$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json) Hash identifier: o5VPjUmyTxcrz5Fpl5iFEB0NijyK9y9EMLE3N61bldo= Subject key identifier: 49:92:66:E8:63:53:AA:A2:0B:1F:65:FC:7F:3C:FF:3E:00:8D:B0:D0 Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft Manifest number: 1D Signing time: Tue 17 Jun 2025 06:44:51 +0000 Manifest this update: Tue 17 Jun 2025 06:44:51 +0000 Manifest next update: Tue 24 Jun 2025 06:44:51 +0000 Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: YSLA2t0TsnzUktXeauLAadx+nZPuu3Wjx6lMxn4zdP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Validity Not Before: Jun 17 06:44:51 2025 GMT Not After : Jun 24 06:44:51 2025 GMT Subject: CN=68510ee3-33a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:d0:35:27:3f:1b:6c:c5:d0:84:01:16:94: 3d:de:17:03:dc:8b:3c:c7:b1:22:2c:d0:bf:d5:0a: 35:ac:2a:96:c2:d8:3d:81:0e:70:8b:11:c4:91:e9: 6c:b4:52:d4:d8:7a:6c:98:31:54:57:c2:8d:94:4f: 1f:fd:d6:0c:27:62:02:e9:60:8b:f5:16:af:4a:0a: 68:ab:1e:7e:66:29:a1:12:97:21:d1:f7:98:a1:a9: a5:c5:5d:ab:0d:48:cc:18:ea:e6:9a:fa:b7:a8:7d: 60:e9:78:b0:3a:dc:92:8d:a8:d7:31:c3:83:be:f0: 3a:bb:ad:49:7a:6d:8d:a8:81:33:08:0b:ea:33:aa: 38:59:e3:42:4b:5b:3d:63:c1:d7:74:a7:f5:4c:2b: 40:e6:43:e0:a0:fc:09:91:9b:57:cf:48:ae:88:78: 68:be:24:14:ed:81:9b:bb:b9:03:f3:40:9d:40:53: af:b5:2b:af:d2:d8:30:0b:3f:2b:56:ea:32:9c:1c: d0:ec:fa:4d:6e:f4:7f:66:86:4c:57:4c:1d:6b:e6: 06:f9:9c:a8:5a:12:0b:19:5e:72:22:d6:e0:0d:a6: 26:20:80:0d:92:75:11:28:84:fb:72:24:2c:cb:59: b5:3e:ba:23:74:13:e8:a4:75:08:8a:53:59:be:d9: 71:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:66:E8:63:53:AA:A2:0B:1F:65:FC:7F:3C:FF:3E:00:8D:B0:D0 X509v3 Authority Key Identifier: keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3a:17:11:23:b5:78:3e:06:9b:36:42:71:6b:12:8b:a2:58: 12:fa:d3:a3:cf:b3:e6:68:ea:c5:93:b3:2c:10:71:3f:20:d5: 58:42:37:85:6b:39:22:c1:7f:8b:a6:8c:77:2b:f4:02:b2:82: 87:96:cf:41:9e:a1:00:46:49:89:dc:61:e0:0d:a0:8f:ca:e5: be:05:7a:63:8e:dc:00:fa:89:08:9b:47:88:9a:11:c9:16:9f: 03:ef:9d:7b:23:11:b3:26:76:1f:aa:f7:cb:49:df:ba:06:9d: 54:ab:15:89:0b:03:7c:eb:90:7b:f4:ca:ec:be:3e:0b:96:63: 09:ba:92:a9:c9:63:f3:69:74:7e:d4:b7:d7:c1:2f:3d:9c:9e: fb:4e:26:9e:af:39:b9:38:3a:b8:70:f6:77:fd:ed:7d:b3:ee: 3e:b0:4c:9d:2b:7d:bb:d5:d3:99:0d:b9:a2:c3:02:b5:b7:c3: d9:e6:dd:56:df:9f:54:c4:fb:ba:7b:76:55:bf:7b:2e:47:87: 04:67:7e:b1:3e:ae:64:52:ec:b5:b8:f7:35:97:b7:e5:fd:12: 8f:34:f4:21:1d:21:fe:ad:10:35:6a:e2:73:05:d2:c4:60:09: 61:b2:8c:ab:0d:52:ff:76:9e:2d:53:8c:29:dc:c4:28:ff:f4: 17:82:19:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MTdFNjExMC8GA1UEBRMoMTYyQ0NFODZFMkEzNjk3RTkxOEI3Q0I1RDU2REEwQTAw MkM3OTM3MTAeFw0yNTA2MTcwNjQ0NTFaFw0yNTA2MjQwNjQ0NTFaMBgxFjAUBgNV BAMTDTY4NTEwZWUzLTMzYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEZdA1Jz8bbMXQhAEWlD3eFwPcizzHsSIs0L/VCjWsKpbC2D2BDnCLEcSR6Wy0 UtTYemyYMVRXwo2UTx/91gwnYgLpYIv1Fq9KCmirHn5mKaESlyHR95ihqaXFXasN SMwY6uaa+reofWDpeLA63JKNqNcxw4O+8Dq7rUl6bY2ogTMIC+ozqjhZ40JLWz1j wdd0p/VMK0DmQ+Cg/AmRm1fPSK6IeGi+JBTtgZu7uQPzQJ1AU6+1K6/S2DALPytW 6jKcHNDs+k1u9H9mhkxXTB1r5gb5nKhaEgsZXnIi1uANpiYggA2SdREohPtyJCzL WbU+uiN0E+ikdQiKU1m+2XEDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSZJm6GNT qqILH2X8fzz/PgCNsNAwHwYDVR0jBBgwFoAUFizOhuKjaX6Ri3y11W2goALHk3Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxN0U2LzA1OTRGQUUyMUU1 RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2UmkzeTExVzJnb0FMSGsz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRml6T2h1S2phWDZSaTN5MTFXMmdvQUxIazNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx N0U2LzA1OTRGQUUyMUU1RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2 UmkzeTExVzJnb0FMSGszRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGA6FxEjtXg+Bps2QnFrEouiWBL606PPs+Zo6sWTsywQcT8g1VhCN4Vr OSLBf4umjHcr9AKygoeWz0GeoQBGSYncYeANoI/K5b4FemOO3AD6iQibR4iaEckW nwPvnXsjEbMmdh+q98tJ37oGnVSrFYkLA3zrkHv0yuy+PguWYwm6kqnJY/NpdH7U t9fBLz2cnvtOJp6vObk4Orhw9nf97X2z7j6wTJ0rfbvV05kNuaLDArW3w9nm3Vbf n1TE+7p7dlW/ey5HhwRnfrE+rmRS7LW49zWXt+X9Eo809CEdIf6tEDVq4nMF0sRg CWGyjKsNUv92ni1TjCncxCj/9BeCGYQ= -----END CERTIFICATE-----Generated at Tue Jun 17 23:02:08 2025 by rpki-client