$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: o/k+SQH+AkPiNUTyQYj0+3gpE2OgiEA9UvUR6jzzdeY= Subject key identifier: AF:DA:CD:06:75:61:4E:A2:90:93:D4:D9:3E:33:C2:A7:37:56:80:65 Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: B6 Signing time: Sun 05 May 2024 06:34:06 +0000 Manifest this update: Sun 05 May 2024 06:34:05 +0000 Manifest next update: Sun 12 May 2024 06:34:05 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: H429lxZDMGFqCIo6riEUqNU/HhsF2tt5P1ny7CaKfrM=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: 46KG+z6AmefQLHET8V1p05YXMcYFBhvMuy+GbMJb6u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: May 5 06:34:05 2024 GMT Not After : May 12 06:34:05 2024 GMT Subject: CN=6637285d-871f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:2c:98:b9:b9:41:e3:ca:a5:d9:a2:4b:dc: 55:a8:d9:13:71:71:7f:07:7d:22:34:ab:e1:97:eb: 1f:94:b3:b3:ff:88:66:6b:ca:3d:af:a1:a0:4f:83: ab:ab:b4:74:f1:18:65:c5:82:bf:b7:01:15:55:6c: fa:df:2f:bd:bb:09:5a:da:2e:25:ef:5d:ca:a3:82: 76:75:72:53:46:a3:0f:a6:5c:42:f2:57:c3:fc:dd: 6e:0e:30:26:ea:ef:f1:4b:dd:04:1f:c3:68:37:ba: 93:c7:e0:0d:89:5c:bc:bf:b2:fe:62:7e:da:07:a9: b6:10:78:13:67:53:ba:e3:51:41:eb:1a:3b:3d:ab: 6b:20:e8:47:7d:a8:17:58:27:ae:ca:03:b8:23:97: 47:4c:c2:59:45:dc:f0:82:3c:cd:74:2b:bd:a2:4a: 95:65:68:3b:e3:b4:e8:67:dd:4a:3e:7a:ed:5d:31: f3:f8:e2:c0:ad:49:ad:59:e0:ff:17:f2:a8:9b:20: 72:c1:90:bc:87:63:ac:85:e5:94:bc:6c:f9:dd:8d: 99:36:5f:55:d3:f6:e5:14:0f:a1:b8:f0:dc:3d:c3: c8:6b:cf:c6:c4:37:7b:e7:f8:41:f4:85:1e:14:aa: 65:0d:6c:63:03:00:33:25:36:e2:4c:41:fd:11:f4: 85:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DA:CD:06:75:61:4E:A2:90:93:D4:D9:3E:33:C2:A7:37:56:80:65 X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:30:91:ae:b8:31:5f:96:cc:55:16:d0:9d:d2:ad:1b:d0:c0: ca:16:da:0a:e1:7f:5c:c0:61:5f:e7:d7:dc:23:6d:48:21:56: f2:26:ec:0d:0e:ab:22:3c:08:e1:87:20:db:7f:5e:e9:0c:ef: 37:bb:33:70:7a:71:b2:91:51:21:8f:28:41:b2:00:05:a9:01: 0b:cf:f3:48:28:f4:e8:b2:79:7c:5f:d8:75:35:c3:11:63:4c: 88:e9:91:00:b5:2f:7d:99:e0:99:b3:71:e2:69:41:10:fa:ed: 73:6d:31:da:96:e3:93:59:db:7f:89:50:7c:7c:8a:2b:d5:e6: 6b:b2:c4:5a:77:89:f8:2d:83:63:47:4f:2b:ca:df:fc:96:e3: c7:a7:f0:fb:9b:7d:76:ec:5c:7f:f3:ae:01:41:36:99:93:12: d9:09:47:7b:55:0c:4a:69:b2:59:81:33:d3:18:3c:b6:8d:19: 98:5d:9f:51:33:aa:04:e2:f9:c0:15:e8:c9:cc:f0:14:bd:ef: 17:b3:9e:32:58:c2:ef:91:f2:0f:90:f9:2f:6b:ac:39:09:bf: 06:79:04:f8:6c:9e:c5:77:16:c1:47:91:af:37:f7:2b:24:82: e3:ce:c3:3f:d8:cf:55:2c:a6:b1:69:c0:7a:86:82:ff:5b:0b: 52:4c:ab:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjQwNTA1MDYzNDA1WhcNMjQwNTEyMDYzNDA1WjAYMRYwFAYD VQQDEw02NjM3Mjg1ZC04NzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR8smLm5QePKpdmiS9xVqNkTcXF/B30iNKvhl+sflLOz/4hma8o9r6GgT4Or q7R08RhlxYK/twEVVWz63y+9uwla2i4l713Ko4J2dXJTRqMPplxC8lfD/N1uDjAm 6u/xS90EH8NoN7qTx+ANiVy8v7L+Yn7aB6m2EHgTZ1O641FB6xo7PatrIOhHfagX WCeuygO4I5dHTMJZRdzwgjzNdCu9okqVZWg747ToZ91KPnrtXTHz+OLArUmtWeD/ F/KomyBywZC8h2OsheWUvGz53Y2ZNl9V0/blFA+huPDcPcPIa8/GxDd75/hB9IUe FKplDWxjAwAzJTbiTEH9EfSFJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/azQZ1 YU6ikJPU2T4zwqc3VoBlMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHMJGuuDFflsxVFtCd0q0b0MDKFtoK4X9cwGFf59fcI21IIVbyJuwN DqsiPAjhhyDbf17pDO83uzNwenGykVEhjyhBsgAFqQELz/NIKPTosnl8X9h1NcMR Y0yI6ZEAtS99meCZs3HiaUEQ+u1zbTHaluOTWdt/iVB8fIor1eZrssRad4n4LYNj R08ryt/8luPHp/D7m3127Fx/864BQTaZkxLZCUd7VQxKabJZgTPTGDy2jRmYXZ9R M6oE4vnAFejJzPAUve8Xs54yWMLvkfIPkPkva6w5Cb8GeQT4bJ7FdxbBR5GvN/cr JILjzsM/2M9VLKaxacB6hoL/WwtSTKs1 -----END CERTIFICATE-----Generated at Sun May 5 08:39:15 2024 by rpki-client on console-fra.rpki-client.org