$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft File: FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json) Hash identifier: CTwQqjP6poMJrPoh2nBnST7H9QSv+Uyw70GMkPV1jVE= Subject key identifier: B5:4E:81:0E:B5:D2:07:DF:8F:E1:EB:08:F7:F7:04:85:02:E1:4D:22 Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft Manifest number: 010E Signing time: Sat 05 Apr 2025 04:17:07 +0000 Manifest this update: Sat 05 Apr 2025 04:17:07 +0000 Manifest next update: Sat 12 Apr 2025 04:17:07 +0000 Files and hashes: 1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: ZE5gVJpHLUp+vnHGGg/dx9iO+2qfudxnsdBX78+IA/Q=) 2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: sPgtFXkQiNpbnrX5GSASzjIh/8IU4jkwvbF5ffVha8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B Validity Not Before: Apr 5 04:17:07 2025 GMT Not After : Apr 12 04:17:07 2025 GMT Subject: CN=67f0aec3-0411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:66:a3:6a:ed:02:34:55:3d:6c:eb:84:50: cb:02:a3:14:2b:ca:d1:63:e8:ed:25:d2:4a:0f:ba: f2:44:fd:48:c4:b9:59:31:ea:6c:6a:60:f2:b6:50: aa:3f:8e:bd:51:57:e3:8d:ae:ff:5c:6f:6d:d9:b7: a7:d5:df:16:d0:6a:65:f4:14:ac:9a:ac:43:ad:d4: 67:9c:9b:88:11:46:42:f5:3a:e8:8c:af:81:2e:84: e8:a5:eb:da:e0:b2:f2:72:84:86:6e:07:41:4f:23: f5:75:9d:9b:f2:39:d1:5a:29:96:25:7a:02:7a:c6: 44:a8:ce:d1:c1:53:7e:c6:54:f5:39:52:9f:d6:84: 68:8f:9a:ce:a5:f1:45:26:a7:e8:93:25:76:af:92: 0d:3d:b8:28:fb:ef:89:61:8d:0a:45:ba:e9:66:c4: ed:81:ee:ac:6e:82:65:4e:ab:60:ee:fe:72:f6:04: 06:c8:40:0d:9e:94:49:c4:17:eb:3e:07:96:63:e5: f8:f4:9b:c6:50:60:f2:03:bf:c5:42:fb:54:ce:da: d2:42:78:80:2b:e9:8b:bf:d7:b2:57:f5:39:9f:80: ed:e3:97:7b:b6:21:87:48:ad:ac:d1:8d:1a:61:ea: 57:2c:72:be:4d:fd:c3:bf:56:c0:2c:34:4b:2d:29: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4E:81:0E:B5:D2:07:DF:8F:E1:EB:08:F7:F7:04:85:02:E1:4D:22 X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:23:81:d0:4f:94:e9:49:63:c7:9c:fe:19:9e:fc:dd:48:32: 06:3c:b1:2a:93:7e:b0:a5:a2:b9:56:09:dd:ed:e4:50:a0:de: b9:c5:2e:0d:a0:be:35:5e:1c:7f:e2:4c:47:26:1c:b9:a0:8b: 71:d4:bd:81:fa:1b:d1:48:1d:72:ce:b1:2f:7c:a8:aa:09:1c: 43:26:e8:48:f8:df:85:0c:75:8d:60:fb:61:91:14:6c:fe:cd: 99:bb:65:3c:20:9a:b5:6b:3d:ff:05:67:ed:1c:4d:8a:23:97: c6:fe:68:da:de:cc:44:bf:a3:e9:c8:dc:bb:1a:5e:a0:80:17: a0:5b:c0:28:3d:f4:dd:66:b9:be:ce:e7:2c:1a:20:aa:1c:6c: 89:96:66:70:57:0d:66:d6:5f:91:94:3b:d1:cd:f0:61:07:f5: bf:8d:80:7a:e8:3c:d3:11:14:4e:8a:b2:f5:fd:8f:82:dc:28: 1d:7f:bd:9c:af:0a:a1:28:cf:5a:23:24:ad:3c:a6:65:0f:a4: 8d:14:c1:e6:0b:6f:d4:97:1e:51:fc:53:ae:f2:8c:ed:3a:9e: 2e:f9:e5:d1:91:e0:11:ad:42:3d:28:75:57:f7:ec:db:06:47: 45:d7:41:10:a0:ca:a4:2b:42:4f:84:1c:11:0d:b9:df:3c:52: 24:dd:df:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxNUIxMTAvBgNVBAUTKDE1MzYxMzQ3QTEwODE0QTNFNjY4QjcyNjlGRTIwNzA3 QjE4RTc5NzMwHhcNMjUwNDA1MDQxNzA3WhcNMjUwNDEyMDQxNzA3WjAYMRYwFAYD VQQDEw02N2YwYWVjMy0wNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRxmo2rtAjRVPWzrhFDLAqMUK8rRY+jtJdJKD7ryRP1IxLlZMepsamDytlCq P469UVfjja7/XG9t2ben1d8W0Gpl9BSsmqxDrdRnnJuIEUZC9TrojK+BLoTopeva 4LLycoSGbgdBTyP1dZ2b8jnRWimWJXoCesZEqM7RwVN+xlT1OVKf1oRoj5rOpfFF JqfokyV2r5INPbgo+++JYY0KRbrpZsTtge6sboJlTqtg7v5y9gQGyEANnpRJxBfr PgeWY+X49JvGUGDyA7/FQvtUztrSQniAK+mLv9eyV/U5n4Dt45d7tiGHSK2s0Y0a YepXLHK+Tf3Dv1bALDRLLSmX6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVOgQ61 0gffj+HrCPf3BIUC4U0iMB8GA1UdIwQYMBaAFBU2E0ehCBSj5mi3Jp/iBwexjnlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzE1Qi9FOTdERUY0MDc0 NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZLUG1hTGNtbi1JSEI3R09l WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzE1Qi9FOTdERUY0MDc0NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZL UG1hTGNtbi1JSEI3R09lWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBI4HQT5TpSWPHnP4ZnvzdSDIGPLEqk36wpaK5Vgnd7eRQoN65xS4N oL41Xhx/4kxHJhy5oItx1L2B+hvRSB1yzrEvfKiqCRxDJuhI+N+FDHWNYPthkRRs /s2Zu2U8IJq1az3/BWftHE2KI5fG/mja3sxEv6PpyNy7Gl6ggBegW8AoPfTdZrm+ zucsGiCqHGyJlmZwVw1m1l+RlDvRzfBhB/W/jYB66DzTERROirL1/Y+C3Cgdf72c rwqhKM9aIyStPKZlD6SNFMHmC2/Ulx5R/FOu8oztOp4u+eXRkeARrUI9KHVX9+zb BkdF10EQoMqkK0JPhBwRDbnfPFIk3d/E -----END CERTIFICATE-----Generated at Sun Apr 6 10:52:41 2025 by rpki-client