$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: wdXQdlw/GDrh2HxqPfS81p2pkYVAIne/PsK8+D0q5wY= Subject key identifier: 97:1E:C2:D7:09:ED:D5:0E:52:CD:78:0D:9F:B8:67:01:D0:76:24:D3 Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 011C Signing time: Sat 23 Nov 2024 02:59:18 +0000 Manifest this update: Sat 23 Nov 2024 02:59:17 +0000 Manifest next update: Sat 30 Nov 2024 02:59:17 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: 6q3/tmImr6iO0cTufd+kj6LbH8YmnFX+FbarCFDWdFI=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: 46KG+z6AmefQLHET8V1p05YXMcYFBhvMuy+GbMJb6u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: Nov 23 02:59:17 2024 GMT Not After : Nov 30 02:59:17 2024 GMT Subject: CN=67414506-98d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f3:10:91:73:29:9c:9c:05:b6:76:d5:ee:44: 45:d7:59:c9:05:93:2c:07:fe:cf:3d:67:01:14:ef: 1f:7e:3f:14:4d:0a:5e:15:94:64:ed:6a:eb:66:25: 35:12:6d:17:48:0b:c1:89:4d:ef:35:92:f4:c2:48: 2d:68:d7:05:2a:55:f4:c3:f9:56:f3:b7:f5:7c:95: 09:18:c8:6e:e2:8e:5b:69:48:dd:36:34:51:62:07: 7e:cb:2e:c1:3e:8b:a6:97:87:2c:43:d1:e1:4a:2e: 64:25:86:5f:fd:34:d6:06:fa:55:73:0e:44:b3:25: 0e:9b:9d:30:ef:40:c4:09:6c:18:73:2d:3e:da:4e: 95:3c:9d:eb:d1:14:de:c3:53:be:4a:ce:7d:bd:20: bb:1f:77:6b:87:07:dc:c0:56:5b:03:29:a6:bb:ed: c1:51:ed:fa:c5:03:73:e9:fd:93:e5:fd:bf:70:4b: b7:35:28:57:6e:48:1d:4b:fe:42:7d:03:0a:7d:c5: c9:d4:7a:6c:d2:69:56:ca:84:76:20:cc:d0:4a:ce: 51:c8:24:f0:e4:4b:18:b7:85:01:4b:e7:fa:67:68: 7c:5c:6f:8f:77:a7:37:e7:f1:12:75:8f:62:1f:24: 6d:c5:ad:06:f5:0b:a2:fa:2f:d3:0a:ed:b9:27:ae: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1E:C2:D7:09:ED:D5:0E:52:CD:78:0D:9F:B8:67:01:D0:76:24:D3 X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:79:59:a8:32:5e:f4:85:8d:d8:7e:7a:9e:83:2a:06:d8:10: de:99:5a:2f:0f:93:c2:bf:be:dc:8e:1d:e8:95:b9:33:2d:d0: 68:05:d7:b5:c0:1e:e7:9a:1c:27:71:ad:34:fd:a0:f7:99:da: ff:cc:dd:c8:1d:bb:24:53:e0:51:4d:f7:f5:11:f0:73:60:8e: af:55:d0:37:4b:4c:a0:1a:3f:80:71:c8:55:03:4c:f5:f8:8d: 6f:7b:36:4d:c4:8c:51:ed:ca:1b:5d:f1:62:4e:0a:9b:91:ca: 8b:f0:fc:c6:31:e1:00:2e:09:fa:88:c9:5c:61:43:30:e3:38: eb:6a:d4:55:ce:8e:b3:e5:52:6b:24:15:18:8a:3b:97:a6:1a: 53:51:87:d8:5c:6c:c8:95:f9:6d:86:88:dc:de:e6:c7:7e:ff: 98:6f:8e:5d:a7:ee:7a:c1:ae:62:23:5e:08:00:7a:27:58:17: 00:a9:16:63:df:13:0a:13:83:4f:68:72:fe:b7:58:de:93:14: b6:78:1b:de:7f:cb:d2:fe:15:a0:6c:98:30:35:e1:42:62:c6: 04:21:35:44:53:0f:d6:d1:a4:57:9f:7c:54:33:e9:9b:19:06: f6:17:17:05:e1:8b:36:90:8a:47:d6:3c:9e:66:91:ab:36:0c: 05:40:a0:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjQxMTIzMDI1OTE3WhcNMjQxMTMwMDI1OTE3WjAYMRYwFAYD VQQDEw02NzQxNDUwNi05OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vMQkXMpnJwFtnbV7kRF11nJBZMsB/7PPWcBFO8ffj8UTQpeFZRk7WrrZiU1 Em0XSAvBiU3vNZL0wkgtaNcFKlX0w/lW87f1fJUJGMhu4o5baUjdNjRRYgd+yy7B Pouml4csQ9HhSi5kJYZf/TTWBvpVcw5EsyUOm50w70DECWwYcy0+2k6VPJ3r0RTe w1O+Ss59vSC7H3drhwfcwFZbAymmu+3BUe36xQNz6f2T5f2/cEu3NShXbkgdS/5C fQMKfcXJ1Hps0mlWyoR2IMzQSs5RyCTw5EsYt4UBS+f6Z2h8XG+Pd6c35/ESdY9i HyRtxa0G9Qui+i/TCu25J64FZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcewtcJ 7dUOUs14DZ+4ZwHQdiTTMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmeVmoMl70hY3YfnqegyoG2BDemVovD5PCv77cjh3olbkzLdBoBde1 wB7nmhwnca00/aD3mdr/zN3IHbskU+BRTff1EfBzYI6vVdA3S0ygGj+AcchVA0z1 +I1vezZNxIxR7cobXfFiTgqbkcqL8PzGMeEALgn6iMlcYUMw4zjratRVzo6z5VJr JBUYijuXphpTUYfYXGzIlflthojc3ubHfv+Yb45dp+56wa5iI14IAHonWBcAqRZj 3xMKE4NPaHL+t1jekxS2eBvef8vS/hWgbJgwNeFCYsYEITVEUw/W0aRXn3xUM+mb GQb2FxcF4Ys2kIpH1jyeZpGrNgwFQKDG -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org