$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: EG58CXXMr9qBDUCDazpz/J4K+q12mkfri8KpfxFN3IE= Subject key identifier: 1A:44:32:21:FE:61:A8:0A:D9:3A:62:2E:B5:A4:5D:F7:5C:7D:FE:90 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 06A4 Signing time: Sat 18 May 2024 23:13:49 +0000 Manifest this update: Sat 18 May 2024 23:13:48 +0000 Manifest next update: Sat 25 May 2024 23:13:48 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: IiXPRoXqnXwu8jD/Xq3TX6yhvQZWk+RHNhiK6Xhxo54=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 2529KOa4AsX4GdTazjRzD7ANwnsJ00BXW/G5AGkeKRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: May 18 23:13:48 2024 GMT Not After : May 25 23:13:48 2024 GMT Subject: CN=6649362d-6825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:98:78:01:c6:72:b2:5a:a0:df:98:11:66: 73:db:ca:b5:aa:5d:3b:40:97:d0:d0:48:a8:fb:11: a9:72:e0:dd:35:ff:4a:23:3d:2c:af:1d:3d:56:77: 44:16:21:87:ac:3c:dc:af:7d:3b:5d:f8:69:5c:d7: fa:3f:e8:fa:82:49:ec:b3:a4:69:3a:57:a3:2e:30: 30:47:87:6f:ae:c2:e1:e7:59:7f:7f:71:70:80:e3: c6:5d:2a:e0:cf:56:d1:a2:70:6e:04:30:89:a3:4e: 83:9e:30:ff:c8:05:0c:d7:99:8e:57:9e:79:12:19: 16:5a:7e:d1:dc:12:08:e3:5c:25:e3:60:62:00:bb: e1:bc:2b:6d:7a:25:69:f9:59:ce:d5:6c:3b:1e:de: 37:09:cd:d4:65:81:20:0a:0a:a1:05:bc:6b:11:18: d6:7d:7e:43:f2:c2:f8:70:43:35:1a:34:9c:1f:2a: 86:87:3a:e6:cb:59:fe:cc:de:99:c3:85:1f:2b:d9: fa:6d:7f:ee:4a:97:e7:37:f8:28:ae:19:55:a3:18: 82:07:73:c2:fb:ba:55:36:89:47:86:a0:fb:18:16: 7b:3d:fe:27:01:dc:99:ac:f7:90:85:1f:0c:ff:a6: 40:76:a5:d1:1e:a9:75:fe:bb:ca:91:42:a9:44:4d: e8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:44:32:21:FE:61:A8:0A:D9:3A:62:2E:B5:A4:5D:F7:5C:7D:FE:90 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:db:34:b1:59:e6:0f:0f:57:19:3e:2c:4b:4c:3d:6f:7a:73: af:53:07:c2:bb:b2:75:04:ca:70:55:d1:f6:11:7a:df:03:d5: d3:75:01:1a:0f:d4:63:f7:97:2b:93:b8:dc:90:24:67:26:7e: cf:62:66:81:ea:94:2f:0a:8a:d9:4e:db:80:d3:8d:67:2b:d5: 00:ab:dc:e5:0e:8d:13:bb:3f:a4:19:67:2e:e9:12:19:d5:05: cb:82:dc:4b:0c:50:49:f4:3d:f0:73:de:7c:78:a0:a6:27:f7: e5:6c:57:5d:09:57:70:ff:d9:35:fd:4a:e6:25:0e:09:b5:09: 02:8f:41:ef:b9:3b:30:aa:b2:22:25:55:5b:9b:20:f8:d3:71: 89:4b:51:8f:cf:9d:dc:c5:6a:fd:5c:dc:66:b2:8f:78:af:18: d9:f0:5d:0c:ce:3a:ba:00:5e:a9:f4:a3:c2:ca:02:c6:ad:76: 0f:65:0d:b8:51:5b:ce:e3:03:3e:97:23:f3:3b:20:de:2b:09: fc:02:2f:f8:43:c2:45:60:75:48:9d:09:23:76:92:9d:0a:9d: 0e:f6:20:0f:1d:26:ba:3c:90:5b:8b:05:42:78:b5:51:87:36: 40:14:82:64:de:da:e8:65:ce:10:d1:2c:8f:ae:14:1f:63:5a: 39:0b:f5:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjQwNTE4MjMxMzQ4WhcNMjQwNTI1MjMxMzQ4WjAYMRYwFAYD VQQDEw02NjQ5MzYyZC02ODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZKYeAHGcrJaoN+YEWZz28q1ql07QJfQ0Eio+xGpcuDdNf9KIz0srx09VndE FiGHrDzcr307XfhpXNf6P+j6gknss6RpOlejLjAwR4dvrsLh51l/f3FwgOPGXSrg z1bRonBuBDCJo06DnjD/yAUM15mOV555EhkWWn7R3BII41wl42BiALvhvCtteiVp +VnO1Ww7Ht43Cc3UZYEgCgqhBbxrERjWfX5D8sL4cEM1GjScHyqGhzrmy1n+zN6Z w4UfK9n6bX/uSpfnN/gorhlVoxiCB3PC+7pVNolHhqD7GBZ7Pf4nAdyZrPeQhR8M /6ZAdqXRHql1/rvKkUKpRE3oKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpEMiH+ YagK2TpiLrWkXfdcff6QMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH2zSxWeYPD1cZPixLTD1venOvUwfCu7J1BMpwVdH2EXrfA9XTdQEa D9Rj95crk7jckCRnJn7PYmaB6pQvCorZTtuA041nK9UAq9zlDo0Tuz+kGWcu6RIZ 1QXLgtxLDFBJ9D3wc958eKCmJ/flbFddCVdw/9k1/UrmJQ4JtQkCj0HvuTswqrIi JVVbmyD403GJS1GPz53cxWr9XNxmso94rxjZ8F0Mzjq6AF6p9KPCygLGrXYPZQ24 UVvO4wM+lyPzOyDeKwn8Ai/4Q8JFYHVInQkjdpKdCp0O9iAPHSa6PJBbiwVCeLVR hzZAFIJk3troZc4Q0SyPrhQfY1o5C/WA -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org