$ rpki-client -vvf rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft File: a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft (raw, json) Hash identifier: XjC41aDIOH9rWRzUEm2OdvoB462oLmXsVT5hoBT/7nY= Subject key identifier: 35:6B:AF:E9:42:44:90:09:1E:CE:AE:4A:02:21:30:AC:1B:73:60:F4 Authority key identifier: 6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4 Certificate issuer: /CN=A9174ECB/serialNumber=6B7EE2891EBE1D3AF0A562C5A8466581B90459A4 Certificate serial: 110A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft Manifest number: 1101 Signing time: Fri 26 Apr 2024 17:51:16 +0000 Manifest this update: Fri 26 Apr 2024 17:51:15 +0000 Manifest next update: Fri 03 May 2024 17:51:15 +0000 Files and hashes: 1: a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl (hash: jLUQ/L1l/ctrPJf0Yf2Vvf7QihJUDQ4aaPa9WcM2dhU=) 2: 4CC318AC7FFF11EB8D47E82EC4F9AE02.roa (hash: cID8LesjTBPauhbbrKDmJKwZBoEPhQpYrF8g7uce3kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 17:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4362 (0x110a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174ECB/serialNumber=6B7EE2891EBE1D3AF0A562C5A8466581B90459A4 Validity Not Before: Apr 26 17:51:15 2024 GMT Not After : May 3 17:51:15 2024 GMT Subject: CN=662be994-462e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:6a:a4:f8:c5:50:e0:13:46:73:a4:cc:35: 22:19:ff:b3:72:3f:ce:f6:ca:8c:0a:f3:55:c0:a2: dd:f4:d3:3b:9e:3b:c0:f9:cc:e1:f0:7f:7e:8b:a0: 77:b2:4a:64:df:b6:88:b9:9b:8c:6a:95:0a:57:8d: 8b:78:8b:7b:cb:d0:31:96:68:6a:38:a2:66:2b:33: 6e:9b:e3:4c:cc:f7:6b:cf:b9:69:c2:49:b6:7e:02: f7:54:14:0a:ea:da:72:a7:34:f7:a1:82:d4:f2:5d: 6e:6f:50:89:44:54:58:63:fc:b5:d9:88:bf:b0:02: 6a:75:68:8a:61:84:96:09:0c:c3:04:80:51:23:60: 99:1b:ed:f2:e7:2d:e7:0d:3d:04:88:a0:2a:3f:ef: d9:df:81:53:9d:3c:3b:3c:78:45:0e:47:16:ce:18: bd:57:6a:73:0c:69:bc:17:16:7e:91:50:d5:19:64: bc:cd:2d:4b:8d:8b:ef:5f:46:26:b3:54:59:3f:86: ea:24:55:0d:07:dd:e2:3c:59:23:af:88:d9:ec:00: b0:6a:0b:0a:63:06:b6:54:f7:83:cd:99:ec:bd:41: 63:a4:75:83:38:9d:15:f1:b7:76:d6:ca:b5:c7:b3: 28:64:e0:8e:69:72:b4:28:2e:99:af:d1:d3:d2:d4: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:AF:E9:42:44:90:09:1E:CE:AE:4A:02:21:30:AC:1B:73:60:F4 X509v3 Authority Key Identifier: keyid:6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7f:62:d5:64:50:08:ab:78:f8:c0:b5:be:db:d0:b5:ae:c1: 37:01:c5:3b:f5:03:8e:74:a7:f4:5e:28:b0:cf:ca:5a:02:f6: e0:20:fc:a6:3c:b9:77:d3:67:75:89:b1:61:7a:86:50:74:72: 7c:f2:7e:9e:e9:b7:4f:8e:02:55:d1:99:d5:d9:ec:31:22:ab: 50:d5:7b:6b:f4:8c:3a:72:ca:7e:38:45:6e:45:f8:be:b6:20: 78:93:15:ee:d0:85:64:d5:18:6e:1c:27:f6:10:1a:22:b4:21: 46:94:1c:e1:d2:f5:d9:3b:b3:1f:c3:11:8a:6a:09:38:d7:8c: 96:78:04:70:50:d7:a0:80:ea:66:25:84:96:91:d9:c1:a1:23: 4a:52:05:33:c5:21:95:24:33:9d:e7:71:86:c9:ff:15:74:ef: 1d:b9:55:39:56:b1:fc:01:29:84:0b:bc:a8:30:3f:97:c6:77: e9:b7:cb:35:24:48:f0:e1:2a:8b:f9:a2:6b:f4:49:67:b2:00: d1:31:38:ff:56:c7:75:d8:03:22:bc:c8:c7:7c:f6:99:3d:8c: ff:82:db:5f:c5:1b:47:a1:d7:5b:88:4e:0f:28:4f:c4:6a:aa: c8:e9:d3:cd:d7:5e:c9:80:c8:64:ac:e6:55:e6:ab:86:20:80: 4d:c5:a9:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQ0IxMTAvBgNVBAUTKDZCN0VFMjg5MUVCRTFEM0FGMEE1NjJDNUE4NDY2NTgx QjkwNDU5QTQwHhcNMjQwNDI2MTc1MTE1WhcNMjQwNTAzMTc1MTE1WjAYMRYwFAYD VQQDEw02NjJiZTk5NC00NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvhqpPjFUOATRnOkzDUiGf+zcj/O9sqMCvNVwKLd9NM7njvA+czh8H9+i6B3 skpk37aIuZuMapUKV42LeIt7y9AxlmhqOKJmKzNum+NMzPdrz7lpwkm2fgL3VBQK 6tpypzT3oYLU8l1ub1CJRFRYY/y12Yi/sAJqdWiKYYSWCQzDBIBRI2CZG+3y5y3n DT0EiKAqP+/Z34FTnTw7PHhFDkcWzhi9V2pzDGm8FxZ+kVDVGWS8zS1LjYvvX0Ym s1RZP4bqJFUNB93iPFkjr4jZ7ACwagsKYwa2VPeDzZnsvUFjpHWDOJ0V8bd21sq1 x7MoZOCOaXK0KC6Zr9HT0tRQfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVrr+lC RJAJHs6uSgIhMKwbc2D0MB8GA1UdIwQYMBaAFGt+4okevh068KVixahGZYG5BFmk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDQi85NTQyQzhBMEVF NjMxMUU4ODQ2QjQ2NTVDNEY5QUUwMi9hMzdpaVI2LUhUcndwV0xGcUVabGdia0VX YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzN2lpUjYtSFRyd3BXTEZxRVpsZ2JrRVdhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVDQi85NTQyQzhBMEVFNjMxMUU4ODQ2QjQ2NTVDNEY5QUUwMi9hMzdpaVI2LUhU cndwV0xGcUVabGdia0VXYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcf2LVZFAIq3j4wLW+29C1rsE3AcU79QOOdKf0Xiiwz8paAvbgIPym PLl302d1ibFheoZQdHJ88n6e6bdPjgJV0ZnV2ewxIqtQ1Xtr9Iw6csp+OEVuRfi+ tiB4kxXu0IVk1RhuHCf2EBoitCFGlBzh0vXZO7MfwxGKagk414yWeARwUNeggOpm JYSWkdnBoSNKUgUzxSGVJDOd53GGyf8VdO8duVU5VrH8ASmEC7yoMD+Xxnfpt8s1 JEjw4SqL+aJr9ElnsgDRMTj/Vsd12AMivMjHfPaZPYz/gttfxRtHoddbiE4PKE/E aqrI6dPN117JgMhkrOZV5quGIIBNxamW -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:11 2024 by rpki-client on console-ams.rpki-client.org