$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: Gc57IJoO5TpwXTsr+5kBTXaUGm53gY88atGCA2bomKE= Subject key identifier: B5:1A:52:6B:71:2C:13:D0:F2:10:F9:59:F9:F2:F6:16:8F:AA:9A:4F Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: 50 Signing time: Thu 17 Apr 2025 06:07:16 +0000 Manifest this update: Thu 17 Apr 2025 06:07:16 +0000 Manifest next update: Thu 24 Apr 2025 06:07:16 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: 86ISD95IdO36uDK7s08PMspZXUJHm9dz2wLVvjEzTwA=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Apr 17 06:07:16 2025 GMT Not After : Apr 24 06:07:16 2025 GMT Subject: CN=68009a94-7e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:25:97:e7:bb:d3:21:ee:be:c7:07:34:dd: 7f:7c:4c:bd:33:82:1b:24:62:7e:74:bf:c6:ff:dc: 64:f8:49:05:8d:d7:e9:f6:18:55:34:af:a1:99:00: d0:36:48:93:ca:05:ff:af:e9:77:5f:0d:da:a4:32: 8c:f1:ea:c4:71:c6:80:ba:5e:f8:0f:2b:9c:b3:55: 10:53:25:90:9f:7a:c4:f0:05:71:43:4d:8e:fd:90: f1:ce:ef:cc:58:4b:82:c9:80:0a:4a:53:d1:ab:88: c0:4b:52:bc:43:c0:d3:3d:bd:95:69:76:e4:5d:6c: 56:bc:88:7a:2f:59:62:9e:aa:2b:c1:85:77:f6:cf: a4:f2:59:85:13:ac:b6:d6:a9:6d:a3:4f:dc:06:07: c6:8f:18:4b:71:75:53:ee:37:3e:c3:11:4d:f5:9a: 1e:32:f7:33:0c:6b:3b:45:b4:0a:19:49:a4:ae:5a: 59:12:8c:31:af:a1:34:f6:45:b2:37:16:8c:a9:22: 81:d6:33:35:15:24:48:8f:ee:43:7c:0a:da:eb:c5: 2b:6a:98:4d:5d:09:90:2c:d5:7f:3f:76:22:02:c1: ae:52:01:c0:4c:e8:76:8f:db:98:a8:06:7e:04:4b: 29:d3:3a:82:7e:98:8b:69:0c:c2:ae:21:55:61:ef: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1A:52:6B:71:2C:13:D0:F2:10:F9:59:F9:F2:F6:16:8F:AA:9A:4F X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fb:7e:cc:37:81:c2:32:09:91:a3:53:fb:f7:5c:bb:b3:8d: fb:37:de:ea:c8:11:67:d7:7e:69:6a:87:7b:1f:1f:75:0e:62: 85:12:0b:7c:db:bc:09:fd:9f:2e:24:32:fd:33:1e:fb:86:71: 0b:85:f6:13:ad:83:55:82:03:95:0f:c3:f0:d0:22:44:5d:a1: 76:5f:cb:8a:2b:ed:f4:45:35:8c:a1:37:22:e3:4f:78:9b:bf: 24:d0:4b:70:49:53:b8:4b:f0:4f:e7:bf:f4:bd:21:b1:32:f6: 9e:a9:4d:37:3c:f6:fd:0e:a4:d5:2b:0e:1b:dd:9b:ec:e7:fc: 58:3e:27:1b:d0:86:3e:0e:a7:ea:62:7c:b8:80:8b:51:53:58: 23:aa:2e:4a:7d:0f:76:11:26:bf:4e:80:a6:bc:79:68:65:60: c5:4f:c9:bb:ca:d0:77:d8:2b:ae:b8:b5:ae:36:db:a2:69:2e: ce:3b:a2:bc:38:50:f8:5f:68:08:72:d8:04:36:ce:13:b9:39: 72:c1:1a:d0:01:4a:52:2c:0d:f5:93:50:4c:17:1f:84:63:49: 70:0d:6f:69:f9:fb:a7:05:1f:a9:9a:21:2f:93:6d:9c:02:50: 4f:d2:d9:d8:d0:2d:33:e3:3c:22:3a:37:5c:0f:60:98:86:8e: 4d:14:28:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDBCNzJBRDUzMzNDRUFBRTFBNTg1QzgyODA4OUM0NDU1 OTk5NjNGMjAeFw0yNTA0MTcwNjA3MTZaFw0yNTA0MjQwNjA3MTZaMBgxFjAUBgNV BAMTDTY4MDA5YTk0LTdlNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMjiWX57vTIe6+xwc03X98TL0zghskYn50v8b/3GT4SQWN1+n2GFU0r6GZANA2 SJPKBf+v6XdfDdqkMozx6sRxxoC6XvgPK5yzVRBTJZCfesTwBXFDTY79kPHO78xY S4LJgApKU9GriMBLUrxDwNM9vZVpduRdbFa8iHovWWKeqivBhXf2z6TyWYUTrLbW qW2jT9wGB8aPGEtxdVPuNz7DEU31mh4y9zMMaztFtAoZSaSuWlkSjDGvoTT2RbI3 FoypIoHWMzUVJEiP7kN8CtrrxStqmE1dCZAs1X8/diICwa5SAcBM6HaP25ioBn4E SynTOoJ+mItpDMKuIVVh786jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtRpSa3Es E9DyEPlZ+fL2Fo+qmk8wHwYDVR0jBBgwFoAUALcq1TM86q4aWFyCgInERVmZY/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3LzlGNzY4QUZBQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUxjcTFUTTg2cTRhV0Z5Q2dJbkVSVm1aWV9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3LzlGNzY4QUZBQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0 YVdGeUNnSW5FUlZtWllfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABb7fsw3gcIyCZGjU/v3XLuzjfs33urIEWfXfmlqh3sfH3UOYoUSC3zb vAn9ny4kMv0zHvuGcQuF9hOtg1WCA5UPw/DQIkRdoXZfy4or7fRFNYyhNyLjT3ib vyTQS3BJU7hL8E/nv/S9IbEy9p6pTTc89v0OpNUrDhvdm+zn/Fg+JxvQhj4Op+pi fLiAi1FTWCOqLkp9D3YRJr9OgKa8eWhlYMVPybvK0HfYK664ta4226JpLs47orw4 UPhfaAhy2AQ2zhO5OXLBGtABSlIsDfWTUEwXH4RjSXANb2n5+6cFH6maIS+TbZwC UE/S2djQLTPjPCI6N1wPYJiGjk0UKFY= -----END CERTIFICATE-----Generated at Sat Apr 19 00:50:44 2025 by rpki-client