$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: pPjLXeXmmGcasmRErUUuZ9tlGAOAlBPLcEgkLkhT4es= Subject key identifier: E3:7C:17:E9:E5:EC:4C:89:AD:C1:B7:A1:E8:35:AF:70:8F:60:3E:B2 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: 2D Signing time: Sun 19 May 2024 08:25:34 +0000 Manifest this update: Sun 19 May 2024 08:25:34 +0000 Manifest next update: Sun 26 May 2024 08:25:34 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: VhX4rOWt+zkUWyk0h/s+zXaql2xckkts4Rba29ptcRk=) 2: F4F785D0D09C11EE94431F80C4F9AE02.roa (hash: gAmtnMhOAhK0fAuYmhp1IcpgWCw5DClF8kvOob2UxoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: May 19 08:25:34 2024 GMT Not After : May 26 08:25:34 2024 GMT Subject: CN=6649b77e-f6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:cd:71:40:9f:1d:01:d1:46:20:3b:58:22: 2f:2c:3a:53:04:3d:56:bc:c2:dd:5a:5a:a1:cf:b1: 5e:70:0b:f2:38:c6:a2:c5:2f:95:33:cc:54:ba:f7: 31:88:a6:1f:63:f0:e3:93:96:81:fc:c6:9c:ba:dd: 35:48:36:5a:af:e6:12:4f:aa:1f:19:4d:b7:1a:19: cc:88:8e:8c:fa:54:c0:63:e3:73:34:6b:5a:19:1c: 82:64:d2:09:14:09:cc:32:af:7d:79:b1:33:70:7b: 5e:f2:02:46:2c:2f:b0:ff:a2:8b:0a:35:db:42:dd: d3:94:83:8c:68:22:01:fb:92:38:09:f0:52:a5:e6: ac:39:b8:bf:99:05:f0:99:6a:69:54:ca:47:ab:b7: 7b:a8:dd:1b:06:64:dc:f1:bc:25:e2:db:ae:d4:2b: b5:2b:40:e1:b3:a2:07:70:6f:ec:d9:a7:a1:af:e1: ba:aa:b4:25:ee:31:8b:7d:23:a9:06:6b:f6:9a:c1: 16:75:2c:9b:82:b4:10:1d:87:8e:c9:98:2a:e3:4d: 58:31:e7:50:54:e5:bc:f0:6f:6a:1b:34:7c:0e:d9: 3c:0c:4f:54:6a:e5:c3:e3:60:11:9b:ae:c2:1c:a2: 82:92:a7:bf:e6:14:44:2e:d6:bb:c2:7e:9a:ff:cb: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7C:17:E9:E5:EC:4C:89:AD:C1:B7:A1:E8:35:AF:70:8F:60:3E:B2 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:23:4b:64:e4:4d:9d:e6:6f:b8:fe:ae:e3:da:75:f7:de:59: f2:1f:d4:b2:06:c7:ba:d1:0a:51:a6:3d:0b:da:0c:61:70:35: a9:e6:ca:d8:2b:3b:95:a9:8a:fc:13:3f:81:c1:33:11:e9:90: cf:94:ce:c5:8a:82:3a:15:f5:e4:77:bf:e5:30:2e:d3:cb:e7: 08:ac:d1:82:b5:61:a6:8a:bf:65:ea:1f:92:e1:c3:aa:71:27: e4:64:7d:f3:97:82:a8:99:75:10:94:ea:88:a9:60:a8:ca:58: 04:7b:0a:fa:d6:d0:64:d1:fa:75:db:3d:f5:a8:c2:fe:84:c8: b3:04:1e:65:d5:a5:18:b9:3f:2e:b3:b4:9e:6f:5d:c9:f9:e5: 57:0a:76:dc:a5:56:40:36:08:0f:20:51:b2:80:ef:d8:c0:b0: d8:89:3b:ed:0f:6a:92:4d:28:74:6d:4a:cf:32:dc:44:77:6a: 50:46:1c:06:19:fe:86:4d:6d:21:9d:59:88:b5:6d:87:17:12: 2d:4c:a2:31:b6:5d:9e:91:87:4e:d2:3a:99:99:87:46:02:e1: 6c:65:45:9c:7e:aa:be:90:41:dc:ae:95:6c:21:6d:4f:69:60: 55:d5:32:08:29:0d:75:88:bc:0b:00:85:57:af:ad:c4:b8:0a: ae:1d:f3:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OUI2RjExMC8GA1UEBRMoMTU4MzkzMzBBODFFRDg5OTIwNzNBMjM4MDRDOUY1OTA1 MzhGQjlEMjAeFw0yNDA1MTkwODI1MzRaFw0yNDA1MjYwODI1MzRaMBgxFjAUBgNV BAMTDTY2NDliNzdlLWY2ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzEc1xQJ8dAdFGIDtYIi8sOlMEPVa8wt1aWqHPsV5wC/I4xqLFL5UzzFS69zGI ph9j8OOTloH8xpy63TVINlqv5hJPqh8ZTbcaGcyIjoz6VMBj43M0a1oZHIJk0gkU Ccwyr315sTNwe17yAkYsL7D/oosKNdtC3dOUg4xoIgH7kjgJ8FKl5qw5uL+ZBfCZ amlUykert3uo3RsGZNzxvCXi267UK7UrQOGzogdwb+zZp6Gv4bqqtCXuMYt9I6kG a/aawRZ1LJuCtBAdh47JmCrjTVgx51BU5bzwb2obNHwO2TwMT1Rq5cPjYBGbrsIc ooKSp7/mFEQu1rvCfpr/y9h5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU43wX6eXs TImtwbeh6DWvcI9gPrIwHwYDVR0jBBgwFoAUFYOTMKge2Jkgc6I4BMn1kFOPudIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5QjZGLzJBRDVGNkQ4RDA5 QzExRUU4MEFCOEQ3RUM0RjlBRTAyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRllPVE1LZ2UySmtnYzZJNEJNbjFrRk9QdWRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 QjZGLzJBRDVGNkQ4RDA5QzExRUU4MEFCOEQ3RUM0RjlBRTAyL0ZZT1RNS2dlMkpr Z2M2STRCTW4xa0ZPUHVkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADcjS2TkTZ3mb7j+ruPadffeWfIf1LIGx7rRClGmPQvaDGFwNanmytgr O5WpivwTP4HBMxHpkM+UzsWKgjoV9eR3v+UwLtPL5wis0YK1YaaKv2XqH5Lhw6px J+RkffOXgqiZdRCU6oipYKjKWAR7CvrW0GTR+nXbPfWowv6EyLMEHmXVpRi5Py6z tJ5vXcn55VcKdtylVkA2CA8gUbKA79jAsNiJO+0PapJNKHRtSs8y3ER3alBGHAYZ /oZNbSGdWYi1bYcXEi1MojG2XZ6Rh07SOpmZh0YC4WxlRZx+qr6QQdyulWwhbU9p YFXVMggpDXWIvAsAhVevrcS4Cq4d85U= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org