$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: 5Lc70R+Q+ciFTeXpm4gO6KcCbqj7mv49iR8HsMMCmAQ= Subject key identifier: D2:4B:9F:AB:BF:3A:D6:39:0B:B1:3F:C8:B2:3B:D1:D0:59:8E:0D:35 Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 112A Signing time: Fri 31 May 2024 20:13:30 +0000 Manifest this update: Fri 31 May 2024 20:13:30 +0000 Manifest next update: Fri 07 Jun 2024 20:13:30 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: 5uGwksA0O+kGFMDC4PFRfrUHpnGPHC23N2OJnTZAKRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2886 (0xb46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: May 31 20:13:30 2024 GMT Not After : Jun 7 20:13:30 2024 GMT Subject: CN=665a2f6a-4611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:13:25:05:4a:2b:66:4c:f7:50:48:5a:64: 6b:4c:0f:62:40:21:f1:08:b9:7c:d2:0c:f9:63:bb: cd:cc:65:8b:2f:3d:5b:9b:ae:85:69:28:f3:07:9e: 94:5a:55:83:98:40:9f:06:25:91:4d:44:38:13:9b: 53:5f:39:ea:b2:90:8d:35:29:6d:9f:20:12:07:76: f5:33:53:58:dd:19:7e:6f:0e:ec:01:c0:19:88:35: 26:08:6d:92:d0:bf:52:07:24:4a:99:80:e7:14:29: 80:5f:25:7f:70:f8:71:4e:15:f9:b6:be:95:26:2c: 79:30:d6:70:4b:b1:7c:08:85:5c:9b:85:d8:d1:5d: d1:3d:2d:d5:9b:c3:3b:71:0d:87:e4:6c:6b:08:c8: 5d:bf:c2:65:1e:f6:5f:f7:62:43:a7:2c:f8:3a:07: 5b:4b:11:9d:5a:97:94:ae:9c:66:97:9b:57:5d:4c: 1a:d1:c9:ed:8d:2b:1d:d4:90:82:9f:bb:14:04:11: e8:13:f8:87:d7:8f:2e:a0:62:2f:e3:06:33:b3:a5: 6d:f9:7c:d6:8e:cc:79:14:d0:0c:9e:df:2b:38:1f: 96:d9:1b:fd:40:2e:97:a3:0b:c5:4e:56:1b:c8:57: 07:b7:ed:32:a6:2d:e3:00:22:65:f3:52:33:9d:5e: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:9F:AB:BF:3A:D6:39:0B:B1:3F:C8:B2:3B:D1:D0:59:8E:0D:35 X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c2:fe:6e:19:a1:5a:6e:3f:8d:74:2f:b2:ed:64:62:82:a7: 81:9b:0a:77:48:ef:21:aa:d3:ab:d5:d1:4f:55:21:d8:4f:59: e8:72:d2:92:ab:58:f5:32:fa:b8:1e:03:75:97:be:9f:69:50: b7:ae:86:35:08:66:a0:f8:f0:4d:84:41:7c:de:2d:9d:f2:5f: 12:27:df:ea:5f:0b:04:aa:23:a3:7c:96:c6:8e:f8:11:b8:a4: 9d:60:cf:f1:14:aa:78:06:27:0a:7f:06:8b:80:38:eb:7d:81: 6e:bb:d1:d9:81:2d:16:0a:47:56:81:c0:7e:fb:33:2a:f7:78: 3d:41:3f:1b:84:f6:4c:c8:96:2b:a9:3f:2b:7f:16:7e:31:92: a1:c9:69:50:8b:0f:72:fe:11:7f:83:ce:c6:5a:89:92:eb:bc: b5:11:5a:3c:86:e3:b9:ef:2b:3a:03:27:61:2c:98:c6:a5:7a: d9:19:46:c8:69:f6:07:f3:b0:87:1c:8d:ba:5d:64:dc:17:30: 7d:41:61:b1:8a:b3:95:91:0f:c2:00:cb:9f:28:75:3d:5d:0f: 7d:af:17:87:66:e8:f7:7e:27:3b:0c:87:e5:89:e6:82:4f:b1: cd:19:64:65:cd:09:fe:07:62:83:a5:34:b0:08:0f:c5:b0:13: 97:98:08:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjQwNTMxMjAxMzMwWhcNMjQwNjA3MjAxMzMwWjAYMRYwFAYD VQQDEw02NjVhMmY2YS00NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTwTJQVKK2ZM91BIWmRrTA9iQCHxCLl80gz5Y7vNzGWLLz1bm66FaSjzB56U WlWDmECfBiWRTUQ4E5tTXznqspCNNSltnyASB3b1M1NY3Rl+bw7sAcAZiDUmCG2S 0L9SByRKmYDnFCmAXyV/cPhxThX5tr6VJix5MNZwS7F8CIVcm4XY0V3RPS3Vm8M7 cQ2H5GxrCMhdv8JlHvZf92JDpyz4OgdbSxGdWpeUrpxml5tXXUwa0cntjSsd1JCC n7sUBBHoE/iH148uoGIv4wYzs6Vt+XzWjsx5FNAMnt8rOB+W2Rv9QC6XowvFTlYb yFcHt+0ypi3jACJl81IznV6PFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJLn6u/ OtY5C7E/yLI70dBZjg01MB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAawv5uGaFabj+NdC+y7WRigqeBmwp3SO8hqtOr1dFPVSHYT1noctKS q1j1Mvq4HgN1l76faVC3roY1CGag+PBNhEF83i2d8l8SJ9/qXwsEqiOjfJbGjvgR uKSdYM/xFKp4BicKfwaLgDjrfYFuu9HZgS0WCkdWgcB++zMq93g9QT8bhPZMyJYr qT8rfxZ+MZKhyWlQiw9y/hF/g87GWomS67y1EVo8huO57ys6AydhLJjGpXrZGUbI afYH87CHHI26XWTcFzB9QWGxirOVkQ/CAMufKHU9XQ99rxeHZuj3fic7DIflieaC T7HNGWRlzQn+B2KDpTSwCA/FsBOXmAjE -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:27 2024 by rpki-client on console-ams.rpki-client.org