$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: rkb0+uFF/SqjP7CJPCiFjXeHic0X3J9l7CdNohb8Zy0= Subject key identifier: E1:9A:7B:A2:44:3B:7E:8C:E2:F5:E1:4F:56:43:74:C9:A1:11:37:31 Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 11E5 Signing time: Fri 22 Nov 2024 18:35:47 +0000 Manifest this update: Fri 22 Nov 2024 18:35:46 +0000 Manifest next update: Fri 29 Nov 2024 18:35:46 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: C9s+cto5pP32XG/vpFsALxKoKMToUGP5ua8lMjuvngw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Nov 22 18:35:46 2024 GMT Not After : Nov 29 18:35:46 2024 GMT Subject: CN=6740cf03-c7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:f6:15:00:96:db:6b:a7:24:99:50:d3:b8: 31:cf:30:65:3b:7c:46:e7:a6:eb:7c:dd:8a:57:24: d1:42:4e:67:33:4a:83:be:2f:f4:95:04:c4:57:90: 02:1d:c3:6d:ff:55:e7:5b:3b:10:4f:d5:65:68:4c: 18:1e:f6:7d:47:6d:04:a2:cb:e8:95:80:bf:08:24: 8d:4c:1d:16:7c:e7:ec:51:db:81:2a:0c:b0:49:49: 0d:35:29:48:20:f7:d5:2f:d7:19:43:c2:12:57:9b: 4b:2d:c1:57:38:4f:f5:ec:f5:50:9b:42:58:ad:f2: 1f:2f:21:c5:cd:0d:7f:15:09:b2:ea:67:82:da:28: 40:a3:cb:90:01:9d:06:05:83:a1:75:76:08:b9:16: d6:67:01:24:10:36:69:a6:84:50:93:0d:7e:4d:48: 21:e8:28:0c:c4:f1:62:35:87:04:29:7e:be:22:87: fc:22:ab:db:ea:fb:e4:24:e2:e6:b3:16:41:6a:57: 0e:46:6f:4d:40:05:b1:04:88:94:3f:c6:a7:b8:74: e4:95:f0:31:1f:29:87:e7:f7:2c:64:61:1f:b1:23: 6c:17:c0:a3:cb:a6:15:7a:0f:80:26:6b:58:7c:07: eb:ab:e6:2d:92:c5:70:be:c5:a0:78:f4:6a:2f:43: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:7B:A2:44:3B:7E:8C:E2:F5:E1:4F:56:43:74:C9:A1:11:37:31 X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:cf:75:cb:0c:20:69:9c:fb:19:0f:70:25:22:95:5b:ad:a7: 60:8e:5d:ba:1b:97:39:94:9f:6a:ed:ba:61:fa:50:93:75:ff: 6e:df:60:90:9e:9a:b0:6f:6c:1e:5f:cd:30:c5:5b:8a:13:18: 0b:ac:4f:7f:a2:6a:75:d5:1e:19:7d:de:50:00:1d:d2:31:c2: 0e:57:dd:54:61:14:02:0e:b2:a1:02:bf:36:3d:13:82:5e:9b: eb:d1:29:ab:6b:f6:4b:1b:27:a2:ec:7d:2b:cb:4f:be:7e:da: 19:9f:e9:db:23:b7:9e:19:a5:2f:3d:80:fd:8e:c8:58:ab:a4: af:37:51:94:6a:7f:ef:1b:46:d7:21:5d:75:c7:18:bb:e0:ab: 87:c2:4a:14:8b:81:a3:93:c3:d9:6b:da:ea:93:e9:98:0f:d8: c4:f5:8b:c6:30:cb:f7:68:ac:e4:14:bc:93:8a:8e:d2:ae:8f: 31:a8:08:8a:85:a3:a9:bc:70:06:84:81:f3:46:60:4e:94:87: 77:f3:fb:ec:c9:7c:92:32:7c:e7:ce:49:b5:a4:8e:bb:a4:32: 65:12:6a:36:1e:fe:51:b4:f6:29:6c:a8:dc:83:74:4f:4e:8d: ba:8e:13:82:95:81:f9:4f:3b:98:85:8d:10:cf:26:24:89:d5: 8a:f6:c9:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjQxMTIyMTgzNTQ2WhcNMjQxMTI5MTgzNTQ2WjAYMRYwFAYD VQQDEw02NzQwY2YwMy1jN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSz2FQCW22unJJlQ07gxzzBlO3xG56brfN2KVyTRQk5nM0qDvi/0lQTEV5AC HcNt/1XnWzsQT9VlaEwYHvZ9R20EosvolYC/CCSNTB0WfOfsUduBKgywSUkNNSlI IPfVL9cZQ8ISV5tLLcFXOE/17PVQm0JYrfIfLyHFzQ1/FQmy6meC2ihAo8uQAZ0G BYOhdXYIuRbWZwEkEDZppoRQkw1+TUgh6CgMxPFiNYcEKX6+Iof8Iqvb6vvkJOLm sxZBalcORm9NQAWxBIiUP8anuHTklfAxHymH5/csZGEfsSNsF8Cjy6YVeg+AJmtY fAfrq+YtksVwvsWgePRqL0OLPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGae6JE O36M4vXhT1ZDdMmhETcxMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwz3XLDCBpnPsZD3AlIpVbradgjl26G5c5lJ9q7bph+lCTdf9u32CQ npqwb2weX80wxVuKExgLrE9/omp11R4Zfd5QAB3SMcIOV91UYRQCDrKhAr82PROC Xpvr0Smra/ZLGyei7H0ry0++ftoZn+nbI7eeGaUvPYD9jshYq6SvN1GUan/vG0bX IV11xxi74KuHwkoUi4Gjk8PZa9rqk+mYD9jE9YvGMMv3aKzkFLyTio7Sro8xqAiK haOpvHAGhIHzRmBOlId38/vsyXySMnznzkm1pI67pDJlEmo2Hv5RtPYpbKjcg3RP To26jhOClYH5TzuYhY0QzyYkidWK9snj -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org