$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft File: 37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json) Hash identifier: xvpQ2QmA05EY+gRqwMQSOv6SXa0zP8XC0sCyXFi014U= Subject key identifier: 73:DB:DB:E6:E7:A9:3B:F3:FB:2C:0D:C1:87:C4:7D:A1:80:3B:FC:D1 Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 Certificate issuer: /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Certificate serial: 0B84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft Manifest number: 0B76 Signing time: Sat 04 May 2024 19:41:29 +0000 Manifest this update: Sat 04 May 2024 19:41:28 +0000 Manifest next update: Sat 11 May 2024 19:41:28 +0000 Files and hashes: 1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: Fo+pmcBWXIawAk6DzvnlItMSb9m7Dx5FbNVk3ysSF6M=) 2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: 2Q2m69MIqbOm4ZKwAXBJ91ePoE/SjtZtPrWzWiqeH+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2948 (0xb84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8 Validity Not Before: May 4 19:41:28 2024 GMT Not After : May 11 19:41:28 2024 GMT Subject: CN=66368f69-395d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0e:0c:b1:8e:04:93:d0:9c:79:ed:79:aa:86: d8:8c:c5:46:45:3f:b4:ce:06:a3:af:30:17:6b:44: c9:ad:51:d4:a5:4c:22:2c:b7:20:6e:78:55:7b:a7: ed:6e:bc:20:d8:61:c9:c3:f6:0f:18:c5:31:05:a4: 17:17:52:d4:aa:7b:90:13:1e:ac:ac:b0:3f:e8:01: 80:7d:90:36:8d:bf:98:d7:d6:d0:92:c6:1a:ec:0d: 48:c9:d1:68:2e:e0:84:92:b7:34:c8:f6:1c:e6:31: 46:24:79:cb:30:21:ec:7a:7f:1c:3b:5d:ae:72:31: b4:90:0f:dd:4a:15:10:c8:38:60:47:90:ec:f9:a5: d8:f4:b7:f1:d7:ac:3d:41:df:c6:cf:cd:25:44:af: 0e:e9:78:25:62:69:85:af:b6:d3:40:64:14:7b:a6: 4f:57:23:e4:6d:63:54:fa:81:ad:44:76:81:c7:e5: 72:85:ab:f4:bd:e2:d9:7f:c8:c3:d8:6f:b2:bc:d3: 77:b4:16:3d:f1:76:e8:4e:4d:d8:8d:e8:a0:b3:ed: c5:7e:37:cb:b6:b0:2b:88:d8:7d:fa:c0:bf:12:4a: da:b1:1d:3a:37:50:09:89:86:eb:3d:ff:c6:46:74: 80:38:79:0d:3e:a5:ec:34:39:65:06:18:a2:6a:30: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:DB:E6:E7:A9:3B:F3:FB:2C:0D:C1:87:C4:7D:A1:80:3B:FC:D1 X509v3 Authority Key Identifier: keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4b:62:a7:96:d0:4a:a9:1f:a3:51:e8:d6:c3:d0:43:68:54: d0:89:62:9e:66:f8:3b:f8:af:0b:57:45:bb:2a:5f:39:19:05: 7c:b0:a0:08:2c:fe:f8:f4:cb:28:7e:4f:69:c4:db:a2:85:48: 7e:53:11:75:28:28:33:bb:fa:13:a1:91:19:ce:7e:df:78:7c: dc:b5:3a:f0:2c:e7:87:41:fe:a5:d4:ea:49:b7:3c:3b:a2:92: 26:e1:4b:75:bb:51:78:52:de:ce:b0:5c:ea:db:33:7c:06:5b: c9:80:0b:d7:c1:1c:f9:d3:fd:fe:10:82:fa:1c:5e:29:3a:ef: 79:2a:54:41:dc:64:56:e0:a6:bb:7a:8a:6e:96:db:a4:36:9b: 52:2f:05:e4:62:2d:12:4e:1d:4e:36:9f:7c:62:3e:85:75:ff: ab:86:f0:f4:10:46:5a:be:27:db:b4:cb:31:c4:14:97:9a:4d: bd:be:27:6e:ac:ab:ba:59:06:29:3e:f1:df:17:3f:b5:85:9d: 48:16:d0:6f:7d:7a:f2:d8:26:20:09:1c:a6:f4:f8:56:de:3e: ca:1d:1e:0a:c9:71:b8:9f:80:2f:7b:f1:de:5f:19:57:12:26: 1a:d4:f7:ba:e9:9e:47:8f:87:0b:67:ee:e9:5c:b2:9f:7e:d2: 18:66:6c:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx NjlDQUU2RjgwHhcNMjQwNTA0MTk0MTI4WhcNMjQwNTExMTk0MTI4WjAYMRYwFAYD VQQDEw02NjM2OGY2OS0zOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g4MsY4Ek9Ccee15qobYjMVGRT+0zgajrzAXa0TJrVHUpUwiLLcgbnhVe6ft brwg2GHJw/YPGMUxBaQXF1LUqnuQEx6srLA/6AGAfZA2jb+Y19bQksYa7A1IydFo LuCEkrc0yPYc5jFGJHnLMCHsen8cO12ucjG0kA/dShUQyDhgR5Ds+aXY9Lfx16w9 Qd/Gz80lRK8O6XglYmmFr7bTQGQUe6ZPVyPkbWNU+oGtRHaBx+Vyhav0veLZf8jD 2G+yvNN3tBY98XboTk3Yjeigs+3FfjfLtrAriNh9+sC/EkrasR06N1AJiYbrPf/G RnSAOHkNPqXsNDllBhiiajBRBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPb2+bn qTvz+ywNwYfEfaGAO/zRMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4 NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1 dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyRi8xQ0Y5ODcyNjA4NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhz TEViTkJPY2NXZmtXbks1dmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/S2KnltBKqR+jUejWw9BDaFTQiWKeZvg7+K8LV0W7Kl85GQV8sKAI LP749Msofk9pxNuihUh+UxF1KCgzu/oToZEZzn7feHzctTrwLOeHQf6l1OpJtzw7 opIm4Ut1u1F4Ut7OsFzq2zN8BlvJgAvXwRz50/3+EIL6HF4pOu95KlRB3GRW4Ka7 eopultukNptSLwXkYi0STh1ONp98Yj6Fdf+rhvD0EEZavifbtMsxxBSXmk29vidu rKu6WQYpPvHfFz+1hZ1IFtBvfXry2CYgCRym9PhW3j7KHR4KyXG4n4Ave/HeXxlX EiYa1Pe66Z5Hj4cLZ+7pXLKfftIYZmyt -----END CERTIFICATE-----Generated at Sat May 4 21:19:29 2024 by rpki-client on console-ams.rpki-client.org