$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: z4liCfBiaGPzzqKIJRfax7JpPtXZdV/wNmZpoOU+bHo= Subject key identifier: E0:F2:A2:0A:7A:D3:25:37:52:0B:69:51:FE:9E:E7:29:46:00:19:10 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 069E Signing time: Sat 04 May 2024 23:24:40 +0000 Manifest this update: Sat 04 May 2024 23:24:39 +0000 Manifest next update: Sat 11 May 2024 23:24:39 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: g8CHU48HEMBBfxqJIP0/RejQGGZLNOXMS1fPisk07dQ=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 2529KOa4AsX4GdTazjRzD7ANwnsJ00BXW/G5AGkeKRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: May 4 23:24:39 2024 GMT Not After : May 11 23:24:39 2024 GMT Subject: CN=6636c3b8-8514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:ca:31:c4:76:86:dc:b5:6e:92:1a:d0:44: d3:5c:b1:ae:40:4d:2d:05:e7:d5:48:1b:06:93:e2: 36:14:5a:e7:e6:98:5f:e3:b9:b2:b5:1d:6b:ad:79: 6f:44:e7:3e:a9:92:39:1f:34:f2:e5:d3:15:05:16: f8:4a:f5:d2:58:22:90:fb:a0:a9:c1:f1:8b:71:22: d4:89:e0:3f:a8:1e:a2:04:45:84:dd:3f:34:7d:d4: ad:01:ba:e5:93:d7:74:42:9e:84:65:b6:8f:85:74: c2:12:bd:28:7c:a6:5f:a9:bf:98:46:3b:54:25:51: e7:7d:37:57:ee:a1:77:b3:97:28:1e:b1:b1:d2:1d: 36:c0:b6:e4:f7:9c:a7:68:0a:75:3f:4b:7d:26:15: 7b:99:61:40:e9:4e:2d:e4:a2:f6:ee:95:f1:71:d3: 72:7f:13:fc:d8:c7:b8:ac:f2:05:91:f3:42:ae:86: 95:78:bf:49:2f:cf:54:e8:df:fb:29:87:42:de:a5: 6f:44:a1:6f:69:23:54:e5:38:86:1a:33:7b:58:6c: 62:04:cf:84:61:fa:56:24:39:6f:5f:2e:1c:4f:3f: 56:61:5c:5b:ef:25:31:8b:cc:28:68:01:22:11:7b: 0a:be:b5:d9:8a:64:fb:5d:5b:c4:c7:0f:42:96:be: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F2:A2:0A:7A:D3:25:37:52:0B:69:51:FE:9E:E7:29:46:00:19:10 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ec:b0:77:c9:76:8c:87:9b:30:49:33:11:68:1b:f1:0b:b6: 09:0e:a1:47:06:3c:6d:fa:fb:af:a2:cf:eb:03:49:4b:6f:d1: bf:c9:c4:be:33:1a:fe:73:44:12:d5:3e:bc:ff:94:6d:fb:96: 14:b3:55:4d:06:15:46:9f:aa:51:94:22:a4:b3:26:cc:53:cc: 75:83:bf:c7:de:d5:a4:71:f8:c3:56:fd:72:39:76:e0:74:41: 55:03:82:aa:60:1c:6c:5f:7c:7c:fd:a7:f1:b3:7c:36:a6:97: ba:ab:c2:ec:88:11:9e:e8:4d:77:de:e7:78:12:a6:3f:14:f4: 36:96:56:05:b0:e1:71:80:33:40:49:03:5d:42:2c:ed:08:9f: a5:9a:08:f3:09:03:63:79:ab:18:f3:68:97:42:dc:1a:b0:43: f9:cd:14:9d:a9:cd:a1:3a:11:3d:bf:82:14:0d:2d:1c:57:f8: af:e6:49:e6:21:4c:59:79:a1:8b:06:ed:c5:7a:84:81:bb:be: cf:6d:23:71:ab:d9:a8:e9:cd:0b:25:a9:6c:2d:16:53:3b:bd: 3a:08:fa:43:52:f6:44:af:ba:04:fc:6b:b1:67:b8:43:39:c4: 24:d4:d4:27:bf:e2:90:08:12:fd:fb:ac:85:61:bb:25:94:14: ce:bf:68:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjQwNTA0MjMyNDM5WhcNMjQwNTExMjMyNDM5WjAYMRYwFAYD VQQDEw02NjM2YzNiOC04NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQfKMcR2hty1bpIa0ETTXLGuQE0tBefVSBsGk+I2FFrn5phf47mytR1rrXlv ROc+qZI5HzTy5dMVBRb4SvXSWCKQ+6CpwfGLcSLUieA/qB6iBEWE3T80fdStAbrl k9d0Qp6EZbaPhXTCEr0ofKZfqb+YRjtUJVHnfTdX7qF3s5coHrGx0h02wLbk95yn aAp1P0t9JhV7mWFA6U4t5KL27pXxcdNyfxP82Me4rPIFkfNCroaVeL9JL89U6N/7 KYdC3qVvRKFvaSNU5TiGGjN7WGxiBM+EYfpWJDlvXy4cTz9WYVxb7yUxi8woaAEi EXsKvrXZimT7XVvExw9Clr4ieQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODyogp6 0yU3UgtpUf6e5ylGABkQMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq7LB3yXaMh5swSTMRaBvxC7YJDqFHBjxt+vuvos/rA0lLb9G/ycS+ Mxr+c0QS1T68/5Rt+5YUs1VNBhVGn6pRlCKksybMU8x1g7/H3tWkcfjDVv1yOXbg dEFVA4KqYBxsX3x8/afxs3w2ppe6q8LsiBGe6E133ud4EqY/FPQ2llYFsOFxgDNA SQNdQiztCJ+lmgjzCQNjeasY82iXQtwasEP5zRSdqc2hOhE9v4IUDS0cV/iv5knm IUxZeaGLBu3FeoSBu77PbSNxq9mo6c0LJalsLRZTO706CPpDUvZEr7oE/GuxZ7hD OcQk1NQnv+KQCBL9+6yFYbsllBTOv2gq -----END CERTIFICATE-----Generated at Sun May 5 00:12:34 2024 by rpki-client on console-fra.rpki-client.org