$ rpki-client -vvf rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft File: a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft (raw, json) Hash identifier: r7Pan2WS4YhjUJ5KitP+ntVfUzBl9wFEGNmQvdrHyok= Subject key identifier: 5A:1C:50:80:9B:52:D4:0F:06:DB:8A:E2:4F:9F:92:FB:04:22:08:2F Authority key identifier: 6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4 Certificate issuer: /CN=A9174ECB/serialNumber=6B7EE2891EBE1D3AF0A562C5A8466581B90459A4 Certificate serial: 1115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft Manifest number: 110C Signing time: Sat 18 May 2024 17:50:44 +0000 Manifest this update: Sat 18 May 2024 17:50:44 +0000 Manifest next update: Sat 25 May 2024 17:50:44 +0000 Files and hashes: 1: a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl (hash: h1mX9Lcqtw8+zQFj31k8sAA3rsTU7bUtpiia7XTugxg=) 2: 4CC318AC7FFF11EB8D47E82EC4F9AE02.roa (hash: cID8LesjTBPauhbbrKDmJKwZBoEPhQpYrF8g7uce3kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4373 (0x1115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174ECB/serialNumber=6B7EE2891EBE1D3AF0A562C5A8466581B90459A4 Validity Not Before: May 18 17:50:44 2024 GMT Not After : May 25 17:50:44 2024 GMT Subject: CN=6648ea74-c7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:ec:b3:3a:f5:c1:fb:26:28:81:1d:d4:d4: d9:71:74:f9:68:4a:1d:04:b2:73:e0:75:a4:5a:88: ba:a2:e4:1e:d7:52:e9:25:1d:9c:13:38:3b:50:ac: 49:e7:47:5e:93:aa:87:70:b6:71:21:27:b9:c9:b0: b7:f0:75:ae:46:0b:53:3a:5c:37:bb:85:23:0a:5c: 06:ae:9f:e1:a5:0b:fc:6a:af:27:9f:4b:f0:c5:94: 0c:16:11:74:e5:14:13:ec:0e:4d:24:32:9e:17:11: 6b:a0:58:a7:46:c1:dc:ee:50:71:f9:44:03:4c:27: 13:ac:a1:76:98:29:36:29:8e:c7:5f:b9:00:15:26: ea:fe:0b:e0:e2:6f:71:cb:c4:fa:7a:f7:33:d6:8f: 14:17:2f:d4:26:18:cc:b3:f0:48:9c:8f:8d:32:a6: 65:68:b1:01:9a:aa:33:74:71:74:e2:7a:7a:d8:38: ee:c4:9f:02:64:be:8a:55:05:8e:9d:cc:32:56:23: f8:4d:28:09:04:8d:c0:da:52:39:a5:20:bb:9a:71: fe:6b:77:00:94:25:20:16:bf:5d:4b:f4:f3:e1:05: e4:7c:bc:2b:d9:93:fb:51:c3:fa:8f:fb:e0:24:ca: 0d:46:e5:a9:c4:b5:08:eb:7d:23:bd:d3:fb:3e:92: 1a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1C:50:80:9B:52:D4:0F:06:DB:8A:E2:4F:9F:92:FB:04:22:08:2F X509v3 Authority Key Identifier: keyid:6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:81:13:07:f7:9b:35:76:60:61:8c:8a:ff:42:3a:5d:62:24: a4:f3:b9:f9:08:c8:86:a9:3b:cd:0b:eb:63:1a:71:f2:57:18: d2:6c:e1:0a:2e:cb:37:5b:1e:80:8a:10:6b:75:cb:77:18:fa: 13:2e:28:94:5b:1d:91:c0:51:2f:ab:93:80:92:20:1a:6a:1b: a1:66:22:aa:8a:4b:96:44:93:62:bb:d2:14:34:49:58:63:f0: 0f:d4:1b:45:14:fd:3d:a6:95:ce:18:e0:a9:df:95:e6:14:31: 1b:cb:b5:fd:ae:4c:b6:f6:98:89:a9:16:08:47:d5:af:86:f5: 10:d4:91:79:44:2c:e5:a1:d4:18:ab:9f:77:58:4f:fe:bd:16: 98:3b:56:e7:fe:b3:bf:4b:6d:b2:bb:01:ed:bb:27:36:d7:46: 56:0d:50:d9:96:b5:02:f4:84:c1:ec:4d:db:bb:f1:d9:08:0c: 32:01:2d:71:25:b0:35:95:0b:40:13:2a:63:42:d6:44:17:18: a4:c6:6d:8f:a0:98:67:d8:a0:4d:ba:82:8b:b6:f0:34:98:1a: 7e:46:53:11:32:9c:42:3e:bc:73:78:e0:5a:e2:85:bd:77:14: dd:86:e8:1e:bc:74:49:42:40:6c:32:75:18:27:b2:b1:9c:79: 49:43:4a:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQ0IxMTAvBgNVBAUTKDZCN0VFMjg5MUVCRTFEM0FGMEE1NjJDNUE4NDY2NTgx QjkwNDU5QTQwHhcNMjQwNTE4MTc1MDQ0WhcNMjQwNTI1MTc1MDQ0WjAYMRYwFAYD VQQDEw02NjQ4ZWE3NC1jN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Qjsszr1wfsmKIEd1NTZcXT5aEodBLJz4HWkWoi6ouQe11LpJR2cEzg7UKxJ 50dek6qHcLZxISe5ybC38HWuRgtTOlw3u4UjClwGrp/hpQv8aq8nn0vwxZQMFhF0 5RQT7A5NJDKeFxFroFinRsHc7lBx+UQDTCcTrKF2mCk2KY7HX7kAFSbq/gvg4m9x y8T6evcz1o8UFy/UJhjMs/BInI+NMqZlaLEBmqozdHF04np62DjuxJ8CZL6KVQWO ncwyViP4TSgJBI3A2lI5pSC7mnH+a3cAlCUgFr9dS/Tz4QXkfLwr2ZP7UcP6j/vg JMoNRuWpxLUI630jvdP7PpIa7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFocUICb UtQPBtuK4k+fkvsEIggvMB8GA1UdIwQYMBaAFGt+4okevh068KVixahGZYG5BFmk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDQi85NTQyQzhBMEVF NjMxMUU4ODQ2QjQ2NTVDNEY5QUUwMi9hMzdpaVI2LUhUcndwV0xGcUVabGdia0VX YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzN2lpUjYtSFRyd3BXTEZxRVpsZ2JrRVdhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVDQi85NTQyQzhBMEVFNjMxMUU4ODQ2QjQ2NTVDNEY5QUUwMi9hMzdpaVI2LUhU cndwV0xGcUVabGdia0VXYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhgRMH95s1dmBhjIr/QjpdYiSk87n5CMiGqTvNC+tjGnHyVxjSbOEK Lss3Wx6AihBrdct3GPoTLiiUWx2RwFEvq5OAkiAaahuhZiKqikuWRJNiu9IUNElY Y/AP1BtFFP09ppXOGOCp35XmFDEby7X9rky29piJqRYIR9WvhvUQ1JF5RCzlodQY q593WE/+vRaYO1bn/rO/S22yuwHtuyc210ZWDVDZlrUC9ITB7E3bu/HZCAwyAS1x JbA1lQtAEypjQtZEFxikxm2PoJhn2KBNuoKLtvA0mBp+RlMRMpxCPrxzeOBa4oW9 dxTdhugevHRJQkBsMnUYJ7KxnHlJQ0oQ -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org