$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json) Hash identifier: u1jz8mTItnG0i1OH8jW0qYbMNNRS2opTWqadq0NxeuI= Subject key identifier: 61:2C:C6:07:A5:88:03:10:F5:A2:81:46:2B:92:7A:5A:DD:73:05:04 Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft Manifest number: 04 Signing time: Fri 25 Apr 2025 07:10:57 +0000 Manifest this update: Fri 25 Apr 2025 07:10:57 +0000 Manifest next update: Fri 02 May 2025 07:10:57 +0000 Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: 1qVShEBelaPiON0IjosxFZO6xx2DI9FAPNrF4CA6PkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Validity Not Before: Apr 25 07:10:57 2025 GMT Not After : May 2 07:10:57 2025 GMT Subject: CN=680b3581-b87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:3a:a3:c3:0c:e8:87:a0:4c:71:84:45:19: 1b:b0:e7:6e:ce:d9:17:ce:e1:73:6e:3b:37:54:ff: 3a:13:b5:08:42:37:73:21:33:4a:d5:1c:e9:4d:7e: 8d:96:c4:ae:b8:d9:f9:14:27:6f:13:52:b1:ea:da: 8a:6a:6d:f4:f3:ec:6f:af:95:44:d0:a4:6c:e6:e9: 17:ea:97:4c:73:04:5f:1b:9e:13:e6:3b:73:a4:f9: 17:06:0b:95:ef:36:e4:d5:51:4d:e4:4a:b2:8d:0f: 36:8b:34:6b:21:ab:82:60:21:c9:3f:62:57:4e:1f: ff:17:31:ac:c9:c8:47:57:b5:24:93:0d:d1:b3:56: dc:de:1f:c8:e8:a1:0b:a3:06:b9:d3:f4:e6:1e:9c: 7d:8f:fe:50:68:47:25:86:a8:23:ac:83:32:8d:50: 98:48:1b:f6:44:dd:43:b1:a0:dc:1c:d5:c1:91:54: bf:62:d2:61:d2:18:7c:31:f4:2f:91:18:bc:94:3b: 8a:71:5e:ab:91:c8:36:88:55:01:fe:97:d2:5a:05: 86:7f:27:f7:80:43:fa:20:c8:82:76:19:7f:c0:4b: f7:02:c0:96:08:57:97:9c:e3:5a:0a:13:45:45:8b: 02:ed:dc:bf:5a:81:ac:72:9f:5e:e7:cb:49:ba:bb: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2C:C6:07:A5:88:03:10:F5:A2:81:46:2B:92:7A:5A:DD:73:05:04 X509v3 Authority Key Identifier: keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:58:b9:bd:8b:c7:75:00:81:ac:3d:5c:38:44:e8:37:fa:e8: 5b:8f:9d:4c:8e:af:33:dd:60:2d:4a:f8:3d:25:3c:50:77:67: a1:25:6c:71:69:6a:5b:b6:2e:6b:0c:47:82:94:c5:f7:89:4a: ee:7a:ec:85:8d:14:48:40:49:44:d4:ca:0a:33:c9:ef:d9:70: 8f:4b:05:df:17:21:6f:62:75:2b:38:ab:52:5a:1c:7d:c8:2c: 50:a5:34:a8:0a:eb:d4:dc:df:eb:5a:7a:b6:f8:3b:96:6f:d3: c9:ef:06:e2:a7:fb:32:74:41:54:b2:e8:03:74:71:a2:2f:e9: 3b:c6:3d:95:ec:7d:0b:88:ce:af:83:1d:53:23:2e:48:13:62: 07:d9:fc:fd:ce:25:0c:db:99:95:b4:43:71:26:73:bb:cf:87: fb:02:68:38:34:b7:5a:64:37:1c:a4:87:14:f4:56:1b:7e:25: 4a:e7:cb:c0:2a:45:e8:3e:8c:7a:4c:64:64:03:57:b8:70:9c: df:b6:12:77:b3:e7:b2:0f:c4:31:83:0e:83:b0:7e:d4:e1:1c: 03:bb:ee:fd:5d:f1:a7:ba:bd:7e:73:b5:40:39:82:f6:bc:f1: a3:d0:47:65:9b:5e:89:e4:c9:d0:ca:e1:ce:c5:e2:03:91:b8: ca:0c:41:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MTdFNjExMC8GA1UEBRMoMTYyQ0NFODZFMkEzNjk3RTkxOEI3Q0I1RDU2REEwQTAw MkM3OTM3MTAeFw0yNTA0MjUwNzEwNTdaFw0yNTA1MDIwNzEwNTdaMBgxFjAUBgNV BAMTDTY4MGIzNTgxLWI4N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCeDqjwwzoh6BMcYRFGRuw527O2RfO4XNuOzdU/zoTtQhCN3MhM0rVHOlNfo2W xK642fkUJ28TUrHq2opqbfTz7G+vlUTQpGzm6Rfql0xzBF8bnhPmO3Ok+RcGC5Xv NuTVUU3kSrKNDzaLNGshq4JgIck/YldOH/8XMazJyEdXtSSTDdGzVtzeH8jooQuj BrnT9OYenH2P/lBoRyWGqCOsgzKNUJhIG/ZE3UOxoNwc1cGRVL9i0mHSGHwx9C+R GLyUO4pxXquRyDaIVQH+l9JaBYZ/J/eAQ/ogyIJ2GX/AS/cCwJYIV5ec41oKE0VF iwLt3L9agaxyn17ny0m6u/7tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYSzGB6WI AxD1ooFGK5J6Wt1zBQQwHwYDVR0jBBgwFoAUFizOhuKjaX6Ri3y11W2goALHk3Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxN0U2LzA1OTRGQUUyMUU1 RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2UmkzeTExVzJnb0FMSGsz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRml6T2h1S2phWDZSaTN5MTFXMmdvQUxIazNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx N0U2LzA1OTRGQUUyMUU1RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2 UmkzeTExVzJnb0FMSGszRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKFYub2Lx3UAgaw9XDhE6Df66FuPnUyOrzPdYC1K+D0lPFB3Z6ElbHFp alu2LmsMR4KUxfeJSu567IWNFEhASUTUygozye/ZcI9LBd8XIW9idSs4q1JaHH3I LFClNKgK69Tc3+taerb4O5Zv08nvBuKn+zJ0QVSy6AN0caIv6TvGPZXsfQuIzq+D HVMjLkgTYgfZ/P3OJQzbmZW0Q3Emc7vPh/sCaDg0t1pkNxykhxT0Vht+JUrny8Aq Reg+jHpMZGQDV7hwnN+2Enez57IPxDGDDoOwftThHAO77v1d8ae6vX5ztUA5gva8 8aPQR2WbXonkydDK4c7F4gORuMoMQWY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:04 2025 by rpki-client