$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft File: Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json) Hash identifier: o8rEgdzz/EurFOMhJo+ZOcvdVaCQbB2TOF00Jicvdoc= Subject key identifier: 7A:46:94:3E:C4:B8:56:AF:5A:D2:4B:F7:30:15:10:4A:74:A9:88:A3 Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48 Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft Manifest number: 0229 Signing time: Sat 23 Nov 2024 01:26:48 +0000 Manifest this update: Sat 23 Nov 2024 01:26:48 +0000 Manifest next update: Sat 30 Nov 2024 01:26:48 +0000 Files and hashes: 1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: Tw4bq9GsdPfBRuwAWPWWpppn9IaDghi0wxdRwSonifs=) 2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: u8H4NSNtBcIg5GrlIWnmn+sl29NyMYEZMtRVlCln8c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448 Validity Not Before: Nov 23 01:26:48 2024 GMT Not After : Nov 30 01:26:48 2024 GMT Subject: CN=67412f58-6e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:24:3f:a6:18:d7:ba:33:f5:71:da:88:95: c8:fa:d1:00:5b:5b:4c:ae:2b:6d:23:79:4d:0c:b0: 78:9d:0b:f1:a5:7c:d9:17:5c:9e:65:2d:ce:b6:3a: dc:04:16:3c:9a:0d:64:16:53:9f:52:23:38:8e:9c: 0c:f0:9a:f7:b7:c5:02:4e:d3:67:7a:e7:11:10:56: f8:ee:1f:07:83:f8:19:06:cc:79:6c:f4:ff:ad:96: 15:39:80:1b:10:60:5f:66:7f:17:dd:c8:4d:b7:67: ce:2b:ff:e8:f5:c5:4b:23:28:5e:c6:5a:ce:be:ee: 8d:88:9d:9a:6d:42:31:1c:bd:a5:a1:b3:19:65:df: 7e:c8:c4:fa:a0:d4:3a:7f:be:fd:c1:a4:7c:8b:6f: 8f:c7:43:2e:d5:e8:37:bc:a9:53:b5:00:74:72:9b: b5:36:55:a8:56:9f:6b:7e:db:61:2c:3a:86:39:51: 45:6e:3b:02:eb:3e:14:d3:d2:a0:28:95:b4:cc:db: 82:40:fb:13:c1:52:65:3a:58:27:bf:ae:f3:6e:99: e9:85:39:4d:4c:b7:0f:39:9c:42:bf:ba:88:fa:83: f7:1d:4b:9c:af:9d:08:ee:61:ea:bf:fc:d2:36:f6: 65:47:2d:f6:03:58:16:6e:51:1c:00:d9:56:43:81: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:46:94:3E:C4:B8:56:AF:5A:D2:4B:F7:30:15:10:4A:74:A9:88:A3 X509v3 Authority Key Identifier: keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3c:44:b5:e6:8a:3d:05:42:4e:fb:07:36:e3:34:02:39:a4: 56:18:d0:5b:e3:57:d1:15:61:c4:59:da:ae:59:08:bf:e6:c6: 5e:07:a1:e7:0a:bd:f9:cd:55:4f:5b:af:a0:e2:f2:4f:bd:c3: 77:99:ea:18:00:45:6c:0c:2c:0a:4b:f7:6d:b9:1c:cf:fb:eb: 02:32:ac:24:3b:8f:37:3b:a1:cd:e6:c0:2c:42:60:db:d8:4f: ec:cd:2e:5b:06:ab:a4:1e:04:3c:23:3d:bb:25:1e:db:f4:1a: 52:a4:9d:90:84:fc:6d:54:a1:60:4c:4a:83:3f:c9:80:0b:18: b1:ed:3e:ef:98:cb:96:0c:36:23:d9:b2:de:b4:45:0c:2c:05: ce:43:8e:4c:be:21:fa:0a:a2:a1:e3:26:dd:32:98:4e:d2:58: 8b:f2:2e:d8:bc:51:ab:8a:f1:36:6d:36:28:82:04:f5:cc:1c: d0:3e:1a:63:0e:b8:53:69:97:27:90:8e:4b:ab:0f:b4:1e:bd: 8d:77:6f:2e:d6:67:03:58:7a:25:23:e8:99:c8:56:29:ab:52: 28:ec:96:5f:2a:a3:cd:a1:33:5f:c0:79:de:c1:20:21:4e:f4: eb:06:96:83:c7:f0:56:d2:5c:2e:16:6f:5c:eb:09:ac:9f:aa: 45:b7:15:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwNDQxMTAvBgNVBAUTKDAyNUFGRTkxOTU0ODIwNDlGMjUwOTNFQjg5ODExNUM2 QkQzNzE0NDgwHhcNMjQxMTIzMDEyNjQ4WhcNMjQxMTMwMDEyNjQ4WjAYMRYwFAYD VQQDEw02NzQxMmY1OC02ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz8kP6YY17oz9XHaiJXI+tEAW1tMrittI3lNDLB4nQvxpXzZF1yeZS3Otjrc BBY8mg1kFlOfUiM4jpwM8Jr3t8UCTtNneucREFb47h8Hg/gZBsx5bPT/rZYVOYAb EGBfZn8X3chNt2fOK//o9cVLIyhexlrOvu6NiJ2abUIxHL2lobMZZd9+yMT6oNQ6 f779waR8i2+Px0Mu1eg3vKlTtQB0cpu1NlWoVp9rftthLDqGOVFFbjsC6z4U09Kg KJW0zNuCQPsTwVJlOlgnv67zbpnphTlNTLcPOZxCv7qI+oP3HUucr50I7mHqv/zS NvZlRy32A1gWblEcANlWQ4HyjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpGlD7E uFavWtJL9zAVEEp0qYijMB8GA1UdIwQYMBaAFAJa/pGVSCBJ8lCT64mBFca9NxRI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTA0NC9BN0M3RTY1QTA3 NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlFbnlVSlByaVlFVnhyMDNG RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fsci1rWlZJSUVueVVKUHJpWUVWeHIwM0ZFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTA0NC9BN0M3RTY1QTA3NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlF bnlVSlByaVlFVnhyMDNGRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLPES15oo9BUJO+wc24zQCOaRWGNBb41fRFWHEWdquWQi/5sZeB6Hn Cr35zVVPW6+g4vJPvcN3meoYAEVsDCwKS/dtuRzP++sCMqwkO483O6HN5sAsQmDb 2E/szS5bBqukHgQ8Iz27JR7b9BpSpJ2QhPxtVKFgTEqDP8mACxix7T7vmMuWDDYj 2bLetEUMLAXOQ45MviH6CqKh4ybdMphO0liL8i7YvFGrivE2bTYoggT1zBzQPhpj DrhTaZcnkI5Lqw+0Hr2Nd28u1mcDWHolI+iZyFYpq1Io7JZfKqPNoTNfwHnewSAh TvTrBpaDx/BW0lwuFm9c6wmsn6pFtxX+ -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org