$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json) Hash identifier: tEfPIAMkSoOS8gw56jXdbbhkSwfUfzNWtE3Gqar+0NQ= Subject key identifier: 3A:95:8E:71:9D:8A:24:82:F2:3F:B1:92:BD:44:53:68:48:F2:1D:20 Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft Manifest number: 0D Signing time: Tue 13 May 2025 07:19:38 +0000 Manifest this update: Tue 13 May 2025 07:19:38 +0000 Manifest next update: Tue 20 May 2025 07:19:38 +0000 Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: TJDqkBNGhQvPP7wVpEv6KRXOKeYWjUYdEyzs6G8akz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Validity Not Before: May 13 07:19:38 2025 GMT Not After : May 20 07:19:38 2025 GMT Subject: CN=6822f28a-94d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:6d:3e:e8:00:e5:d9:7c:8e:2c:71:e8:25: 1c:6b:24:7e:67:6e:da:52:fa:b4:f9:1a:b9:7a:77: 41:af:8f:f3:d7:1f:c0:ff:f4:09:de:e9:04:3a:53: 3d:fc:d0:12:71:d3:9c:aa:4b:c5:29:29:de:fc:bf: 3d:d0:85:c8:db:01:5b:03:89:c8:be:63:2f:4e:98: e1:41:dc:6d:56:f3:f9:eb:e7:63:07:58:29:ab:8c: 76:d1:e5:3d:f8:b1:63:83:4f:00:a0:e5:94:13:d7: 1a:44:67:98:d0:92:2a:22:8a:80:49:4a:e8:16:8f: 7e:8c:eb:2a:34:cf:e2:3e:c7:3c:9f:0b:c6:b9:35: 20:ba:6f:f3:d1:2f:69:b7:3e:42:bb:3f:95:1f:12: 5f:04:b6:c0:61:56:56:6d:d6:b3:ba:92:36:32:76: 9e:3d:86:50:bf:d6:ee:65:34:1b:b5:0c:9a:3d:7c: 57:29:44:ac:b1:47:cb:f3:dd:e7:0b:d5:d5:20:33: 9c:62:1f:d2:ed:39:e4:2b:2f:4c:94:92:1e:8c:40: ed:40:8b:32:b1:8b:dd:51:3e:f9:24:37:7b:13:79: ff:e4:17:0b:2d:d4:7c:34:6c:8c:a3:62:33:f5:ac: 07:97:19:4e:d0:5a:1a:c8:f5:7d:e1:72:a5:95:9f: 44:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:8E:71:9D:8A:24:82:F2:3F:B1:92:BD:44:53:68:48:F2:1D:20 X509v3 Authority Key Identifier: keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:16:d6:05:30:60:6d:20:f6:c1:bd:f5:18:09:56:aa:6f:41: 1d:48:93:f6:cc:31:cc:71:71:c7:13:2f:19:a0:ce:0b:03:08: a7:74:10:0c:4e:2e:79:77:48:6f:97:f1:ad:d6:32:ff:7e:b0: fc:e2:bd:18:66:6c:a8:97:36:af:52:86:6a:f3:b0:6c:4f:a8: cb:75:db:7a:ea:72:70:70:d7:6b:e4:df:f1:ef:10:8d:a5:79: 46:85:67:c6:41:9c:82:98:4f:14:00:d4:d6:47:15:1e:6b:5d: 75:99:63:51:40:d8:e2:d2:8e:cb:c0:2c:43:7c:98:5d:81:b7: c0:b3:f6:4c:e2:26:25:22:5b:3a:9c:92:98:39:ad:a8:3f:c8: b5:40:b6:94:da:3c:2b:ac:85:3c:dc:dd:ce:2c:fe:f4:0a:87: 25:82:9f:38:59:c7:47:bf:dc:30:c8:ae:b9:9e:66:4c:d6:c9: f3:19:26:a0:11:74:1e:92:58:4c:f8:25:0c:ce:42:2b:41:1b: 56:16:f5:f8:4c:09:ec:15:6b:87:e4:94:2d:22:28:2b:0b:23: c1:98:93:ce:d4:bf:09:fc:1c:9b:3c:d9:8a:d0:4f:af:11:17: 44:8f:4b:48:8c:10:3f:e0:07:f2:e2:92:2d:d8:33:9f:5c:8d: 1f:bf:f3:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MTdFNjExMC8GA1UEBRMoMTYyQ0NFODZFMkEzNjk3RTkxOEI3Q0I1RDU2REEwQTAw MkM3OTM3MTAeFw0yNTA1MTMwNzE5MzhaFw0yNTA1MjAwNzE5MzhaMBgxFjAUBgNV BAMTDTY4MjJmMjhhLTk0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp+W0+6ADl2XyOLHHoJRxrJH5nbtpS+rT5Grl6d0Gvj/PXH8D/9Ane6QQ6Uz38 0BJx05yqS8UpKd78vz3QhcjbAVsDici+Yy9OmOFB3G1W8/nr52MHWCmrjHbR5T34 sWODTwCg5ZQT1xpEZ5jQkioiioBJSugWj36M6yo0z+I+xzyfC8a5NSC6b/PRL2m3 PkK7P5UfEl8EtsBhVlZt1rO6kjYydp49hlC/1u5lNBu1DJo9fFcpRKyxR8vz3ecL 1dUgM5xiH9LtOeQrL0yUkh6MQO1AizKxi91RPvkkN3sTef/kFwst1Hw0bIyjYjP1 rAeXGU7QWhrI9X3hcqWVn0SDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOpWOcZ2K JILyP7GSvURTaEjyHSAwHwYDVR0jBBgwFoAUFizOhuKjaX6Ri3y11W2goALHk3Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxN0U2LzA1OTRGQUUyMUU1 RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2UmkzeTExVzJnb0FMSGsz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRml6T2h1S2phWDZSaTN5MTFXMmdvQUxIazNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx N0U2LzA1OTRGQUUyMUU1RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2 UmkzeTExVzJnb0FMSGszRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALUW1gUwYG0g9sG99RgJVqpvQR1Ik/bMMcxxcccTLxmgzgsDCKd0EAxO Lnl3SG+X8a3WMv9+sPzivRhmbKiXNq9ShmrzsGxPqMt123rqcnBw12vk3/HvEI2l eUaFZ8ZBnIKYTxQA1NZHFR5rXXWZY1FA2OLSjsvALEN8mF2Bt8Cz9kziJiUiWzqc kpg5rag/yLVAtpTaPCushTzc3c4s/vQKhyWCnzhZx0e/3DDIrrmeZkzWyfMZJqAR dB6SWEz4JQzOQitBG1YW9fhMCewVa4fklC0iKCsLI8GYk87Uvwn8HJs82YrQT68R F0SPS0iMED/gB/Liki3YM59cjR+/8yg= -----END CERTIFICATE-----Generated at Tue May 13 20:58:32 2025 by rpki-client