$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: skq/3eAH9gN5MztXyLrF1SDsubdLdHkqoIhHKPIWyqo= Subject key identifier: 2B:D9:9D:86:39:F8:28:87:23:DE:EE:84:28:FC:CC:07:8A:C0:94:7B Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: 2C Signing time: Fri 17 May 2024 08:34:34 +0000 Manifest this update: Fri 17 May 2024 08:34:33 +0000 Manifest next update: Fri 24 May 2024 08:34:33 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: Xo5a5e3nHIDnsKG6c6UNn4P13npuMm/tDZ1v0oaoHaI=) 2: F4F785D0D09C11EE94431F80C4F9AE02.roa (hash: gAmtnMhOAhK0fAuYmhp1IcpgWCw5DClF8kvOob2UxoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: May 17 08:34:33 2024 GMT Not After : May 24 08:34:33 2024 GMT Subject: CN=6647169a-e6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:63:69:b8:06:fe:7e:65:b6:2d:6b:c7:5a:45: 64:55:e8:04:98:ca:7e:71:27:ba:fb:52:5d:d3:e9: a7:28:f5:7a:c9:dd:97:c6:20:42:4a:26:bf:77:3a: 65:c9:44:e4:68:f1:7e:45:68:81:df:34:9b:f0:30: 67:76:a3:54:7e:2f:a3:df:fb:dc:93:4a:6e:50:4b: 45:d1:b5:fd:a4:d2:c6:5a:33:63:3d:b5:82:4e:b0: e6:fc:ea:03:e8:a3:35:5a:d1:69:ad:b6:da:20:d5: d4:ed:48:6c:0d:a1:67:74:23:d9:1d:ea:24:de:4e: 10:44:27:cb:ed:c3:da:33:37:34:91:3b:bb:a1:bb: 17:30:7b:f8:93:6f:50:12:81:1b:1e:6c:0d:82:70: 77:ad:e4:9c:4b:62:42:6c:c7:72:a3:c4:33:91:be: 5c:31:8d:10:4c:3b:0c:18:2d:87:b5:be:52:2a:e3: fe:b7:38:76:86:a4:00:96:7e:f9:31:be:83:16:7e: bc:51:dd:16:cd:f2:84:72:b5:23:a3:dc:27:28:65: 80:1a:17:cd:86:b8:3e:1f:b0:ab:ff:1d:36:5b:43: 65:37:cf:c3:d3:4e:5c:7c:1a:0c:27:2f:4f:b6:fe: 53:1d:d5:09:79:24:79:0f:90:c3:e2:dc:63:7e:75: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D9:9D:86:39:F8:28:87:23:DE:EE:84:28:FC:CC:07:8A:C0:94:7B X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f6:f5:86:48:91:46:e5:19:91:f5:e6:5f:0d:0b:80:ef:82: 92:bb:33:8e:b8:49:e8:59:a4:3e:73:a9:2a:aa:26:32:ed:d0: 05:1b:50:23:a9:38:bf:68:40:56:c0:8f:38:35:1e:3e:57:2e: c4:d0:53:6b:57:ad:d5:97:ec:3e:c7:48:bc:09:e1:12:f7:96: ce:ce:44:b2:41:2b:88:c9:4e:e9:08:a6:47:7c:b3:1d:23:49: e4:39:f2:55:9c:83:b7:d6:48:5b:8e:f8:16:80:49:f8:ce:1b: 9f:ec:2e:57:ca:82:37:3b:88:92:e2:f5:d2:82:3a:f8:92:ad: 1a:11:a5:11:88:53:84:e4:0e:cc:cb:c0:ee:b4:55:34:ad:12: 06:7c:39:3a:13:5b:d0:35:61:af:cc:cd:ac:1d:de:74:b9:2d: 0e:36:90:ab:7d:42:c8:cf:ce:77:c0:27:10:62:06:e5:a4:b7: f1:73:bf:81:2f:73:c4:81:e2:1f:68:02:2b:07:12:68:ea:09: 23:3e:cb:b7:b5:e7:3d:04:0d:5e:7d:89:54:cb:d5:c1:ce:5a: 30:5c:84:30:d5:f1:c8:72:29:92:30:dd:27:ac:c1:9e:43:6a: bb:4c:c5:7d:31:f6:73:b5:fb:4f:83:81:7b:91:46:41:3e:aa: 11:d0:43:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OUI2RjExMC8GA1UEBRMoMTU4MzkzMzBBODFFRDg5OTIwNzNBMjM4MDRDOUY1OTA1 MzhGQjlEMjAeFw0yNDA1MTcwODM0MzNaFw0yNDA1MjQwODM0MzNaMBgxFjAUBgNV BAMTDTY2NDcxNjlhLWU2Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0Y2m4Bv5+ZbYta8daRWRV6ASYyn5xJ7r7Ul3T6aco9XrJ3ZfGIEJKJr93OmXJ RORo8X5FaIHfNJvwMGd2o1R+L6Pf+9yTSm5QS0XRtf2k0sZaM2M9tYJOsOb86gPo ozVa0Wmtttog1dTtSGwNoWd0I9kd6iTeThBEJ8vtw9ozNzSRO7uhuxcwe/iTb1AS gRsebA2CcHet5JxLYkJsx3KjxDORvlwxjRBMOwwYLYe1vlIq4/63OHaGpACWfvkx voMWfrxR3RbN8oRytSOj3CcoZYAaF82GuD4fsKv/HTZbQ2U3z8PTTlx8GgwnL0+2 /lMd1Ql5JHkPkMPi3GN+ddw/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK9mdhjn4 KIcj3u6EKPzMB4rAlHswHwYDVR0jBBgwFoAUFYOTMKge2Jkgc6I4BMn1kFOPudIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5QjZGLzJBRDVGNkQ4RDA5 QzExRUU4MEFCOEQ3RUM0RjlBRTAyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRllPVE1LZ2UySmtnYzZJNEJNbjFrRk9QdWRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 QjZGLzJBRDVGNkQ4RDA5QzExRUU4MEFCOEQ3RUM0RjlBRTAyL0ZZT1RNS2dlMkpr Z2M2STRCTW4xa0ZPUHVkSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAD29YZIkUblGZH15l8NC4DvgpK7M464SehZpD5zqSqqJjLt0AUbUCOp OL9oQFbAjzg1Hj5XLsTQU2tXrdWX7D7HSLwJ4RL3ls7ORLJBK4jJTukIpkd8sx0j SeQ58lWcg7fWSFuO+BaASfjOG5/sLlfKgjc7iJLi9dKCOviSrRoRpRGIU4TkDszL wO60VTStEgZ8OToTW9A1Ya/Mzawd3nS5LQ42kKt9QsjPznfAJxBiBuWkt/Fzv4Ev c8SB4h9oAisHEmjqCSM+y7e15z0EDV59iVTL1cHOWjBchDDV8chyKZIw3SeswZ5D artMxX0x9nO1+0+DgXuRRkE+qhHQQy0= -----END CERTIFICATE-----Generated at Fri May 17 10:59:10 2024 by rpki-client on console-ams.rpki-client.org