$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: V/uiTh7Agl4sdnQNwq5xSqP8d1OuSjEJFPYU8ammxVg= Subject key identifier: 52:0D:83:87:03:51:C2:DD:34:50:60:EC:FF:5B:D7:6E:1E:FB:41:05 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: D3 Signing time: Sat 05 Apr 2025 04:57:38 +0000 Manifest this update: Sat 05 Apr 2025 04:57:37 +0000 Manifest next update: Sat 12 Apr 2025 04:57:37 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: 33JfAP+5XALrDWR3D0m0oN69CipkoYvRwRca3tR3q5A=) 2: 30CC4814FE4D11EFBFE66B1AC4F9AE02.roa (hash: CsZn/2/QnSvPMN1U3HaNIbfp6BBtY5cFDgdleZuzI7Q=) 3: 318E4414FE4D11EFBFE66B1AC4F9AE02.roa (hash: bnz/Gz2cIiz69/78S45wyomzGwSQuid2xoDm6Wpn25U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F Validity Not Before: Apr 5 04:57:37 2025 GMT Not After : Apr 12 04:57:37 2025 GMT Subject: CN=67f0b842-1799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:cb:9d:94:95:a7:9c:fb:de:64:8a:85:d0: 02:0a:b3:31:da:e3:7b:c8:4c:d4:08:3d:7d:8e:2a: 18:16:ed:72:8b:7c:82:23:1b:52:ab:29:b0:0c:9c: f8:1c:a3:9a:f2:82:3a:81:df:af:44:88:04:11:e7: 0c:c8:82:e7:96:12:ca:db:ad:a2:3a:f5:e8:3d:de: 8a:8b:15:7c:a3:b3:ea:e5:b2:77:86:9e:6b:c5:c8: 5e:af:aa:70:da:db:fa:c9:6b:f7:e3:4b:2a:5b:62: c7:94:36:ed:d9:91:27:88:c2:15:3e:cc:df:12:93: a2:b4:b5:1a:eb:72:7c:54:df:ef:bc:c6:26:b5:8f: 55:64:56:da:c9:d4:ca:c5:fc:a9:bc:ab:d9:dd:34: f6:1c:8e:7b:4b:3c:aa:b8:1a:42:77:4f:6f:20:8b: c1:f8:1e:ff:6e:35:43:b0:45:d3:ff:4f:2e:18:d9: 24:22:88:a0:c8:7a:65:9b:c5:3d:9c:5a:9f:da:35: 90:a6:a9:2c:0e:50:53:43:e8:6c:46:61:67:fc:61: 05:34:f2:30:3b:40:0a:a6:e2:32:39:f8:e7:58:78: ff:54:36:50:cc:82:85:63:36:ba:c3:ab:83:3b:08: ac:06:a5:ae:a1:fc:75:b2:24:fc:ef:7a:af:72:49: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0D:83:87:03:51:C2:DD:34:50:60:EC:FF:5B:D7:6E:1E:FB:41:05 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:82:65:5b:a4:14:15:3d:62:cf:3c:3a:c3:e9:c9:51:9e:3e: ec:41:51:f6:69:05:d0:cf:dc:ae:56:6e:e7:af:e1:66:34:ee: cf:dd:98:5f:8b:f6:15:54:65:89:3d:49:f5:b9:a0:1e:fb:0e: f4:97:81:16:d5:2b:5a:b3:a5:24:72:69:98:53:78:87:f5:02: e0:75:45:0b:90:fe:af:5b:8b:90:ed:f2:c1:ad:87:eb:6d:55: 5c:da:15:6c:38:8d:e1:cb:9c:74:44:59:35:5a:ef:3b:3b:1b: b2:b8:2d:bf:34:d7:d0:c2:d8:a7:3f:c0:5d:96:eb:9a:ae:f7: 8f:ce:24:fb:04:53:bb:64:f8:f7:f2:68:ce:ee:28:76:36:c9: 55:4c:90:8d:b0:61:ef:ad:f4:e6:90:22:23:7c:4c:ae:80:ed: 6e:0f:03:74:eb:98:da:40:0f:c6:69:20:ea:89:75:91:87:aa: ff:e0:1c:df:bc:3f:38:37:49:e6:41:2a:87:4a:6c:98:9b:91: ed:8f:74:a6:26:63:fc:2d:b2:ea:ea:2e:2d:75:61:7a:9f:d0: 0c:db:5c:f6:ec:3b:fc:f3:6e:e4:3e:d3:5e:d1:ad:d7:aa:97: f0:50:db:19:56:50:37:02:5e:4c:fd:a0:45:8f:9d:52:6e:13: 98:70:17:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUwNDA1MDQ1NzM3WhcNMjUwNDEyMDQ1NzM3WjAYMRYwFAYD VQQDEw02N2YwYjg0Mi0xNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuijLnZSVp5z73mSKhdACCrMx2uN7yEzUCD19jioYFu1yi3yCIxtSqymwDJz4 HKOa8oI6gd+vRIgEEecMyILnlhLK262iOvXoPd6KixV8o7Pq5bJ3hp5rxcher6pw 2tv6yWv340sqW2LHlDbt2ZEniMIVPszfEpOitLUa63J8VN/vvMYmtY9VZFbaydTK xfypvKvZ3TT2HI57SzyquBpCd09vIIvB+B7/bjVDsEXT/08uGNkkIoigyHplm8U9 nFqf2jWQpqksDlBTQ+hsRmFn/GEFNPIwO0AKpuIyOfjnWHj/VDZQzIKFYza6w6uD OwisBqWuofx1siT873qvcknl1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFINg4cD UcLdNFBg7P9b124e+0EFMB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJK a2djNkk0Qk1uMWtGT1B1ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASgmVbpBQVPWLPPDrD6clRnj7sQVH2aQXQz9yuVm7nr+FmNO7P3Zhf i/YVVGWJPUn1uaAe+w70l4EW1Stas6UkcmmYU3iH9QLgdUULkP6vW4uQ7fLBrYfr bVVc2hVsOI3hy5x0RFk1Wu87OxuyuC2/NNfQwtinP8BdluuarvePziT7BFO7ZPj3 8mjO7ih2NslVTJCNsGHvrfTmkCIjfEyugO1uDwN065jaQA/GaSDqiXWRh6r/4Bzf vD84N0nmQSqHSmyYm5Htj3SmJmP8LbLq6i4tdWF6n9AM21z27Dv8827kPtNe0a3X qpfwUNsZVlA3Al5M/aBFj51SbhOYcBdw -----END CERTIFICATE-----Generated at Sun Apr 6 16:35:46 2025 by rpki-client