$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: YHcjDqlRxyTY0XAFZ8hP/+9Tc6dsaclgaL86KI8XYIQ= Subject key identifier: 60:E4:0C:99:60:53:3E:94:00:61:86:8C:70:2A:A5:9D:92:60:02:A5 Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 3422 Signing time: Fri 22 Nov 2024 14:52:59 +0000 Manifest this update: Fri 22 Nov 2024 14:52:58 +0000 Manifest next update: Fri 29 Nov 2024 14:52:58 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: mxCvr+iNMgoOEquaJ/LKxz7qZjbSPs9dOlH4HEHbggM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Nov 22 14:52:58 2024 GMT Not After : Nov 29 14:52:58 2024 GMT Subject: CN=67409acb-7378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:59:7a:8e:65:b8:25:a8:8c:78:d6:c5:f9: 48:bb:03:72:6d:28:c2:c4:e9:c2:b6:99:2b:14:4f: ea:b7:3c:ad:6c:25:27:a0:87:41:93:39:af:d3:48: 35:e5:72:8b:93:fc:dc:ad:60:c3:e1:ee:c1:79:6f: 53:bd:db:f2:ad:4c:0d:3a:ed:b1:57:c5:43:2d:c2: 7b:58:a1:40:15:93:46:ea:9d:8a:1f:61:80:4c:4f: fe:8d:fc:99:b6:e3:b7:53:be:01:10:4f:ed:a3:69: 82:e9:c1:2f:35:e7:ba:52:73:d2:86:4b:9f:f7:4f: 0a:bc:01:ff:20:a8:cf:98:10:06:69:ef:1b:15:b2: 7f:e5:c1:91:8c:ae:f2:a1:61:6f:9f:52:b5:ac:30: 3b:89:3b:1d:94:d5:ab:a0:ed:af:93:4f:30:b3:07: 19:bf:a4:88:f9:b4:31:4a:82:a6:a3:ca:29:f8:5f: b1:cd:2b:70:26:bd:2f:69:f5:3a:08:6d:dd:b6:76: 47:c9:23:76:1f:d1:be:3a:54:68:b7:4e:e6:41:3b: 25:6c:60:9a:88:f7:3f:74:ea:e2:22:b7:1f:96:8e: 49:22:75:1a:ef:12:5a:b9:d7:46:90:aa:18:e7:bb: ad:8d:9e:d6:de:11:6e:20:b7:46:2c:41:51:cc:f1: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E4:0C:99:60:53:3E:94:00:61:86:8C:70:2A:A5:9D:92:60:02:A5 X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:82:aa:dc:12:a5:19:88:e7:40:cd:4d:36:6f:71:60:f1:a1: 06:d8:9d:0d:95:65:6a:4c:a5:c3:d4:6e:ca:0a:b8:95:62:74: bc:c7:bf:32:b2:3a:a5:5a:11:f0:4f:b6:44:f4:f2:9c:bf:57: db:f2:b5:45:5c:39:0f:5f:29:7c:25:42:83:e1:b0:11:be:c9: 9c:5c:30:fe:69:6a:9b:55:12:c0:e9:e1:f5:a4:cf:b1:79:61: 3f:3d:b1:32:68:ce:0e:84:7d:2f:cd:74:75:18:6c:bf:fd:b5: 73:10:96:c2:88:f9:9d:f9:e9:7f:8e:06:d8:f4:00:f8:a4:fb: d7:ff:53:06:e5:12:21:58:5a:6d:17:6a:34:72:d0:fe:0c:ac: cc:6a:6c:8b:b8:e2:dd:72:ab:61:d6:52:8b:9d:3f:57:8f:a8: 01:0e:4d:8c:ec:12:76:7b:58:fa:f4:74:8f:27:9d:bc:0f:6d: 71:15:82:06:12:d0:df:a5:35:c3:e7:1b:a2:32:f2:ea:74:1b: 18:3b:81:c9:9d:71:a4:55:ea:27:eb:91:69:31:6a:79:e8:85: 7a:82:48:98:82:f5:fb:45:1c:06:f3:83:4d:5b:61:04:7e:21: d0:6a:cd:0d:df:d7:b3:53:58:8f:09:2e:a1:9d:80:67:79:67: 75:0c:e4:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjQxMTIyMTQ1MjU4WhcNMjQxMTI5MTQ1MjU4WjAYMRYwFAYD VQQDEw02NzQwOWFjYi03Mzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXBZeo5luCWojHjWxflIuwNybSjCxOnCtpkrFE/qtzytbCUnoIdBkzmv00g1 5XKLk/zcrWDD4e7BeW9TvdvyrUwNOu2xV8VDLcJ7WKFAFZNG6p2KH2GATE/+jfyZ tuO3U74BEE/to2mC6cEvNee6UnPShkuf908KvAH/IKjPmBAGae8bFbJ/5cGRjK7y oWFvn1K1rDA7iTsdlNWroO2vk08wswcZv6SI+bQxSoKmo8op+F+xzStwJr0vafU6 CG3dtnZHySN2H9G+OlRot07mQTslbGCaiPc/dOriIrcflo5JInUa7xJauddGkKoY 57utjZ7W3hFuILdGLEFRzPEyZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDkDJlg Uz6UAGGGjHAqpZ2SYAKlMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZgqrcEqUZiOdAzU02b3Fg8aEG2J0NlWVqTKXD1G7KCriVYnS8x78y sjqlWhHwT7ZE9PKcv1fb8rVFXDkPXyl8JUKD4bARvsmcXDD+aWqbVRLA6eH1pM+x eWE/PbEyaM4OhH0vzXR1GGy//bVzEJbCiPmd+el/jgbY9AD4pPvX/1MG5RIhWFpt F2o0ctD+DKzMamyLuOLdcqth1lKLnT9Xj6gBDk2M7BJ2e1j69HSPJ528D21xFYIG EtDfpTXD5xuiMvLqdBsYO4HJnXGkVeon65FpMWp56IV6gkiYgvX7RRwG84NNW2EE fiHQas0N39ezU1iPCS6hnYBneWd1DOS2 -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:42 2024 by rpki-client on console-fra.rpki-client.org