$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft File: FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json) Hash identifier: o17FqVx8qTDU2AsUDrNOwpp8ikhkeX7s5vqcBFzKsAs= Subject key identifier: 99:C4:80:7B:23:86:0E:59:C9:68:93:D1:A0:66:42:DE:2F:75:01:4A Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft Manifest number: 69 Signing time: Sun 19 May 2024 07:33:52 +0000 Manifest this update: Sun 19 May 2024 07:33:52 +0000 Manifest next update: Sun 26 May 2024 07:33:52 +0000 Files and hashes: 1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: kpRVeAQL7DYBTJKXgiWEHtzNneyL/sO517hYKKEi+zo=) 2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: OLewJUJr+U9U8qfvMJkh2R+kFpFEPwuOG/eViM+YX50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Validity Not Before: May 19 07:33:52 2024 GMT Not After : May 26 07:33:52 2024 GMT Subject: CN=6649ab60-d356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:44:cd:1b:57:a8:44:89:4f:c8:9f:0d:e5: eb:81:8b:2b:6c:3d:0b:94:34:b4:38:37:5d:4e:01: 58:fa:3a:4a:1d:16:da:41:0e:b7:7a:79:1b:76:73: f7:ff:df:55:36:a4:73:5d:b1:3d:a6:f6:b0:42:d7: ab:b3:24:7a:77:90:a1:34:a2:ca:42:2d:0e:b1:68: d9:e4:40:eb:fe:a0:36:5b:9d:9d:71:3a:c5:ec:9b: 7e:86:25:51:4e:8d:70:c5:cf:40:f2:8f:2d:e4:b5: 9c:d1:40:e9:5f:9b:c7:37:0d:b8:07:a4:14:be:90: 10:78:0d:9c:46:43:a6:92:5d:c6:3f:ad:38:5a:dc: 12:ce:87:43:4b:15:98:bc:c1:41:64:d7:8c:f5:2f: ab:71:6a:98:50:a0:4a:31:80:21:91:6d:44:ec:2f: f3:6e:99:bf:3e:d7:ca:6f:de:06:de:a5:39:38:ac: 5e:0f:2a:30:5f:60:15:80:41:18:ff:68:8e:ab:9f: 13:46:a4:35:56:7b:88:78:c1:43:d9:01:a6:1e:0a: 09:54:3a:ed:49:ed:38:39:40:79:9a:d3:01:a9:75: 16:6f:b5:35:06:8a:5f:58:18:e4:84:4a:a4:3d:3b: 65:02:e2:df:ab:79:0b:8e:02:a0:1a:17:14:8c:ab: f8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:80:7B:23:86:0E:59:C9:68:93:D1:A0:66:42:DE:2F:75:01:4A X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:a1:4f:29:5c:b1:58:cb:d2:8b:18:32:bf:26:fe:c5:0f:b7: f3:b2:54:20:0f:50:3b:f7:15:f7:fd:d3:63:b1:b7:f9:b4:b2: 5c:20:6c:46:a7:5d:67:41:34:88:9c:5b:4a:c3:3c:fb:58:3a: 67:47:db:cd:d0:47:83:16:9c:fb:f8:97:ae:ef:66:71:b1:63: cb:79:0f:54:ea:97:63:17:bf:ae:b5:0c:f3:c5:80:0b:1c:53: ea:90:e1:c5:f9:82:ba:4a:b4:c9:c9:f6:31:f8:db:da:3f:05: c7:6a:38:d6:41:2e:59:8c:84:b2:2b:dc:b0:f6:bd:69:f7:62: 0d:a1:17:2d:86:43:ca:d1:77:b0:01:61:93:22:6f:45:d9:38: 62:b1:9b:5a:17:7b:35:28:2e:19:20:0b:13:69:fd:69:e6:91: 25:bc:3d:c2:f6:6d:65:08:fe:d0:5c:3d:6c:30:2d:22:1d:6a: e6:21:ec:c6:ba:dc:51:aa:24:84:c8:29:6a:5f:a9:e6:88:a0: aa:93:7c:64:27:38:5e:2e:af:39:8a:a5:11:a5:8f:73:bc:16: 3e:06:13:25:cc:d7:d1:d4:2f:75:33:13:a2:33:54:69:29:39: 67:ae:a7:9a:4a:c5:52:3a:c6:b7:49:f9:03:ce:f3:3c:da:a7: 62:9d:56:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzE1QjExMC8GA1UEBRMoMTUzNjEzNDdBMTA4MTRBM0U2NjhCNzI2OUZFMjA3MDdC MThFNzk3MzAeFw0yNDA1MTkwNzMzNTJaFw0yNDA1MjYwNzMzNTJaMBgxFjAUBgNV BAMTDTY2NDlhYjYwLWQzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfh0TNG1eoRIlPyJ8N5euBiytsPQuUNLQ4N11OAVj6OkodFtpBDrd6eRt2c/f/ 31U2pHNdsT2m9rBC16uzJHp3kKE0ospCLQ6xaNnkQOv+oDZbnZ1xOsXsm36GJVFO jXDFz0Dyjy3ktZzRQOlfm8c3DbgHpBS+kBB4DZxGQ6aSXcY/rTha3BLOh0NLFZi8 wUFk14z1L6txaphQoEoxgCGRbUTsL/Numb8+18pv3gbepTk4rF4PKjBfYBWAQRj/ aI6rnxNGpDVWe4h4wUPZAaYeCglUOu1J7Tg5QHma0wGpdRZvtTUGil9YGOSESqQ9 O2UC4t+reQuOAqAaFxSMq/g9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmcSAeyOG DlnJaJPRoGZC3i91AUowHwYDVR0jBBgwFoAUFTYTR6EIFKPmaLcmn+IHB7GOeXMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDMTVCL0U5N0RFRjQwNzQ2 RDExRUU5RTYzM0MzN0M0RjlBRTAyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VY TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlRZVFI2RUlGS1BtYUxjbW4tSUhCN0dPZVhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD MTVCL0U5N0RFRjQwNzQ2RDExRUU5RTYzM0MzN0M0RjlBRTAyL0ZUWVRSNkVJRktQ bWFMY21uLUlIQjdHT2VYTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuhTylcsVjL0osYMr8m/sUPt/OyVCAPUDv3Fff902Oxt/m0slwgbEan XWdBNIicW0rDPPtYOmdH283QR4MWnPv4l67vZnGxY8t5D1Tql2MXv661DPPFgAsc U+qQ4cX5grpKtMnJ9jH429o/BcdqONZBLlmMhLIr3LD2vWn3Yg2hFy2GQ8rRd7AB YZMib0XZOGKxm1oXezUoLhkgCxNp/WnmkSW8PcL2bWUI/tBcPWwwLSIdauYh7Ma6 3FGqJITIKWpfqeaIoKqTfGQnOF4urzmKpRGlj3O8Fj4GEyXM19HUL3UzE6IzVGkp OWeup5pKxVI6xrdJ+QPO8zzap2KdVmw= -----END CERTIFICATE-----Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org