$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft File: FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json) Hash identifier: nPzXsS/pk2+C2wFgV+Dh4yk6oDq3DEKQggWqwId5V+0= Subject key identifier: C4:B4:23:F2:9D:CC:C6:8B:3C:77:52:B0:9D:19:E1:9C:42:38:8E:4A Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft Manifest number: CA Signing time: Sat 23 Nov 2024 03:51:47 +0000 Manifest this update: Sat 23 Nov 2024 03:51:47 +0000 Manifest next update: Sat 30 Nov 2024 03:51:47 +0000 Files and hashes: 1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: oZZ0T3NNwydL57ilRveLLh7IOrWYRiVTeGS82aPDnW4=) 2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: sPgtFXkQiNpbnrX5GSASzjIh/8IU4jkwvbF5ffVha8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Validity Not Before: Nov 23 03:51:47 2024 GMT Not After : Nov 30 03:51:47 2024 GMT Subject: CN=67415153-f36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fb:7c:41:99:13:b3:7c:b0:84:48:42:2d:fc: 87:a0:9e:9e:78:65:4f:36:48:09:84:d1:2f:16:78: 2f:21:f7:44:3d:3d:9c:d5:cb:c5:2b:72:64:bc:6d: dd:8c:b6:75:cb:91:7f:18:c1:8d:67:7d:33:2c:99: 05:af:5d:43:4f:08:8f:82:bf:7b:d1:73:fa:47:77: 80:63:94:44:bc:de:a1:40:d1:c8:b6:d6:d7:b7:59: 5a:58:c3:ac:ce:d1:c9:67:c0:b7:84:31:3e:ac:5e: 1d:6f:4e:a0:7f:a2:75:22:cc:a2:ca:58:24:09:d2: 75:df:c4:40:33:d1:e6:5b:95:fc:8a:f3:af:16:eb: e0:58:81:dd:12:fb:e0:33:de:b3:33:2d:99:58:73: 56:6b:f8:0f:e4:05:df:ae:ea:3c:6c:35:93:13:ff: 26:d8:f6:a2:87:4a:ef:ab:91:61:89:c1:a2:f7:c8: 13:d4:a2:c9:cf:b9:ed:87:cd:f3:5c:5f:7f:cf:4d: f4:58:8b:4a:6d:a1:54:bd:a5:5f:4c:0c:23:cd:eb: b1:d5:ef:e2:51:8a:76:a3:6c:d9:2a:eb:9b:e7:7e: d8:92:92:bd:72:b8:24:b9:e0:83:0a:a9:af:b2:11: fb:85:e4:65:72:f5:f0:98:3b:f2:54:6d:f7:7b:d2: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B4:23:F2:9D:CC:C6:8B:3C:77:52:B0:9D:19:E1:9C:42:38:8E:4A X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:fd:11:54:e9:80:52:8b:e9:fd:22:b1:73:50:3e:d2:0a:47: 85:98:e7:a4:b0:f3:31:d4:b6:72:14:fa:3f:db:c9:66:9b:dd: 44:32:f8:9a:be:3b:34:1e:3e:0f:1d:d6:ca:8e:7b:7c:b0:db: dd:13:99:1d:07:86:fd:fc:22:b1:03:35:2a:37:b4:64:5d:d9: 5c:e5:f8:14:70:d5:eb:00:f6:25:4d:6d:f0:28:47:d5:a3:01: e5:8a:7e:c3:c6:ec:e0:ba:ee:db:9b:1a:3e:40:91:1a:7a:b8: 20:a5:12:4c:3f:10:f5:1e:91:57:7f:3e:31:06:82:35:69:f5: a3:de:3c:ef:d7:64:29:bb:ee:26:24:4d:00:2f:f8:45:11:95: c7:3b:cc:89:9c:8a:62:75:3f:f1:03:ba:ae:57:10:96:e1:f9: 5f:24:72:97:3e:63:b4:84:6f:fd:95:68:71:f6:90:0a:ee:05: 3a:45:4a:b1:a2:a9:77:60:d9:74:f5:e4:22:c5:f4:eb:a2:d3: f2:92:fc:8a:ea:fc:47:f6:06:ea:54:cf:49:81:19:4a:2a:d5: a8:bb:e7:d4:28:71:2b:c2:f5:f6:a7:f8:8f:dc:6b:70:cb:00: 15:f3:da:b3:74:c9:a9:fe:d7:15:b0:c4:90:c9:9a:9a:a5:04: d8:81:e9:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxNUIxMTAvBgNVBAUTKDE1MzYxMzQ3QTEwODE0QTNFNjY4QjcyNjlGRTIwNzA3 QjE4RTc5NzMwHhcNMjQxMTIzMDM1MTQ3WhcNMjQxMTMwMDM1MTQ3WjAYMRYwFAYD VQQDEw02NzQxNTE1My1mMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/t8QZkTs3ywhEhCLfyHoJ6eeGVPNkgJhNEvFngvIfdEPT2c1cvFK3JkvG3d jLZ1y5F/GMGNZ30zLJkFr11DTwiPgr970XP6R3eAY5REvN6hQNHIttbXt1laWMOs ztHJZ8C3hDE+rF4db06gf6J1IsyiylgkCdJ138RAM9HmW5X8ivOvFuvgWIHdEvvg M96zMy2ZWHNWa/gP5AXfruo8bDWTE/8m2Paih0rvq5FhicGi98gT1KLJz7nth83z XF9/z030WItKbaFUvaVfTAwjzeux1e/iUYp2o2zZKuub537YkpK9crgkueCDCqmv shH7heRlcvXwmDvyVG33e9KZGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS0I/Kd zMaLPHdSsJ0Z4ZxCOI5KMB8GA1UdIwQYMBaAFBU2E0ehCBSj5mi3Jp/iBwexjnlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzE1Qi9FOTdERUY0MDc0 NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZLUG1hTGNtbi1JSEI3R09l WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzE1Qi9FOTdERUY0MDc0NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZL UG1hTGNtbi1JSEI3R09lWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz/RFU6YBSi+n9IrFzUD7SCkeFmOeksPMx1LZyFPo/28lmm91EMvia vjs0Hj4PHdbKjnt8sNvdE5kdB4b9/CKxAzUqN7RkXdlc5fgUcNXrAPYlTW3wKEfV owHlin7Dxuzguu7bmxo+QJEaerggpRJMPxD1HpFXfz4xBoI1afWj3jzv12Qpu+4m JE0AL/hFEZXHO8yJnIpidT/xA7quVxCW4flfJHKXPmO0hG/9lWhx9pAK7gU6RUqx oql3YNl09eQixfTrotPykvyK6vxH9gbqVM9JgRlKKtWou+fUKHErwvX2p/iP3Gtw ywAV89qzdMmp/tcVsMSQyZqapQTYgenD -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org