$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft File: FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json) Hash identifier: Gz21wJubu7St3kxX+sIQ36IyFSiehLLYajC1GIf0Mjw= Subject key identifier: B9:E3:A6:20:A3:B1:AF:99:7C:C2:63:6D:6C:FF:AA:F1:2C:33:7F:91 Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft Manifest number: 0119 Signing time: Sun 27 Apr 2025 03:43:48 +0000 Manifest this update: Sun 27 Apr 2025 03:43:48 +0000 Manifest next update: Sun 04 May 2025 03:43:47 +0000 Files and hashes: 1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: nd/cNOLO43AP5kNUWDAX4D1N5pwc//34zMeJzPfvozA=) 2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: sPgtFXkQiNpbnrX5GSASzjIh/8IU4jkwvbF5ffVha8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 03:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B, serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Validity Not Before: Apr 27 03:43:48 2025 GMT Not After : May 4 03:43:47 2025 GMT Subject: CN=680da7f4-e3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:6d:cb:72:71:3d:b5:4d:06:45:ff:6c:1a: 42:08:b0:01:ec:a6:b1:35:e2:48:e7:2e:bb:42:2c: 93:cc:dc:ab:62:2b:00:58:eb:f7:b0:f7:bd:8f:7d: 36:09:36:d6:02:6a:1e:9e:b7:7e:f0:fd:e9:66:22: 80:e9:3a:f6:e3:e4:06:7b:2c:9b:e0:ec:18:b4:bd: e3:b2:46:58:7c:1e:2c:08:54:ad:0f:d1:73:2c:a4: c3:2a:e5:c9:19:70:ae:bc:bb:ff:b5:05:13:64:dc: e7:46:93:1d:02:8c:0d:d9:25:4e:5e:6e:fb:94:a0: a5:91:a3:d9:9e:a3:84:0b:a1:54:c8:2a:2c:1b:58: 62:e5:d6:ce:2b:3b:9a:f5:8f:6d:63:bc:09:f4:09: eb:a9:f4:8c:fd:be:58:23:39:49:10:4e:6c:67:cf: a9:cc:c5:ff:36:b4:5c:ab:1f:2b:1c:e3:47:29:31: ec:1a:83:94:6d:d3:51:11:37:03:a9:cc:90:f2:5b: 1e:7d:72:f0:0f:0d:d7:9e:57:6b:64:88:b8:0e:a8: ee:8a:c6:2c:d7:1b:84:ec:d1:b6:5f:f2:f9:6c:63: ee:63:e3:3c:02:94:89:2f:87:9f:f9:00:99:28:95: 32:51:06:26:89:1d:fd:bc:80:11:c2:6a:27:43:48: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E3:A6:20:A3:B1:AF:99:7C:C2:63:6D:6C:FF:AA:F1:2C:33:7F:91 X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:69:94:01:5a:f2:1c:f6:d1:d8:2b:e6:6a:b4:ff:88:9a:57: 57:c4:3d:c1:d6:c4:83:fc:5c:38:6f:7c:3e:bf:a3:e2:eb:fc: 8e:a3:05:8f:2e:32:8f:e7:9a:77:7d:8d:bd:65:25:11:5e:bd: a5:67:fd:bc:cb:3e:fd:2e:23:78:92:bb:d0:d5:a4:0b:3f:e5: bf:d9:b2:62:52:d8:f2:73:46:70:3a:38:73:30:d1:2e:a0:55: 2d:3a:ad:46:1f:f9:77:dc:f4:05:b6:3b:9c:8b:8b:62:4e:0e: 72:df:3f:cd:5d:c5:cd:ef:8d:50:8e:1c:13:06:0f:d5:81:90: d1:9e:08:e0:d3:f1:44:d5:43:df:a6:30:f7:75:4a:b5:6c:60: ff:2a:be:7f:99:e7:e3:04:cd:25:20:b0:df:28:c3:3c:e0:02: b1:27:8b:2a:ef:1f:37:d7:a0:43:f6:0d:e2:3a:d4:5c:df:4a: 57:48:c9:74:9f:b5:67:d7:89:a8:08:a3:cc:18:b2:6f:5d:78: b2:e4:e1:34:05:92:7a:b5:da:1b:70:a2:2e:d0:6f:d3:28:73: b5:3d:52:7a:5c:af:11:84:43:10:13:7e:45:7f:4f:e7:31:1e: 79:cb:14:55:8a:ef:83:ac:bd:a7:c4:26:bf:69:0a:cf:7f:19: 1a:3a:9c:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxNUIxMTAvBgNVBAUTKDE1MzYxMzQ3QTEwODE0QTNFNjY4QjcyNjlGRTIwNzA3 QjE4RTc5NzMwHhcNMjUwNDI3MDM0MzQ4WhcNMjUwNTA0MDM0MzQ3WjAYMRYwFAYD VQQDEw02ODBkYTdmNC1lM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h5ty3JxPbVNBkX/bBpCCLAB7KaxNeJI5y67QiyTzNyrYisAWOv3sPe9j302 CTbWAmoenrd+8P3pZiKA6Tr24+QGeyyb4OwYtL3jskZYfB4sCFStD9FzLKTDKuXJ GXCuvLv/tQUTZNznRpMdAowN2SVOXm77lKClkaPZnqOEC6FUyCosG1hi5dbOKzua 9Y9tY7wJ9AnrqfSM/b5YIzlJEE5sZ8+pzMX/NrRcqx8rHONHKTHsGoOUbdNRETcD qcyQ8lsefXLwDw3XnldrZIi4DqjuisYs1xuE7NG2X/L5bGPuY+M8ApSJL4ef+QCZ KJUyUQYmiR39vIARwmonQ0g5LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnjpiCj sa+ZfMJjbWz/qvEsM3+RMB8GA1UdIwQYMBaAFBU2E0ehCBSj5mi3Jp/iBwexjnlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzE1Qi9FOTdERUY0MDc0 NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZLUG1hTGNtbi1JSEI3R09l WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzE1Qi9FOTdERUY0MDc0NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZL UG1hTGNtbi1JSEI3R09lWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRaZQBWvIc9tHYK+ZqtP+ImldXxD3B1sSD/Fw4b3w+v6Pi6/yOowWP LjKP55p3fY29ZSURXr2lZ/28yz79LiN4krvQ1aQLP+W/2bJiUtjyc0ZwOjhzMNEu oFUtOq1GH/l33PQFtjuci4tiTg5y3z/NXcXN741QjhwTBg/VgZDRngjg0/FE1UPf pjD3dUq1bGD/Kr5/mefjBM0lILDfKMM84AKxJ4sq7x8316BD9g3iOtRc30pXSMl0 n7Vn14moCKPMGLJvXXiy5OE0BZJ6tdobcKIu0G/TKHO1PVJ6XK8RhEMQE35Ff0/n MR55yxRViu+DrL2nxCa/aQrPfxkaOpzG -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:44 2025 by rpki-client