$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: adb0TOD3FW1F5Ajk09VwqD0BV2MBOe8KKj6jJZJD0ds= Subject key identifier: 4D:3E:E6:20:33:C4:DF:90:6D:CD:34:C7:59:CF:D8:67:C7:57:BF:46 Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 33C1 Signing time: Sat 18 May 2024 14:59:36 +0000 Manifest this update: Sat 18 May 2024 14:59:35 +0000 Manifest next update: Sat 25 May 2024 14:59:35 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: Sd/cRMAWSwfDqs11G+kRuUMpKet/WVrM1iInEbF7IlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: May 18 14:59:35 2024 GMT Not After : May 25 14:59:35 2024 GMT Subject: CN=6648c258-9673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:e6:16:ab:a2:73:cb:2e:4d:d5:7b:9d:2a: f3:52:ea:52:83:cf:ab:b2:f6:14:85:04:26:ad:22: 7a:e7:52:b0:15:b2:bf:a5:cd:ee:b0:94:fc:41:1b: 82:14:da:cc:98:33:9e:f1:06:f8:86:5d:78:97:a0: 99:51:8a:f4:bd:76:2c:d2:39:ea:d0:81:3f:33:d7: d1:69:f8:6e:fd:32:0e:39:28:5b:c4:fc:3e:48:6a: a5:48:a0:e4:91:38:c4:e1:ae:ba:62:0f:11:b8:7d: 6f:b9:b2:9f:be:8b:ef:ef:79:1d:95:78:c2:c4:e6: 75:b0:54:f3:c4:05:7e:ee:6b:84:d3:20:a4:4d:e9: d3:a0:39:30:b1:10:77:08:2e:4b:01:10:42:ad:1d: a3:88:4b:c2:25:33:92:d8:1c:cf:9a:a0:6b:71:f4: ee:63:24:e2:8c:a1:79:4c:f2:38:8c:fc:31:13:d5: d1:e8:ac:bf:8f:3e:90:e7:bb:9d:86:f7:ae:19:14: 77:95:f0:a7:d2:21:33:a6:bf:63:40:35:b3:ce:50: 2c:70:91:84:8d:f2:1c:34:49:6b:e6:03:e5:0f:02: 8e:0a:18:25:43:f7:8c:4e:d7:03:6b:34:a1:aa:93: dd:93:cd:42:e4:ec:5b:0e:ba:3e:1a:3a:af:d4:cc: 21:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3E:E6:20:33:C4:DF:90:6D:CD:34:C7:59:CF:D8:67:C7:57:BF:46 X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:cd:2f:1e:96:f5:39:ed:d4:10:49:ba:53:d3:a4:76:8f:c6: 19:77:f1:1e:45:6b:b0:9a:05:47:19:63:4b:52:13:dc:b0:62: bf:98:04:2f:6a:44:21:bc:45:8a:a6:4a:b4:bc:6e:29:ec:b5: 95:f8:5b:ef:b2:7c:52:65:85:21:0a:78:fd:8b:42:4d:f3:c7: 53:d6:a3:5f:04:a9:80:8f:04:d4:d3:d9:7b:0c:41:7f:c8:79: 20:54:83:e2:a1:df:61:a0:7f:1f:6b:f1:31:db:3c:a0:64:33: 3c:b8:95:6e:47:5a:0e:a4:20:45:48:5c:3a:cd:62:c9:c7:4f: 30:06:12:0a:24:3b:9c:92:23:ad:ea:7b:01:dc:b5:b6:ff:07: d4:2e:fc:a4:db:0b:10:4b:fd:fd:70:dc:0f:8f:aa:5e:5c:1e: 09:39:22:c5:71:54:8e:05:7a:d2:04:38:91:1c:0e:82:23:50: 77:0d:a0:ca:df:2e:c7:aa:a5:0b:8b:a1:28:3c:59:d4:2e:c3: 0e:11:0e:e8:e3:5d:79:10:06:bf:a6:30:c9:4a:6c:cc:76:bb: 99:0e:33:0c:ea:f0:6d:81:96:65:c3:86:a8:97:c9:90:2b:c1: f1:78:35:9b:3b:45:03:fa:cc:f1:1e:a0:28:ab:93:ef:a7:8f: 3a:53:b9:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjQwNTE4MTQ1OTM1WhcNMjQwNTI1MTQ1OTM1WjAYMRYwFAYD VQQDEw02NjQ4YzI1OC05NjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuXmFquic8suTdV7nSrzUupSg8+rsvYUhQQmrSJ651KwFbK/pc3usJT8QRuC FNrMmDOe8Qb4hl14l6CZUYr0vXYs0jnq0IE/M9fRafhu/TIOOShbxPw+SGqlSKDk kTjE4a66Yg8RuH1vubKfvovv73kdlXjCxOZ1sFTzxAV+7muE0yCkTenToDkwsRB3 CC5LARBCrR2jiEvCJTOS2BzPmqBrcfTuYyTijKF5TPI4jPwxE9XR6Ky/jz6Q57ud hveuGRR3lfCn0iEzpr9jQDWzzlAscJGEjfIcNElr5gPlDwKOChglQ/eMTtcDazSh qpPdk81C5OxbDro+Gjqv1MwhcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0+5iAz xN+Qbc00x1nP2GfHV79GMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgzS8elvU57dQQSbpT06R2j8YZd/EeRWuwmgVHGWNLUhPcsGK/mAQv akQhvEWKpkq0vG4p7LWV+FvvsnxSZYUhCnj9i0JN88dT1qNfBKmAjwTU09l7DEF/ yHkgVIPiod9hoH8fa/Ex2zygZDM8uJVuR1oOpCBFSFw6zWLJx08wBhIKJDuckiOt 6nsB3LW2/wfULvyk2wsQS/39cNwPj6peXB4JOSLFcVSOBXrSBDiRHA6CI1B3DaDK 3y7HqqULi6EoPFnULsMOEQ7o4115EAa/pjDJSmzMdruZDjMM6vBtgZZlw4aol8mQ K8HxeDWbO0UD+szxHqAoq5Pvp486U7lZ -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org