$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft File: Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json) Hash identifier: 4JSw6DNj9CmLVnoBSS6cQvsjltbmy0Al/saQjpndyFk= Subject key identifier: 2A:59:ED:E0:FC:1D:0B:B0:2C:89:B6:7C:4D:56:42:BD:A1:41:A8:F0 Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48 Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft Manifest number: 01C8 Signing time: Sun 19 May 2024 04:25:53 +0000 Manifest this update: Sun 19 May 2024 04:25:53 +0000 Manifest next update: Sun 26 May 2024 04:25:53 +0000 Files and hashes: 1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: YDBTzzgig8xc8KDV9zBaTxnDiDxVdVEHz0oEAq28rNU=) 2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: UTQVGqvsK0R3aZDkbbMaKSrC+YuJAA4uR9/VuZFfj7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448 Validity Not Before: May 19 04:25:53 2024 GMT Not After : May 26 04:25:53 2024 GMT Subject: CN=66497f51-c7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:b8:76:09:fb:dc:2e:2c:a6:1b:36:dd:1c: 9d:97:b8:60:59:4e:17:25:82:6b:0e:d8:69:1e:36: a5:9a:4f:5a:db:6a:fd:3f:40:9b:5f:dc:ad:5f:0f: d0:9e:4f:3f:eb:93:09:dc:69:6b:1f:a0:03:5c:ec: 97:cc:44:1a:3c:40:a3:c5:7c:e0:35:ad:c8:c9:8e: d8:ed:6d:db:db:ff:37:db:4b:69:34:ff:c0:eb:15: 0c:06:9c:01:be:83:f8:c9:21:a0:10:44:4b:8b:c7: 2d:24:86:2e:d4:bf:10:f2:4f:a8:7f:65:53:fe:24: dd:df:96:cb:ff:33:30:c0:c4:7f:a1:28:99:17:10: 7c:a0:fe:f9:e4:16:82:f0:ea:66:31:84:e7:3c:4c: 00:d0:15:cd:e5:8c:ea:35:c4:9f:20:73:19:5f:31: e1:8d:32:80:05:64:e7:83:b3:eb:61:65:70:10:5c: b6:0e:d9:f3:ea:b6:37:d1:ea:40:6e:12:f2:81:a1: 36:41:f7:65:05:59:cc:fb:c7:7c:ac:58:22:88:ec: 1c:ec:f4:46:7c:9d:00:4a:e3:d6:72:4d:87:21:b7: 20:7a:e5:4c:a6:ca:83:31:1f:b8:bb:80:42:ad:72: ab:8a:b0:e9:81:ec:4b:40:11:c8:2e:02:79:7f:08: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:59:ED:E0:FC:1D:0B:B0:2C:89:B6:7C:4D:56:42:BD:A1:41:A8:F0 X509v3 Authority Key Identifier: keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:51:91:28:6f:ee:60:f6:b6:d6:6c:5c:ab:61:a9:44:97:3d: 2e:2e:66:ae:51:0e:bf:cb:3e:87:71:99:ad:a3:ad:f6:d9:6a: ad:0c:45:a5:3c:0e:ed:9e:21:57:c5:ed:f6:49:e5:e4:75:01: 5a:c3:8d:2b:7b:e6:17:aa:ef:25:0d:8f:ff:43:3e:f4:d7:5c: 42:c2:06:9a:48:f3:be:75:21:86:20:c7:49:ef:31:51:56:2b: 14:7c:1e:00:c9:cc:9f:a8:32:72:e1:3d:85:15:5f:f6:de:c4: 8d:4a:91:0a:17:2e:90:de:a7:e4:0c:92:a7:01:c2:3e:36:7b: 1a:b5:91:68:80:37:30:7b:79:3b:02:0d:54:19:4a:98:5a:de: 12:e4:fd:4b:e4:75:20:68:d6:df:03:07:8f:47:62:c1:05:80: 29:19:27:92:2c:8d:ad:2c:e0:20:92:7c:b2:a3:e8:bb:97:74: 0b:d7:9c:e1:e1:86:6a:b8:cd:cb:88:e3:cb:36:b5:de:ad:78: 9c:f2:31:32:9e:0f:4f:e5:92:83:93:bb:47:6f:4c:d1:08:1e: ac:cc:34:72:a7:1d:5a:27:ea:79:63:67:71:13:60:9a:c8:94: 37:2c:e8:c2:4a:16:12:af:9d:77:27:a6:2a:07:1c:11:06:d2: e0:7b:f2:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwNDQxMTAvBgNVBAUTKDAyNUFGRTkxOTU0ODIwNDlGMjUwOTNFQjg5ODExNUM2 QkQzNzE0NDgwHhcNMjQwNTE5MDQyNTUzWhcNMjQwNTI2MDQyNTUzWjAYMRYwFAYD VQQDEw02NjQ5N2Y1MS1jN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaK4dgn73C4sphs23Rydl7hgWU4XJYJrDthpHjalmk9a22r9P0CbX9ytXw/Q nk8/65MJ3GlrH6ADXOyXzEQaPECjxXzgNa3IyY7Y7W3b2/8320tpNP/A6xUMBpwB voP4ySGgEERLi8ctJIYu1L8Q8k+of2VT/iTd35bL/zMwwMR/oSiZFxB8oP755BaC 8OpmMYTnPEwA0BXN5YzqNcSfIHMZXzHhjTKABWTng7PrYWVwEFy2Dtnz6rY30epA bhLygaE2QfdlBVnM+8d8rFgiiOwc7PRGfJ0ASuPWck2HIbcgeuVMpsqDMR+4u4BC rXKrirDpgexLQBHILgJ5fwiueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpZ7eD8 HQuwLIm2fE1WQr2hQajwMB8GA1UdIwQYMBaAFAJa/pGVSCBJ8lCT64mBFca9NxRI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTA0NC9BN0M3RTY1QTA3 NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlFbnlVSlByaVlFVnhyMDNG RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fsci1rWlZJSUVueVVKUHJpWUVWeHIwM0ZFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTA0NC9BN0M3RTY1QTA3NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlF bnlVSlByaVlFVnhyMDNGRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKUZEob+5g9rbWbFyrYalElz0uLmauUQ6/yz6HcZmto6322WqtDEWl PA7tniFXxe32SeXkdQFaw40re+YXqu8lDY//Qz7011xCwgaaSPO+dSGGIMdJ7zFR VisUfB4AycyfqDJy4T2FFV/23sSNSpEKFy6Q3qfkDJKnAcI+NnsatZFogDcwe3k7 Ag1UGUqYWt4S5P1L5HUgaNbfAwePR2LBBYApGSeSLI2tLOAgknyyo+i7l3QL15zh 4YZquM3LiOPLNrXerXic8jEyng9P5ZKDk7tHb0zRCB6szDRypx1aJ+p5Y2dxE2Ca yJQ3LOjCShYSr513J6YqBxwRBtLge/Ku -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org