$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: CpZePlRB28aSj88WPNk/p35lIVLQVD1q2TykkCY4dT8= Subject key identifier: DA:A5:EA:EF:33:50:59:37:EA:92:0F:8D:67:73:38:36:43:E3:F8:70 Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0BEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0BDF Signing time: Fri 22 Nov 2024 18:31:21 +0000 Manifest this update: Fri 22 Nov 2024 18:31:20 +0000 Manifest next update: Fri 29 Nov 2024 18:31:20 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: Ofnow68arB7jxGZkl6S1Zbe01F+0bsJBjIhcjoa+APg=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: SVlu02hkSNzBlCDk2yMt2xQVwlZY+Mck+6jTuLXWYgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3054 (0xbee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: Nov 22 18:31:20 2024 GMT Not After : Nov 29 18:31:20 2024 GMT Subject: CN=6740cdf8-ada8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8f:f4:9a:61:a5:89:26:4f:30:d5:01:ab:1f: 19:08:e3:f0:8d:f0:2f:fb:70:c2:1c:79:97:4a:0b: 73:a7:a0:bd:fc:53:d1:a1:ec:de:7f:8a:2a:43:46: 6f:a3:78:83:21:d2:64:8b:8b:88:8c:ea:82:04:6d: c3:24:60:25:a7:1a:4d:22:59:12:6d:c4:3b:8f:78: c4:f7:fb:90:1e:3d:91:c4:02:e6:39:e6:a4:c0:e2: 4d:7b:bb:48:ba:42:db:c4:3f:bd:6f:c7:15:d4:7b: f3:b4:d8:3d:b0:72:07:08:c0:b0:b3:50:15:e1:dd: 71:c7:6d:24:d7:56:30:69:78:65:bb:8f:36:c1:f2: 95:03:23:55:82:bd:eb:30:8e:5c:50:21:f3:71:82: 0f:d6:51:da:2e:6f:94:d7:12:bc:9c:75:0d:35:21: f4:26:28:e4:37:6a:2f:8c:f5:c9:b6:79:01:04:6c: 89:dc:58:61:d6:b3:eb:33:a9:d2:5b:41:0d:03:f1: 80:59:b3:e1:4d:c1:82:3a:6f:9b:71:ca:cb:f3:8a: 17:14:7b:02:ff:a9:bb:9d:46:b7:c8:85:f8:3a:d7: e9:ed:46:1d:3a:17:41:24:b3:5f:e4:ae:98:e6:f6: 17:6c:1b:6b:de:c0:6e:e8:79:17:52:2b:d9:43:c4: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A5:EA:EF:33:50:59:37:EA:92:0F:8D:67:73:38:36:43:E3:F8:70 X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4d:5c:4c:d5:26:b3:b7:63:a9:73:1d:2e:01:49:f5:e6:12: cc:e3:bc:37:1e:6e:8a:4f:10:68:88:d7:29:32:7b:88:4d:6a: 5b:f0:37:27:a2:7a:fe:4a:ce:0b:78:28:db:a4:c2:66:a5:26: 35:92:be:7f:9e:d7:a5:70:03:b7:a1:d5:b3:2d:5f:7c:27:0a: a9:2b:d8:e7:d8:5e:e8:02:86:cd:cd:67:15:be:ea:d5:12:e2: 2f:c8:76:64:83:e6:09:2a:0e:04:46:fa:d3:5b:52:c2:e8:b3: 8f:ec:ae:e1:df:91:78:25:20:4b:f1:74:29:29:8b:4d:76:48: 7a:b7:28:4c:08:84:f8:56:69:77:f1:13:c3:50:75:70:06:d3: ee:47:2e:4b:d7:78:80:1f:a1:61:5c:e7:47:f7:01:71:cd:80: ee:8c:c9:87:43:62:80:fa:ea:f3:9b:3e:b4:50:36:b4:c6:94: 58:a8:89:fd:38:8c:83:30:9f:da:0d:9e:17:ec:f7:a7:97:ef: 39:97:e0:8d:a7:ab:3d:d1:70:69:cd:b3:20:e9:71:99:ae:35: 23:12:ee:5a:b6:19:df:00:0a:33:0a:bc:e3:e1:a7:20:da:f6: 59:4a:6c:8e:95:8a:1a:93:82:98:f7:9c:59:8d:fe:ed:14:d2: f2:2c:4f:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjQxMTIyMTgzMTIwWhcNMjQxMTI5MTgzMTIwWjAYMRYwFAYD VQQDEw02NzQwY2RmOC1hZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5o/0mmGliSZPMNUBqx8ZCOPwjfAv+3DCHHmXSgtzp6C9/FPRoezef4oqQ0Zv o3iDIdJki4uIjOqCBG3DJGAlpxpNIlkSbcQ7j3jE9/uQHj2RxALmOeakwOJNe7tI ukLbxD+9b8cV1HvztNg9sHIHCMCws1AV4d1xx20k11YwaXhlu482wfKVAyNVgr3r MI5cUCHzcYIP1lHaLm+U1xK8nHUNNSH0JijkN2ovjPXJtnkBBGyJ3Fhh1rPrM6nS W0ENA/GAWbPhTcGCOm+bccrL84oXFHsC/6m7nUa3yIX4Otfp7UYdOhdBJLNf5K6Y 5vYXbBtr3sBu6HkXUivZQ8SnCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNql6u8z UFk36pIPjWdzODZD4/hwMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqTVxM1Sazt2Opcx0uAUn15hLM47w3Hm6KTxBoiNcpMnuITWpb8Dcn onr+Ss4LeCjbpMJmpSY1kr5/ntelcAO3odWzLV98JwqpK9jn2F7oAobNzWcVvurV EuIvyHZkg+YJKg4ERvrTW1LC6LOP7K7h35F4JSBL8XQpKYtNdkh6tyhMCIT4Vml3 8RPDUHVwBtPuRy5L13iAH6FhXOdH9wFxzYDujMmHQ2KA+urzmz60UDa0xpRYqIn9 OIyDMJ/aDZ4X7Penl+85l+CNp6s90XBpzbMg6XGZrjUjEu5athnfAAozCrzj4acg 2vZZSmyOlYoak4KY95xZjf7tFNLyLE8w -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org