$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft File: FTXKeQmuekjAuzjAgnrtdm4w-Co.mft (raw, json) Hash identifier: 7jwPYi9+KKKsqyf5Sp8RRSMYPiKWYd4l9zpknvlxkCY= Subject key identifier: 82:62:79:3C:16:00:DC:2F:B6:06:82:1E:15:B8:A8:AA:20:B5:F4:57 Authority key identifier: 15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A Certificate issuer: /CN=A913854D/serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft Manifest number: 18 Signing time: Wed 05 Feb 2025 06:22:46 +0000 Manifest this update: Wed 05 Feb 2025 06:22:45 +0000 Manifest next update: Wed 12 Feb 2025 06:22:45 +0000 Files and hashes: 1: FTXKeQmuekjAuzjAgnrtdm4w-Co.crl (hash: 0bH6niU5bYHnqAv+TmxbKSOtJbOyl25bAAztCsZbliM=) 2: A90D181AC36C11EFAF838D35C4F9AE02.roa (hash: qIXjoMWJqdmpLdtv27bH3BBsHVxShzn3gjUvaayskJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913854D Validity Not Before: Feb 5 06:22:45 2025 GMT Not After : Feb 12 06:22:45 2025 GMT Subject: CN=67a303b6-8563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:bc:a4:0e:1b:a0:91:41:3e:90:72:e0:7f: 52:98:66:ee:9d:f1:71:c7:58:e0:ab:26:28:e8:ab: e1:71:a8:68:94:df:db:db:9b:11:3d:36:38:2b:1d: 48:f8:02:af:e4:e1:db:88:da:16:3e:4b:a0:19:66: 55:fe:28:80:58:9d:cd:5f:1a:9c:ec:37:04:5f:0d: 0c:eb:0d:7d:07:24:34:bb:20:de:66:da:38:27:4e: c5:23:13:ca:ea:e3:dd:3d:33:c3:1e:b3:81:27:b9: 88:b4:da:c3:9d:28:67:59:d2:a0:c5:3b:2d:04:3b: 78:75:ba:4c:8b:a5:e7:be:36:ae:27:54:84:27:6f: 90:09:41:3a:c8:64:6e:66:d8:a4:0f:75:2e:b8:96: 82:cd:c0:2b:90:78:60:8c:e2:43:a6:d7:2b:3c:a8: b5:2f:d3:ab:d3:e7:2d:d2:af:ec:2f:eb:e7:63:fd: be:aa:0a:6a:85:6c:73:94:cb:21:bb:e8:72:70:af: b0:4c:54:1e:3e:0c:7e:be:2b:46:4b:91:82:c2:88: 94:95:da:1d:9b:7e:8a:5e:10:10:a9:f6:de:c1:7f: f7:e0:00:bd:5c:79:50:b8:e4:61:70:85:ad:14:20: 2b:60:53:bd:6d:76:c9:ee:cd:ba:d8:10:18:67:fd: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:62:79:3C:16:00:DC:2F:B6:06:82:1E:15:B8:A8:AA:20:B5:F4:57 X509v3 Authority Key Identifier: keyid:15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:5c:ac:a0:2f:52:47:17:94:f5:2e:fd:ae:2b:d3:a4:09:a0: f9:6d:49:eb:12:b5:36:ea:89:fa:eb:45:ee:6c:c8:d6:c9:11: 6e:d2:35:79:e6:e8:f1:ff:f9:f3:e4:6d:a2:ca:de:35:b9:cc: e8:fe:3e:db:15:d4:1f:fc:5a:7f:c9:94:be:f4:66:13:b6:ed: 93:da:42:60:f6:04:2f:8c:78:d5:a7:e7:75:cf:92:67:cc:70: 4d:d1:2c:13:56:35:ab:d4:df:12:32:7e:cd:36:9d:2e:fc:7e: 60:11:0d:e6:60:db:58:aa:5c:ec:1e:9d:ea:c0:0c:d1:35:16: c1:7d:eb:dc:ac:6b:f5:c9:7e:27:6e:4a:a2:55:9d:21:6f:99: 3b:ba:9f:d0:c8:66:5e:0f:59:aa:bf:5f:6c:78:9f:d7:9b:8e: 39:9d:e0:29:2a:1b:68:e9:ff:29:cc:59:e1:74:07:b7:75:a8: bf:e5:f4:32:b2:90:e3:fd:69:d6:e5:4f:9f:b9:96:e1:b6:f8: d4:b6:78:f7:80:9b:37:bc:43:39:1a:35:c0:3a:6f:1a:a2:07: b0:66:06:08:ac:67:05:35:49:31:51:bc:54:fa:06:c6:89:d7: 52:d8:95:8e:b9:9c:de:07:d6:50:93:c5:7e:e0:62:f7:53:bb: c4:f9:7c:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODU0RDExMC8GA1UEBRMoMTUzNUNBNzkwOUFFN0E0OEMwQkIzOEMwODI3QUVENzY2 RTMwRjgyQTAeFw0yNTAyMDUwNjIyNDVaFw0yNTAyMTIwNjIyNDVaMBgxFjAUBgNV BAMTDTY3YTMwM2I2LTg1NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5S7ykDhugkUE+kHLgf1KYZu6d8XHHWOCrJijoq+FxqGiU39vbmxE9NjgrHUj4 Aq/k4duI2hY+S6AZZlX+KIBYnc1fGpzsNwRfDQzrDX0HJDS7IN5m2jgnTsUjE8rq 4909M8Mes4EnuYi02sOdKGdZ0qDFOy0EO3h1ukyLpee+Nq4nVIQnb5AJQTrIZG5m 2KQPdS64loLNwCuQeGCM4kOm1ys8qLUv06vT5y3Sr+wv6+dj/b6qCmqFbHOUyyG7 6HJwr7BMVB4+DH6+K0ZLkYLCiJSV2h2bfopeEBCp9t7Bf/fgAL1ceVC45GFwha0U ICtgU71tdsnuzbrYEBhn/b+DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgmJ5PBYA 3C+2BoIeFbioqiC19FcwHwYDVR0jBBgwFoAUFTXKeQmuekjAuzjAgnrtdm4w+Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NTREL0RGMzg5OERFQzM2 QjExRUZCQ0JDNUIxNkM0RjlBRTAyL0ZUWEtlUW11ZWtqQXV6akFnbnJ0ZG00dy1D by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRlRYS2VRbXVla2pBdXpqQWducnRkbTR3LUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NTREL0RGMzg5OERFQzM2QjExRUZCQ0JDNUIxNkM0RjlBRTAyL0ZUWEtlUW11ZWtq QXV6akFnbnJ0ZG00dy1Dby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMFcrKAvUkcXlPUu/a4r06QJoPltSesStTbqifrrRe5syNbJEW7SNXnm 6PH/+fPkbaLK3jW5zOj+PtsV1B/8Wn/JlL70ZhO27ZPaQmD2BC+MeNWn53XPkmfM cE3RLBNWNavU3xIyfs02nS78fmARDeZg21iqXOwenerADNE1FsF969ysa/XJfidu SqJVnSFvmTu6n9DIZl4PWaq/X2x4n9ebjjmd4CkqG2jp/ynMWeF0B7d1qL/l9DKy kOP9adblT5+5luG2+NS2ePeAmze8QzkaNcA6bxqiB7BmBgisZwU1STFRvFT6BsaJ 11LYlY65nN4H1lCTxX7gYvdTu8T5fF4= -----END CERTIFICATE-----Generated at Wed Feb 5 20:02:29 2025 by rpki-client