$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: 2DGUf4rL6RRzLRtiVnA8C7Ct7O7tzXFQXfcxbFtZqcA= Subject key identifier: 29:F7:61:BE:88:2A:F1:1E:03:39:82:D0:62:17:B5:9F:7B:4E:D7:D2 Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 110E Signing time: Thu 02 May 2024 19:42:10 +0000 Manifest this update: Thu 02 May 2024 19:42:10 +0000 Manifest next update: Thu 09 May 2024 19:42:10 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: l5zyS5Clm/Kp+2JI6j1WjzY9TcsjJtW0UuAVdWARbmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: May 2 19:42:10 2024 GMT Not After : May 9 19:42:10 2024 GMT Subject: CN=6633ec92-f275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:22:ce:1c:12:0e:ef:5f:ea:03:87:3b:2c: c5:41:40:07:1e:87:33:fe:74:ee:d9:e4:68:6c:c3: a1:27:fd:ad:94:e4:bd:5d:2d:ca:4d:b2:00:7b:39: 65:55:10:f9:a0:21:de:2f:72:14:16:79:c4:b4:03: 9c:20:94:e4:be:d3:6d:84:48:aa:ac:b6:21:a6:12: 87:9a:a9:83:f0:78:f2:92:4c:71:2e:ce:f8:d7:1f: 22:39:a8:2d:68:f7:b7:98:ac:3e:30:79:ff:05:f7: 06:7d:98:36:f7:af:fe:5e:1d:fb:05:dc:e8:f5:bc: e0:7c:d5:1d:ba:5f:52:75:26:d7:64:81:ba:c6:d8: dd:14:3a:12:b0:57:0f:38:06:dd:1b:56:7d:e9:db: 55:3c:0d:a6:ac:6f:fa:9f:d5:aa:e8:ac:b8:bd:58: c2:45:d6:d7:ea:61:01:00:52:35:d8:b8:a9:68:fa: f0:1a:04:a3:d2:55:64:40:26:be:27:fb:eb:a9:8a: cd:91:cb:f5:84:7a:bf:45:7c:35:3b:b8:4f:53:b9: 92:65:46:85:e1:50:bc:19:8e:e6:67:dd:43:5a:6e: e9:df:9f:e6:81:36:d8:e3:ef:c7:78:f1:7c:ae:df: 41:68:c1:25:80:a6:0e:9b:08:14:fb:0f:d1:38:e2: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F7:61:BE:88:2A:F1:1E:03:39:82:D0:62:17:B5:9F:7B:4E:D7:D2 X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f6:70:f6:cb:8f:99:2a:65:96:d1:e8:f6:a1:a1:92:96:89: 38:3e:9b:d5:67:e2:25:b3:91:ed:7d:e0:df:4d:dd:de:48:e8: 01:b7:07:a4:d9:11:9c:98:28:1a:3c:a3:23:b5:c1:3b:a7:fe: 0f:3e:9c:b7:7d:e3:54:67:74:a2:fd:9c:25:23:e0:98:3b:2f: 4c:7a:ae:ac:5f:03:dc:1b:aa:ac:fb:50:95:f0:0b:91:ae:ac: a2:01:14:7e:31:b0:e3:be:50:d1:cc:7a:ef:82:29:81:b3:e8: 6b:ca:49:10:ac:76:9f:1b:16:5e:e2:c7:9c:3c:2a:d2:66:2e: fb:1b:03:7f:d9:5c:09:51:7f:fa:1f:44:e5:f2:2f:0e:3f:ea: 96:3e:5d:85:b5:83:4d:81:30:47:8a:dc:3a:6f:15:59:eb:ba: 26:43:44:de:63:4a:b2:93:bc:04:3d:27:65:a6:39:c8:1f:c1: e0:92:c7:c2:0a:8c:5c:30:f3:9a:ed:b8:48:dc:ca:bd:a6:d8: 9f:e7:ea:43:ee:d0:29:02:a9:b9:35:18:93:d4:a4:53:20:b7: f3:ba:3b:ee:36:1c:83:5a:b7:3d:4d:60:49:b4:dd:46:fd:2d: 70:15:a3:34:44:e6:55:45:2a:38:88:c2:14:78:c5:dc:17:29: 1f:62:15:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjQwNTAyMTk0MjEwWhcNMjQwNTA5MTk0MjEwWjAYMRYwFAYD VQQDEw02NjMzZWM5Mi1mMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzIizhwSDu9f6gOHOyzFQUAHHocz/nTu2eRobMOhJ/2tlOS9XS3KTbIAezll VRD5oCHeL3IUFnnEtAOcIJTkvtNthEiqrLYhphKHmqmD8HjykkxxLs741x8iOagt aPe3mKw+MHn/BfcGfZg296/+Xh37Bdzo9bzgfNUdul9SdSbXZIG6xtjdFDoSsFcP OAbdG1Z96dtVPA2mrG/6n9Wq6Ky4vVjCRdbX6mEBAFI12LipaPrwGgSj0lVkQCa+ J/vrqYrNkcv1hHq/RXw1O7hPU7mSZUaF4VC8GY7mZ91DWm7p35/mgTbY4+/HePF8 rt9BaMElgKYOmwgU+w/ROOIwWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn3Yb6I KvEeAzmC0GIXtZ97TtfSMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA89nD2y4+ZKmWW0ej2oaGSlok4PpvVZ+Ils5HtfeDfTd3eSOgBtwek 2RGcmCgaPKMjtcE7p/4PPpy3feNUZ3Si/ZwlI+CYOy9Meq6sXwPcG6qs+1CV8AuR rqyiARR+MbDjvlDRzHrvgimBs+hrykkQrHafGxZe4secPCrSZi77GwN/2VwJUX/6 H0Tl8i8OP+qWPl2FtYNNgTBHitw6bxVZ67omQ0TeY0qyk7wEPSdlpjnIH8HgksfC CoxcMPOa7bhI3Mq9ptif5+pD7tApAqm5NRiT1KRTILfzujvuNhyDWrc9TWBJtN1G /S1wFaM0ROZVRSo4iMIUeMXcFykfYhWA -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org