$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: EYq0htdylv1sJdE9XGw4jRkFj9dfZh9jjYYrx8pk1yA= Subject key identifier: C4:6C:BB:0E:FD:50:F7:0F:0D:E7:9A:A7:86:AA:83:32:3C:70:53:2F Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: 2C Signing time: Sun 19 May 2024 08:27:19 +0000 Manifest this update: Sun 19 May 2024 08:27:18 +0000 Manifest next update: Sun 26 May 2024 08:27:18 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: WBa8mZVnG8Xx0C6ZW/wNT1X3rRCvbUBDb+9fimxO1Ok=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: BgGoHCl2iTsuBLT+ayqXCo0W6SSb3rjCMeP23JW82+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: May 19 08:27:18 2024 GMT Not After : May 26 08:27:18 2024 GMT Subject: CN=6649b7e6-8d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:2b:0d:6c:de:59:9b:77:8a:d0:7d:af:cd: 57:02:9a:49:68:cf:84:6f:6f:94:95:da:a1:0c:2d: a6:2a:65:97:a9:4f:02:82:ea:a7:60:14:36:41:03: ff:00:36:6b:b1:8d:20:61:cc:33:d9:50:06:05:61: 4b:c2:1d:70:df:59:ce:d0:e3:f6:7a:29:2c:02:eb: 50:e7:2c:0c:b1:03:4d:48:b6:35:5c:75:77:8d:d7: a0:d5:47:6c:2f:ca:c4:9f:41:08:fc:68:9a:f4:70: 0b:21:3b:41:d4:73:91:d4:10:b3:2c:5e:7c:7e:a6: b7:00:a3:79:c8:4b:8b:49:11:c6:a2:98:b4:85:45: 86:66:ff:f5:be:56:29:42:33:9c:34:68:45:93:ed: 76:50:c6:ea:51:0d:b4:f1:6c:2d:3f:8f:40:59:2b: 0d:4b:06:54:ae:a5:33:ac:c0:54:05:81:d8:da:e0: db:a3:fe:4a:dc:f7:f6:bc:99:0a:01:ec:c5:db:75: cd:d1:56:95:96:46:73:0a:f3:f6:9f:db:47:62:01: 07:4e:8f:eb:90:a8:27:03:dd:94:7e:d1:ad:07:7e: 30:f3:a2:17:16:a8:c7:40:6c:72:37:6e:c9:a1:9d: b3:ac:79:25:9f:17:e0:ce:e0:28:53:0f:2b:30:20: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:BB:0E:FD:50:F7:0F:0D:E7:9A:A7:86:AA:83:32:3C:70:53:2F X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:11:0c:7f:d5:49:5d:d5:ea:17:5e:a8:34:b8:53:0c:91:5e: 0f:92:fc:25:d0:1e:45:7e:a1:a5:96:2f:e5:78:a3:e3:cf:67: 83:e1:f3:65:60:d5:e0:02:1a:6d:84:ad:c7:90:df:00:96:83: 18:93:4c:dc:a7:8a:18:54:42:ac:29:89:87:d3:cf:eb:2c:32: d9:1f:11:2b:18:ce:72:0e:27:10:b1:ba:39:70:e5:d6:c1:2e: de:89:eb:25:cb:7e:fb:53:c7:22:66:fc:af:56:05:d6:d8:8d: 18:8e:fd:48:0e:88:00:50:dc:1a:e4:61:4f:81:65:d9:b8:cf: a5:e5:d0:1c:43:5d:ba:a3:e8:aa:0d:7a:f6:b0:c7:b7:b5:7d: 6f:63:8f:25:07:b7:fa:f2:91:db:79:9c:85:9c:f4:27:27:3c: 95:2a:7b:d7:8a:87:f5:82:70:1e:1d:dc:e6:4e:bf:34:9f:af: 98:50:6d:ff:a7:e3:cc:97:77:52:53:e2:84:5a:7f:86:d4:50: f0:c5:f5:14:24:d3:67:e2:0e:e4:70:8d:36:1a:c2:49:5a:19: a1:96:93:33:f7:a7:62:47:92:ef:5c:fe:7a:f3:f9:2e:f0:6d: 2c:c6:11:c8:60:5a:7b:a4:35:02:ee:63:e5:22:b7:3e:fb:43: 90:14:52:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTUzQzExMC8GA1UEBRMoN0VEQ0U3MTkyNThCRURGOTBBQTg2QzlBRUIwOENERDMx RUVGNTc3QTAeFw0yNDA1MTkwODI3MThaFw0yNDA1MjYwODI3MThaMBgxFjAUBgNV BAMTDTY2NDliN2U2LThkNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZnisNbN5Zm3eK0H2vzVcCmkloz4Rvb5SV2qEMLaYqZZepTwKC6qdgFDZBA/8A NmuxjSBhzDPZUAYFYUvCHXDfWc7Q4/Z6KSwC61DnLAyxA01ItjVcdXeN16DVR2wv ysSfQQj8aJr0cAshO0HUc5HUELMsXnx+prcAo3nIS4tJEcaimLSFRYZm//W+VilC M5w0aEWT7XZQxupRDbTxbC0/j0BZKw1LBlSupTOswFQFgdja4Nuj/krc9/a8mQoB 7MXbdc3RVpWWRnMK8/af20diAQdOj+uQqCcD3ZR+0a0HfjDzohcWqMdAbHI3bsmh nbOseSWfF+DO4ChTDyswIHrLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxGy7Dv1Q 9w8N55qnhqqDMjxwUy8wHwYDVR0jBBgwFoAUftznGSWL7fkKqGya6wjN0x7vV3ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFNTNDLzRCRDBFNUY4RDM3 RDExRUVCQTA1QkQxNkM0RjlBRTAyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZnR6bkdTV0w3ZmtLcUd5YTZ3ak4weDd2VjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF NTNDLzRCRDBFNUY4RDM3RDExRUVCQTA1QkQxNkM0RjlBRTAyL2Z0em5HU1dMN2Zr S3FHeWE2d2pOMHg3dlYzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYRDH/VSV3V6hdeqDS4UwyRXg+S/CXQHkV+oaWWL+V4o+PPZ4Ph82Vg 1eACGm2ErceQ3wCWgxiTTNynihhUQqwpiYfTz+ssMtkfESsYznIOJxCxujlw5dbB Lt6J6yXLfvtTxyJm/K9WBdbYjRiO/UgOiABQ3BrkYU+BZdm4z6Xl0BxDXbqj6KoN evawx7e1fW9jjyUHt/rykdt5nIWc9CcnPJUqe9eKh/WCcB4d3OZOvzSfr5hQbf+n 48yXd1JT4oRaf4bUUPDF9RQk02fiDuRwjTYawklaGaGWkzP3p2JHku9c/nrz+S7w bSzGEchgWnukNQLuY+Uitz77Q5AUUnc= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org