$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: Ba4zxPxaWK3K1Uv4afjQAX71qvFpDRvUCB+UAQI//rY= Subject key identifier: 1D:51:22:66:CB:C2:4E:1D:D5:36:EF:1C:F7:71:F3:E9:23:29:B4:0C Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: 2B Signing time: Fri 17 May 2024 08:36:28 +0000 Manifest this update: Fri 17 May 2024 08:36:28 +0000 Manifest next update: Fri 24 May 2024 08:36:28 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: lV9vjAkcU7FlICETkPRCCvQInqYpQIKCnaBWgIk3FRo=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: BgGoHCl2iTsuBLT+ayqXCo0W6SSb3rjCMeP23JW82+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: May 17 08:36:28 2024 GMT Not After : May 24 08:36:28 2024 GMT Subject: CN=6647170c-6bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:2d:e5:59:35:27:48:50:f9:21:99:b6:72: 3c:62:94:02:0e:25:ca:ac:2d:96:d7:bc:8a:08:a4: a8:fe:01:f9:af:b6:c9:96:5c:8e:b1:63:0c:0f:7c: a1:fc:18:56:bb:0e:a0:c5:31:83:0a:85:89:a8:62: 54:cf:1c:00:7b:fb:d1:8a:84:a6:df:3d:26:02:83: 89:a5:64:bc:3f:9a:bc:c1:98:11:b0:f0:e2:c0:53: 60:43:6b:89:a9:a9:1c:15:18:38:16:16:17:23:23: d9:6a:61:71:7f:1d:f2:00:de:32:4c:aa:f1:91:24: b3:d2:f5:3b:42:7a:90:55:f3:ba:7b:9a:22:34:05: 53:e2:03:e9:cc:50:ca:21:7c:b7:56:66:69:88:df: 42:e6:82:49:28:77:54:3a:c0:2e:9a:be:34:a8:65: ef:8b:74:de:05:9e:f5:71:88:ed:0a:49:b7:1c:e6: 00:13:97:2a:39:ca:3d:a5:7b:cc:4d:cc:5b:a2:68: 19:e3:e1:03:f7:b4:c1:35:8c:c1:ea:11:e2:3a:de: fa:09:32:29:65:e4:84:ae:7a:6b:cb:97:3b:6d:72: 1c:8c:9d:05:ef:c6:48:aa:46:6e:bf:e6:9c:d2:57: 6a:fa:4d:9b:f1:37:4c:36:1a:62:f0:36:95:18:79: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:51:22:66:CB:C2:4E:1D:D5:36:EF:1C:F7:71:F3:E9:23:29:B4:0C X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e5:49:54:9e:99:48:24:d4:bb:4f:1b:5d:d4:03:1f:a3:f6: 24:2a:cf:f2:f8:94:ca:9c:6e:85:93:2d:42:79:7d:1e:e1:14: 79:b1:3e:89:7c:43:ef:c0:d0:f6:db:01:78:22:3f:f2:35:27: a8:f5:ce:90:c3:8f:8b:7a:72:0f:9b:ec:95:b9:ec:15:cf:f4: d8:e5:f5:f1:50:aa:1b:c7:18:54:8f:df:27:06:10:d9:fc:af: 8b:b4:c1:84:34:af:39:99:6c:b0:82:52:5b:f0:5a:c8:e2:d2: 17:ef:0b:52:86:3b:da:70:c0:e3:b8:57:02:50:1a:01:54:ef: 4c:65:c3:79:78:3a:d0:92:b5:a7:86:3e:4a:1a:4b:52:be:4a: 53:2a:6e:6b:8b:e2:53:5d:f2:e8:6c:14:9b:9e:c3:b1:27:73: eb:d4:59:24:96:d7:de:0e:30:41:5d:df:5d:e7:e9:ef:9a:87: 67:14:0b:f6:51:53:3d:59:47:af:7e:04:bc:4d:9d:f3:83:65: c3:3f:8e:3d:7c:73:50:26:47:f8:78:d0:f5:84:f5:13:26:60: b5:c6:f2:5e:33:23:26:d3:22:a5:f9:cd:f9:cc:f2:80:fe:19: 8a:84:c9:12:5d:dd:05:ad:83:e4:d1:f1:9a:6a:72:cf:4b:03: 1a:b6:dc:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTUzQzExMC8GA1UEBRMoN0VEQ0U3MTkyNThCRURGOTBBQTg2QzlBRUIwOENERDMx RUVGNTc3QTAeFw0yNDA1MTcwODM2MjhaFw0yNDA1MjQwODM2MjhaMBgxFjAUBgNV BAMTDTY2NDcxNzBjLTZiZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbJi3lWTUnSFD5IZm2cjxilAIOJcqsLZbXvIoIpKj+AfmvtsmWXI6xYwwPfKH8 GFa7DqDFMYMKhYmoYlTPHAB7+9GKhKbfPSYCg4mlZLw/mrzBmBGw8OLAU2BDa4mp qRwVGDgWFhcjI9lqYXF/HfIA3jJMqvGRJLPS9TtCepBV87p7miI0BVPiA+nMUMoh fLdWZmmI30Lmgkkod1Q6wC6avjSoZe+LdN4FnvVxiO0KSbcc5gATlyo5yj2le8xN zFuiaBnj4QP3tME1jMHqEeI63voJMill5ISuemvLlzttchyMnQXvxkiqRm6/5pzS V2r6TZvxN0w2GmLwNpUYeRILAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHVEiZsvC Th3VNu8c93Hz6SMptAwwHwYDVR0jBBgwFoAUftznGSWL7fkKqGya6wjN0x7vV3ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFNTNDLzRCRDBFNUY4RDM3 RDExRUVCQTA1QkQxNkM0RjlBRTAyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZnR6bkdTV0w3ZmtLcUd5YTZ3ak4weDd2VjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF NTNDLzRCRDBFNUY4RDM3RDExRUVCQTA1QkQxNkM0RjlBRTAyL2Z0em5HU1dMN2Zr S3FHeWE2d2pOMHg3dlYzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFvlSVSemUgk1LtPG13UAx+j9iQqz/L4lMqcboWTLUJ5fR7hFHmxPol8 Q+/A0PbbAXgiP/I1J6j1zpDDj4t6cg+b7JW57BXP9Njl9fFQqhvHGFSP3ycGENn8 r4u0wYQ0rzmZbLCCUlvwWsji0hfvC1KGO9pwwOO4VwJQGgFU70xlw3l4OtCStaeG PkoaS1K+SlMqbmuL4lNd8uhsFJuew7Enc+vUWSSW194OMEFd313n6e+ah2cUC/ZR Uz1ZR69+BLxNnfODZcM/jj18c1AmR/h40PWE9RMmYLXG8l4zIybTIqX5zfnM8oD+ GYqEyRJd3QWtg+TR8Zpqcs9LAxq23Hc= -----END CERTIFICATE-----Generated at Fri May 17 10:10:48 2024 by rpki-client on console-fra.rpki-client.org