$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: OASc+PqLlV+0g1bQKEAubLoMzd3qOAKVLqP0PLmDVTA= Subject key identifier: A3:7D:46:94:05:DC:94:24:1C:1A:43:DE:4F:BF:53:32:99:E3:07:CC Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: 05 Signing time: Thu 21 Nov 2024 11:20:30 +0000 Manifest this update: Thu 21 Nov 2024 11:20:29 +0000 Manifest next update: Thu 28 Nov 2024 11:20:29 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: YggW6LMf7jvsGK3l7cgNNBetln3gPMIgcmttHZsuzvE=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Nov 21 11:20:29 2024 GMT Not After : Nov 28 11:20:29 2024 GMT Subject: CN=673f177d-af86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:46:bc:af:98:73:36:e9:9a:f0:ac:7d:e3: e0:25:d3:bf:4a:da:4d:21:29:42:0c:8a:15:39:2c: 84:3d:19:c9:07:c7:3b:99:ec:47:3e:9b:45:f9:95: 40:43:41:bb:33:6f:c9:fa:bb:d3:ce:eb:80:17:e3: 5d:43:38:f1:5b:1f:a1:f6:b3:2c:26:10:f8:c1:88: e4:35:ff:1e:4d:8b:ba:5f:d9:a6:bb:e0:d1:3a:f4: 40:aa:b6:d8:8a:bd:b1:94:da:36:5c:51:bb:26:ac: f1:e7:4e:30:14:12:21:59:f4:12:e0:b6:86:7f:b7: c2:b1:0a:d5:1f:83:04:4b:a1:6a:91:cd:15:94:05: 04:be:37:0b:04:09:95:02:55:69:7b:64:6c:94:16: 23:89:5c:34:11:33:d7:58:3c:59:57:f6:a8:c8:41: 59:e9:62:f5:97:6c:23:84:e2:5f:0f:16:e1:37:98: f2:9d:03:50:14:c4:b5:91:9d:69:07:a5:f1:f6:2e: 84:6d:74:28:61:f3:d2:f9:fe:06:72:6f:c7:07:8d: 58:91:59:b7:06:8a:d3:6b:4d:9a:8e:57:fe:8f:0e: 2e:66:db:be:09:8e:6e:38:43:0f:fb:38:7d:c0:42: 7a:23:fe:58:d9:f9:87:7c:66:99:53:b0:80:3c:95: 86:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7D:46:94:05:DC:94:24:1C:1A:43:DE:4F:BF:53:32:99:E3:07:CC X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fd:f5:a5:ec:9f:e4:55:9d:09:2a:85:c1:dc:00:16:b2:7f: a7:51:b8:c0:26:2f:ab:db:cf:f7:e0:11:f7:bc:fb:35:0c:2f: 98:60:f4:e0:48:87:d1:3d:67:c2:94:73:71:9d:17:3c:5c:ca: ec:6c:8c:bb:28:f3:03:85:76:c3:5a:b4:bc:f1:b8:21:ee:09: ff:6a:e8:7a:2f:88:68:3a:02:0f:4c:70:eb:84:d6:e1:90:4f: 89:e6:44:a5:83:9c:f8:a8:55:c0:54:e2:fe:13:24:bb:87:88: 33:ef:0b:fc:26:15:b1:b9:cb:8d:96:b7:17:03:90:df:a3:35: 8a:de:65:d5:17:6a:2f:3c:6b:b2:61:55:5b:26:3a:b2:f3:86: 06:6d:07:f8:8b:3a:cd:05:b3:55:c9:67:47:2d:3c:66:81:83: f4:9c:8d:d5:62:e2:9a:99:b8:11:ca:b3:a0:e3:32:fb:1b:a1: 1e:d2:48:b9:64:78:e0:50:c1:10:79:70:62:ec:fa:70:f6:7f: dc:ff:d9:5c:f2:11:e9:ea:5a:52:7f:82:7d:b9:d7:61:ef:05: 1c:51:7f:e4:4c:ee:9a:96:54:28:d0:fe:df:23:ce:00:1f:41: ff:6b:47:9c:7e:46:6d:16:ca:a4:07:55:60:55:81:e3:3d:ee: fd:9f:65:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDBCNzJBRDUzMzNDRUFBRTFBNTg1QzgyODA4OUM0NDU1 OTk5NjNGMjAeFw0yNDExMjExMTIwMjlaFw0yNDExMjgxMTIwMjlaMBgxFjAUBgNV BAMTDTY3M2YxNzdkLWFmODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC45Ua8r5hzNuma8Kx94+Al079K2k0hKUIMihU5LIQ9GckHxzuZ7Ec+m0X5lUBD Qbszb8n6u9PO64AX411DOPFbH6H2sywmEPjBiOQ1/x5Ni7pf2aa74NE69ECqttiK vbGU2jZcUbsmrPHnTjAUEiFZ9BLgtoZ/t8KxCtUfgwRLoWqRzRWUBQS+NwsECZUC VWl7ZGyUFiOJXDQRM9dYPFlX9qjIQVnpYvWXbCOE4l8PFuE3mPKdA1AUxLWRnWkH pfH2LoRtdChh89L5/gZyb8cHjViRWbcGitNrTZqOV/6PDi5m274Jjm44Qw/7OH3A Qnoj/ljZ+Yd8ZplTsIA8lYbXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo31GlAXc lCQcGkPeT79TMpnjB8wwHwYDVR0jBBgwFoAUALcq1TM86q4aWFyCgInERVmZY/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3LzlGNzY4QUZBQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUxjcTFUTTg2cTRhV0Z5Q2dJbkVSVm1aWV9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3LzlGNzY4QUZBQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0 YVdGeUNnSW5FUlZtWllfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIX99aXsn+RVnQkqhcHcABayf6dRuMAmL6vbz/fgEfe8+zUML5hg9OBI h9E9Z8KUc3GdFzxcyuxsjLso8wOFdsNatLzxuCHuCf9q6HoviGg6Ag9McOuE1uGQ T4nmRKWDnPioVcBU4v4TJLuHiDPvC/wmFbG5y42WtxcDkN+jNYreZdUXai88a7Jh VVsmOrLzhgZtB/iLOs0Fs1XJZ0ctPGaBg/ScjdVi4pqZuBHKs6DjMvsboR7SSLlk eOBQwRB5cGLs+nD2f9z/2VzyEenqWlJ/gn2512HvBRxRf+RM7pqWVCjQ/t8jzgAf Qf9rR5x+Rm0WyqQHVWBVgeM97v2fZUg= -----END CERTIFICATE-----Generated at Thu Nov 21 13:39:45 2024 by rpki-client on console-ams.rpki-client.org