhrxDFVp3Df6IDvmMER+6R1Oj5tXV0G64t+Dm7TjFx6Ej0yz8H42c 6aVju8pgez40xA6W3CKgP6pS5825UuO6LVVF8czLSjyYs6/GM25aQk/TuOLVstKd m2RSZRi5L5nSM3Yik7TzxTxVA4/hLP+ttN43Kg4aBKwKk4fPhyfE8JGDpxxIspmP 4kIlF2oDSmpkkdfcdKU1zoJF59keN9v/mR6KICtRX7zrYFVdwijGqwc7YQ15644E 4/7ih/TjeuRMnY4TOglPAmy0ovcc+1I2smWn1lM27llUc+EkvAr1tn+VNO8UmFb2 XyMeTR1kG6fLTuYjmmIlHiKGA255bhDv -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:24 2025 by rpki-client