$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft File: FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json) Hash identifier: TOqQH0BBuNCZ9EkC6BxBvOdVGyEuDB0cJVIED5SOhH4= Subject key identifier: 32:57:E4:71:F4:B2:4D:AE:B2:16:B7:6B:DC:35:9E:09:0D:A1:1C:72 Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft Manifest number: 68 Signing time: Fri 17 May 2024 07:40:01 +0000 Manifest this update: Fri 17 May 2024 07:40:00 +0000 Manifest next update: Fri 24 May 2024 07:40:00 +0000 Files and hashes: 1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: 42MH9YNsIuETm6CGLHowPJJowCQ34Ssk9b2whHfUbhc=) 2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: OLewJUJr+U9U8qfvMJkh2R+kFpFEPwuOG/eViM+YX50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Validity Not Before: May 17 07:40:00 2024 GMT Not After : May 24 07:40:00 2024 GMT Subject: CN=664709d1-d83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:bb:49:ae:e7:c0:2b:56:8e:30:a1:66:3d: ca:d6:5a:10:80:06:09:1c:44:b3:42:e1:45:fb:fb: 8b:86:0f:db:22:74:3d:d9:76:76:82:6e:a5:17:65: ee:0d:46:7f:07:c2:6c:30:28:61:fd:e2:52:36:19: 11:24:34:4b:80:99:cb:6b:2a:63:63:cd:2d:83:8b: 47:9c:40:e7:b9:f8:65:1f:80:77:90:a0:7a:e9:a0: 5e:41:ed:55:5a:27:ca:58:9e:0a:d9:34:1c:c1:77: 54:79:67:49:85:01:02:b5:bd:36:02:35:8d:7e:d3: db:7d:6b:3c:bc:b5:4a:8e:8e:18:c7:50:ed:7d:bf: e0:17:e2:32:45:54:4c:29:27:81:26:99:b5:ec:47: 1c:ff:0b:5b:7e:f6:60:d2:16:35:26:e0:45:4b:58: 83:38:2f:d2:49:88:73:ef:38:81:28:3e:9b:3b:37: a1:13:cc:10:b6:04:2d:92:c5:54:1d:51:73:8f:d2: 8f:1b:a3:6e:d6:63:62:82:f8:fe:7c:3a:b2:6d:ce: 6f:ad:32:85:13:df:20:59:fb:dd:2d:39:7a:61:d9: 02:11:12:49:47:29:6b:eb:a6:de:13:73:2a:ef:68: e6:26:d5:fe:5b:99:26:1c:15:22:8d:9b:4f:3c:0a: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:57:E4:71:F4:B2:4D:AE:B2:16:B7:6B:DC:35:9E:09:0D:A1:1C:72 X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ee:f4:2f:8e:c8:24:d8:14:d5:21:32:cf:7d:30:ee:8e:4f: b3:bb:91:f2:6f:1b:8a:7a:85:7a:83:50:5b:29:36:7a:60:00: 11:b5:29:2a:28:0b:ea:58:3f:b3:71:bc:48:67:46:78:67:3b: 1a:d6:cf:a4:6c:99:97:a7:8b:38:4e:ae:21:2a:a7:63:63:71: 26:c2:ad:97:fe:79:55:a7:3d:2e:a7:e5:d9:2e:8a:b5:de:5b: ca:33:8a:00:58:f4:84:f8:fc:f0:12:c1:65:08:b4:ab:26:db: a7:2e:ba:2b:00:d6:20:80:50:91:40:ba:c0:ad:5e:30:ac:27: 07:df:39:41:5b:ea:b7:83:ea:03:b0:1b:36:f2:fa:e4:27:98: 17:7c:14:a5:28:41:23:cc:c7:6e:56:dc:6b:5b:4c:df:c3:ba: 8c:66:26:57:e6:8e:2d:b9:b1:6f:45:b8:1d:f9:f3:1a:41:64: 5c:af:d9:44:45:2f:a4:78:2f:d2:d8:4a:c4:21:13:6e:24:e3: 8d:2a:93:84:05:04:5c:ec:35:3b:93:34:a3:93:c4:15:0c:67: d3:8b:b7:f5:c7:6b:39:b7:4f:9b:4f:d6:3a:53:8a:97:6c:8e: 76:0e:36:6f:a4:3d:2c:f3:97:6d:0d:3a:92:a2:54:74:b8:0a: b7:8b:e2:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzE1QjExMC8GA1UEBRMoMTUzNjEzNDdBMTA4MTRBM0U2NjhCNzI2OUZFMjA3MDdC MThFNzk3MzAeFw0yNDA1MTcwNzQwMDBaFw0yNDA1MjQwNzQwMDBaMBgxFjAUBgNV BAMTDTY2NDcwOWQxLWQ4M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcw7tJrufAK1aOMKFmPcrWWhCABgkcRLNC4UX7+4uGD9sidD3ZdnaCbqUXZe4N Rn8HwmwwKGH94lI2GREkNEuAmctrKmNjzS2Di0ecQOe5+GUfgHeQoHrpoF5B7VVa J8pYngrZNBzBd1R5Z0mFAQK1vTYCNY1+09t9azy8tUqOjhjHUO19v+AX4jJFVEwp J4EmmbXsRxz/C1t+9mDSFjUm4EVLWIM4L9JJiHPvOIEoPps7N6ETzBC2BC2SxVQd UXOP0o8bo27WY2KC+P58OrJtzm+tMoUT3yBZ+90tOXph2QIREklHKWvrpt4Tcyrv aOYm1f5bmSYcFSKNm088CokNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMlfkcfSy Ta6yFrdr3DWeCQ2hHHIwHwYDVR0jBBgwFoAUFTYTR6EIFKPmaLcmn+IHB7GOeXMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDMTVCL0U5N0RFRjQwNzQ2 RDExRUU5RTYzM0MzN0M0RjlBRTAyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VY TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlRZVFI2RUlGS1BtYUxjbW4tSUhCN0dPZVhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD MTVCL0U5N0RFRjQwNzQ2RDExRUU5RTYzM0MzN0M0RjlBRTAyL0ZUWVRSNkVJRktQ bWFMY21uLUlIQjdHT2VYTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfu9C+OyCTYFNUhMs99MO6OT7O7kfJvG4p6hXqDUFspNnpgABG1KSoo C+pYP7NxvEhnRnhnOxrWz6RsmZenizhOriEqp2NjcSbCrZf+eVWnPS6n5dkuirXe W8ozigBY9IT4/PASwWUItKsm26cuuisA1iCAUJFAusCtXjCsJwffOUFb6reD6gOw Gzby+uQnmBd8FKUoQSPMx25W3GtbTN/DuoxmJlfmji25sW9FuB358xpBZFyv2URF L6R4L9LYSsQhE24k440qk4QFBFzsNTuTNKOTxBUMZ9OLt/XHazm3T5tP1jpTipds jnYONm+kPSzzl20NOpKiVHS4CreL4nk= -----END CERTIFICATE-----Generated at Fri May 17 08:13:48 2024 by rpki-client on console-fra.rpki-client.org