$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft File: FTXKeQmuekjAuzjAgnrtdm4w-Co.mft (raw, json) Hash identifier: KkgZ9DNmb+JIgw5q6QxhrmAsGXg6Q7qM4ffYWEZCAcQ= Subject key identifier: 8F:55:5B:E1:4A:35:41:40:66:7C:92:93:C1:C7:F6:21:21:16:D5:7B Authority key identifier: 15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A Certificate issuer: /CN=A913854D/serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft Manifest number: 40 Signing time: Fri 25 Apr 2025 06:27:24 +0000 Manifest this update: Fri 25 Apr 2025 06:27:24 +0000 Manifest next update: Fri 02 May 2025 06:27:24 +0000 Files and hashes: 1: FTXKeQmuekjAuzjAgnrtdm4w-Co.crl (hash: Af3GebK+rQDA3MzCOZVgsVeDTSa28Ek+UntE4WFAOEk=) 2: A90D181AC36C11EFAF838D35C4F9AE02.roa (hash: qIXjoMWJqdmpLdtv27bH3BBsHVxShzn3gjUvaayskJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913854D, serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A Validity Not Before: Apr 25 06:27:24 2025 GMT Not After : May 2 06:27:24 2025 GMT Subject: CN=680b2b4c-137a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:31:15:45:92:21:0f:0f:37:f2:9b:ef:6c: 1f:e4:71:48:fa:cd:5b:29:a0:e0:8d:48:9b:45:f1: 25:51:64:5f:87:8a:6c:a8:e4:14:b5:84:21:7d:6c: 16:9f:b1:3d:81:2e:2c:31:5c:f9:7b:a1:63:d8:ed: 8c:a8:e1:ac:9b:b4:60:5e:d4:30:76:ad:4e:b8:39: aa:90:04:4e:d8:53:f4:00:6f:d2:66:82:f2:57:e0: 93:26:f7:c9:15:44:68:36:6b:70:57:e0:d8:ea:54: 4a:7e:b2:4f:28:9f:86:b5:48:45:98:8f:c5:56:1b: 91:24:ed:e5:5e:83:cc:01:85:e4:1e:12:91:ae:ff: 30:21:6f:ba:28:de:3e:de:86:15:ee:7c:23:9b:01: bc:8a:78:4e:68:f6:57:c8:74:01:6e:6e:f9:41:89: 97:d9:58:89:db:01:44:d8:c5:68:a1:19:fe:5e:75: 2b:a0:72:85:a4:40:af:fe:8f:4a:08:cb:01:0a:06: 74:4f:3a:9c:be:d4:2a:2b:cb:56:63:76:bb:1e:b2: de:6a:b2:c0:f8:2e:48:09:54:86:7f:40:de:17:4d: 68:05:38:40:ac:b8:55:36:3d:28:b4:a3:3d:b1:25: ae:e2:fe:83:e0:cb:54:16:f0:b5:a3:f4:af:89:bc: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:55:5B:E1:4A:35:41:40:66:7C:92:93:C1:C7:F6:21:21:16:D5:7B X509v3 Authority Key Identifier: keyid:15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:49:ac:de:da:10:20:63:5d:54:76:99:93:0a:a2:5c:ba:22: d6:5a:8e:7a:2f:2b:ec:7d:5b:fb:ce:d8:aa:5f:d4:ff:cb:23: 94:c8:e8:76:47:be:68:2b:c8:3f:71:4f:13:b3:15:a7:75:5e: 06:69:d6:0a:0e:8a:9e:3c:9f:97:e6:96:d9:ef:01:da:79:e4: c1:27:1f:bc:7c:31:00:10:e0:99:6a:12:85:c0:a5:c3:11:0c: 8a:91:75:5d:d7:69:76:f5:90:e7:0b:61:1f:b4:50:c1:29:22: ec:df:f6:44:fb:48:a4:23:f2:7b:ea:e2:04:c2:5f:b4:7f:79: c2:f9:c1:c4:15:17:78:12:c5:d0:c9:cd:8d:1d:f5:1b:d6:8e: 32:fb:19:88:01:f6:16:04:be:6d:04:86:67:b2:ad:d6:a7:26: a2:7e:35:f8:a9:87:2b:74:01:24:67:b2:4d:8c:d0:12:a4:ca: bf:67:a4:b8:b5:ce:01:20:a0:8f:49:66:9a:97:65:70:68:49: e8:82:23:6d:c3:94:47:83:a6:9a:15:8b:00:64:df:7d:57:36: fa:81:10:5a:0b:35:4c:77:10:15:c6:1e:36:8a:ca:c9:4d:cf: 3a:c0:c3:79:8d:79:13:14:21:8c:8f:16:9c:3d:d5:44:56:ed: 5e:6d:ba:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODU0RDExMC8GA1UEBRMoMTUzNUNBNzkwOUFFN0E0OEMwQkIzOEMwODI3QUVENzY2 RTMwRjgyQTAeFw0yNTA0MjUwNjI3MjRaFw0yNTA1MDIwNjI3MjRaMBgxFjAUBgNV BAMTDTY4MGIyYjRjLTEzN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKSjEVRZIhDw838pvvbB/kcUj6zVspoOCNSJtF8SVRZF+Himyo5BS1hCF9bBaf sT2BLiwxXPl7oWPY7Yyo4aybtGBe1DB2rU64OaqQBE7YU/QAb9JmgvJX4JMm98kV RGg2a3BX4NjqVEp+sk8on4a1SEWYj8VWG5Ek7eVeg8wBheQeEpGu/zAhb7oo3j7e hhXufCObAbyKeE5o9lfIdAFubvlBiZfZWInbAUTYxWihGf5edSugcoWkQK/+j0oI ywEKBnRPOpy+1Cory1Zjdrsest5qssD4LkgJVIZ/QN4XTWgFOECsuFU2PSi0oz2x Ja7i/oPgy1QW8LWj9K+JvBz7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj1Vb4Uo1 QUBmfJKTwcf2ISEW1XswHwYDVR0jBBgwFoAUFTXKeQmuekjAuzjAgnrtdm4w+Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NTREL0RGMzg5OERFQzM2 QjExRUZCQ0JDNUIxNkM0RjlBRTAyL0ZUWEtlUW11ZWtqQXV6akFnbnJ0ZG00dy1D by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRlRYS2VRbXVla2pBdXpqQWducnRkbTR3LUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NTREL0RGMzg5OERFQzM2QjExRUZCQ0JDNUIxNkM0RjlBRTAyL0ZUWEtlUW11ZWtq QXV6akFnbnJ0ZG00dy1Dby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZJrN7aECBjXVR2mZMKoly6ItZajnovK+x9W/vO2Kpf1P/LI5TI6HZH vmgryD9xTxOzFad1XgZp1goOip48n5fmltnvAdp55MEnH7x8MQAQ4JlqEoXApcMR DIqRdV3XaXb1kOcLYR+0UMEpIuzf9kT7SKQj8nvq4gTCX7R/ecL5wcQVF3gSxdDJ zY0d9RvWjjL7GYgB9hYEvm0EhmeyrdanJqJ+Nfiphyt0ASRnsk2M0BKkyr9npLi1 zgEgoI9JZpqXZXBoSeiCI23DlEeDppoViwBk331XNvqBEFoLNUx3EBXGHjaKyslN zzrAw3mNeRMUIYyPFpw91URW7V5tumw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:47 2025 by rpki-client