$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft File: GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json) Hash identifier: lDeCROiLuD6dYWnY2qmtGmEeBbGXlAynEPVvmzv7ysE= Subject key identifier: 79:E7:A7:5C:F2:72:17:18:9C:6E:3E:35:06:1E:FA:35:7A:58:6F:35 Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1E51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft Manifest number: 1E3F Signing time: Sat 18 May 2024 16:25:18 +0000 Manifest this update: Sat 18 May 2024 16:25:18 +0000 Manifest next update: Sat 25 May 2024 16:25:18 +0000 Files and hashes: 1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: 0lCLippKTwBIRB3T5BKhxfIVs7asQ4WyE30fLU3LrKc=) 2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: HYGTpF3m+keebY1nO0nXesz+kyNSH4xN+Rv84L1hYFk=) 3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: NJFUwrppMcdU/f2soCnzh8F94AFSgqwu8og6TAE+osA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7761 (0x1e51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Validity Not Before: May 18 16:25:18 2024 GMT Not After : May 25 16:25:18 2024 GMT Subject: CN=6648d66e-518a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:c4:03:a3:62:5d:9d:70:ce:03:3c:5e:58: 63:a7:c0:65:48:d2:31:77:a4:38:17:2f:43:98:a0: cd:d8:3a:1d:94:fd:a0:2c:78:89:4c:13:0f:04:4b: 11:c6:b1:ca:71:19:16:5f:83:80:30:30:ee:2c:cb: 6d:12:60:6c:16:49:1b:19:f3:05:f7:ef:57:be:57: c0:52:6e:8b:8d:63:14:56:97:43:fe:d0:32:74:04: d7:94:57:b3:73:d3:4d:71:fe:0c:67:e2:b9:18:0b: 54:a4:e0:73:89:04:c8:f4:3b:50:eb:57:55:54:e4: ff:16:d3:50:ed:b2:86:2c:0e:9c:c6:7e:af:e3:2c: 57:2f:2c:76:f6:05:ef:c0:30:88:50:97:a7:52:f9: c5:b3:ed:7d:6a:a6:71:64:09:a5:a5:c3:7a:19:09: 9e:08:e5:0b:f3:a1:ab:e7:e0:7f:94:35:e7:53:7f: fe:5c:16:2f:e3:f5:2c:09:32:7d:8d:98:17:a6:38: 83:4a:8d:4e:df:7a:fd:20:7b:ca:ad:c0:4e:e1:1e: 8d:81:c3:0b:c0:71:78:b5:b4:48:5f:b8:a1:b4:15: 8e:bc:19:f9:a6:e5:cb:70:62:43:dc:50:c4:29:2d: 7d:a6:a3:96:20:dd:23:67:67:a0:21:e7:f1:51:24: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E7:A7:5C:F2:72:17:18:9C:6E:3E:35:06:1E:FA:35:7A:58:6F:35 X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a9:be:71:5f:43:b6:0e:8b:39:5f:68:f6:04:81:31:4e:3d: 37:95:a1:ab:3b:1f:2d:d9:bc:f4:16:04:d4:82:d8:dc:fb:8d: 18:02:93:c9:c8:d8:02:43:92:d2:9c:83:cc:e8:22:0c:b0:d0: de:e9:b1:df:eb:48:9f:0f:4b:5a:b1:79:e0:f9:47:fa:30:f4: 80:8e:01:c9:51:bd:08:70:64:7e:01:a3:2b:8a:fa:6d:5a:75: ae:e7:f2:96:6a:4c:60:da:25:cd:cb:50:64:41:f5:3a:a9:05: cf:8d:82:65:a4:ac:20:18:64:64:07:31:6b:f1:15:1f:c9:28: f7:31:ea:96:00:52:40:14:2c:63:41:e0:e3:d5:d2:0b:c0:12: 4a:94:7f:71:a4:d2:b2:3b:31:c3:6a:cd:9b:ac:13:7b:dc:43: f3:65:bd:5c:2d:c8:2e:48:3d:25:d0:41:75:38:5a:93:b9:aa: ca:aa:35:94:2e:b0:8b:0d:f3:6f:14:47:73:59:e3:3c:3d:a7: d2:2a:df:00:2e:c7:f7:f0:77:ce:ee:31:7b:38:b4:33:92:1e: f4:7a:5b:40:76:a1:a6:15:06:fb:23:9f:f6:1f:79:06:98:03: b5:56:29:e3:a1:5b:e4:63:f6:ca:e4:88:a9:f4:1f:ce:df:5b: ee:49:72:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjQwNTE4MTYyNTE4WhcNMjQwNTI1MTYyNTE4WjAYMRYwFAYD VQQDEw02NjQ4ZDY2ZS01MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum3EA6NiXZ1wzgM8Xlhjp8BlSNIxd6Q4Fy9DmKDN2DodlP2gLHiJTBMPBEsR xrHKcRkWX4OAMDDuLMttEmBsFkkbGfMF9+9XvlfAUm6LjWMUVpdD/tAydATXlFez c9NNcf4MZ+K5GAtUpOBziQTI9DtQ61dVVOT/FtNQ7bKGLA6cxn6v4yxXLyx29gXv wDCIUJenUvnFs+19aqZxZAmlpcN6GQmeCOUL86Gr5+B/lDXnU3/+XBYv4/UsCTJ9 jZgXpjiDSo1O33r9IHvKrcBO4R6NgcMLwHF4tbRIX7ihtBWOvBn5puXLcGJD3FDE KS19pqOWIN0jZ2egIefxUSRKdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnnp1zy chcYnG4+NQYe+jV6WG81MB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05Y VHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxqb5xX0O2Dos5X2j2BIExTj03laGrOx8t2bz0FgTUgtjc+40YApPJ yNgCQ5LSnIPM6CIMsNDe6bHf60ifD0tasXng+Uf6MPSAjgHJUb0IcGR+AaMrivpt WnWu5/KWakxg2iXNy1BkQfU6qQXPjYJlpKwgGGRkBzFr8RUfySj3MeqWAFJAFCxj QeDj1dILwBJKlH9xpNKyOzHDas2brBN73EPzZb1cLcguSD0l0EF1OFqTuarKqjWU LrCLDfNvFEdzWeM8PafSKt8ALsf38HfO7jF7OLQzkh70eltAdqGmFQb7I5/2H3kG mAO1VinjoVvkY/bK5Iip9B/O31vuSXK9 -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org