$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: fPYb3J203A82RHhN2/IloAwGJu/m7enYHiKMiaE/OeY= Subject key identifier: 29:70:E8:6E:20:DD:A5:E1:BE:73:50:D4:90:88:8D:F7:36:71:12:FD Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 0704 Signing time: Fri 22 Nov 2024 21:25:49 +0000 Manifest this update: Fri 22 Nov 2024 21:25:48 +0000 Manifest next update: Fri 29 Nov 2024 21:25:48 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: VI+FAHIZObVwWdkLFKbJGCsgpoRCthDilgmYhZXQbhw=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 2529KOa4AsX4GdTazjRzD7ANwnsJ00BXW/G5AGkeKRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1800 (0x708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Nov 22 21:25:48 2024 GMT Not After : Nov 29 21:25:48 2024 GMT Subject: CN=6740f6dc-c3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:b2:81:6e:15:ee:05:f7:16:8d:51:c8:32: bb:56:42:91:0b:41:8f:96:78:5d:a5:66:d9:3a:59: 4d:c6:bf:b4:b9:f7:d5:ac:32:dd:2f:47:8c:5d:8a: c6:41:43:79:1a:1a:09:ca:1c:25:37:b1:da:98:e2: 30:1d:ab:44:43:3d:6f:aa:f7:26:0f:5c:3c:8f:03: 08:b1:02:ea:af:e1:39:41:31:98:92:5f:2e:0c:1b: 39:e4:f0:af:2f:46:10:77:68:6e:ee:48:61:96:d4: 31:0a:35:04:1b:11:c7:3c:ad:52:fc:eb:cd:4e:67: 9f:d7:70:0f:0b:9a:08:ea:b6:18:20:dc:03:82:f2: 81:93:f9:8c:52:5d:97:26:28:a3:7d:02:e7:06:75: 3d:32:1a:eb:06:45:d6:c9:3b:fa:58:e6:49:9b:bc: 81:19:c7:34:cf:35:57:6d:a7:20:a1:3b:c0:73:eb: 83:49:ef:ae:24:7a:01:25:d8:81:20:96:e8:85:74: 75:9b:33:7e:89:d5:04:b7:c0:ee:be:9a:ae:e8:d9: 42:7c:08:49:a8:ee:56:ce:95:48:5b:fb:94:cf:cd: d5:b7:d3:2e:04:76:91:1e:b1:1f:c3:0f:70:39:1d: 5e:9d:c7:a6:58:ca:13:0f:36:b9:e8:52:43:87:88: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:E8:6E:20:DD:A5:E1:BE:73:50:D4:90:88:8D:F7:36:71:12:FD X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:75:09:96:1e:c8:2e:cb:2f:a9:9b:a1:b4:14:27:7b:8f:aa: 06:fe:a4:bb:2d:50:a2:c7:5f:96:d5:4d:5c:a7:d0:eb:cf:a2: 70:de:81:5a:c0:21:66:b9:0c:02:de:73:ac:91:b4:14:00:51: 1c:c0:81:f8:c6:5a:2f:08:62:21:7a:fa:56:93:ae:a5:b8:b5: 73:01:0d:a9:7e:00:45:d4:cd:ea:52:59:9c:52:42:21:f8:cc: f7:99:ea:8f:f7:68:a0:d8:3c:2c:7b:d9:b8:56:d6:7b:e5:4b: 35:f4:26:cd:2a:a5:a4:7c:11:4c:a7:86:db:0e:c9:a0:61:a4: 44:04:37:48:96:75:6a:43:fc:dc:09:86:16:71:a4:81:3f:ac: 61:e1:f2:7a:9b:e5:58:d7:eb:9f:b3:f0:8d:e7:6d:b5:81:85: 87:cd:97:ce:21:09:4c:fb:b4:d9:a2:6d:7e:7d:cf:a4:27:14: 4b:e7:ab:62:20:9f:3a:73:0b:f6:bd:f6:02:65:1f:ba:5e:f6: 2f:f9:8c:4b:ae:b2:f7:d3:ad:04:bb:ef:05:8a:eb:ca:18:b4: 4d:4a:82:63:22:ca:f8:80:82:d6:14:26:b5:1b:02:8f:ff:c2: 6d:1c:8d:3b:08:a2:7f:4d:76:55:fd:86:13:5a:92:96:e2:3e: a0:3a:e0:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjQxMTIyMjEyNTQ4WhcNMjQxMTI5MjEyNTQ4WjAYMRYwFAYD VQQDEw02NzQwZjZkYy1jM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu42ygW4V7gX3Fo1RyDK7VkKRC0GPlnhdpWbZOllNxr+0uffVrDLdL0eMXYrG QUN5GhoJyhwlN7HamOIwHatEQz1vqvcmD1w8jwMIsQLqr+E5QTGYkl8uDBs55PCv L0YQd2hu7khhltQxCjUEGxHHPK1S/OvNTmef13APC5oI6rYYINwDgvKBk/mMUl2X JiijfQLnBnU9MhrrBkXWyTv6WOZJm7yBGcc0zzVXbacgoTvAc+uDSe+uJHoBJdiB IJbohXR1mzN+idUEt8Duvpqu6NlCfAhJqO5WzpVIW/uUz83Vt9MuBHaRHrEfww9w OR1encemWMoTDza56FJDh4iK2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClw6G4g 3aXhvnNQ1JCIjfc2cRL9MB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBodQmWHsguyy+pm6G0FCd7j6oG/qS7LVCix1+W1U1cp9Drz6Jw3oFa wCFmuQwC3nOskbQUAFEcwIH4xlovCGIhevpWk66luLVzAQ2pfgBF1M3qUlmcUkIh +Mz3meqP92ig2Dwse9m4VtZ75Us19CbNKqWkfBFMp4bbDsmgYaREBDdIlnVqQ/zc CYYWcaSBP6xh4fJ6m+VY1+ufs/CN5221gYWHzZfOIQlM+7TZom1+fc+kJxRL56ti IJ86cwv2vfYCZR+6XvYv+YxLrrL3060Eu+8FiuvKGLRNSoJjIsr4gILWFCa1GwKP /8JtHI07CKJ/TXZV/YYTWpKW4j6gOuCw -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org