$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft File: GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json) Hash identifier: 908d00tLv4x8daa71h9IMXNINK53Lu8dc7TtYzheKU0= Subject key identifier: 50:9F:C0:D7:BC:E0:B7:26:5B:16:67:81:FE:0A:B1:22:DC:90:CE:5F Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1E4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft Manifest number: 1E38 Signing time: Sat 04 May 2024 16:29:01 +0000 Manifest this update: Sat 04 May 2024 16:29:01 +0000 Manifest next update: Sat 11 May 2024 16:29:01 +0000 Files and hashes: 1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: hVdTFmo6e5G2j9XjF0ViSuM0TbUT09bcCbHOtQIeMLE=) 2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: HYGTpF3m+keebY1nO0nXesz+kyNSH4xN+Rv84L1hYFk=) 3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: NJFUwrppMcdU/f2soCnzh8F94AFSgqwu8og6TAE+osA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7754 (0x1e4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Validity Not Before: May 4 16:29:01 2024 GMT Not After : May 11 16:29:01 2024 GMT Subject: CN=6636624d-6319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:fa:77:1b:1d:17:9a:ff:d7:3a:60:75:8a: ff:03:fe:18:c3:51:e6:8c:05:92:92:f5:2b:67:85: 0d:af:0e:d6:39:1c:b0:ae:d9:02:06:bc:3f:3f:f7: c4:75:01:6b:a0:09:5c:c7:cd:76:ee:5a:90:bb:d9: 5f:33:a1:03:1c:94:82:fa:37:63:47:4a:92:49:21: af:20:00:db:19:c5:6c:65:6a:09:ef:90:6f:4d:22: f8:bd:f8:58:e0:0b:1a:65:a2:30:1f:b2:6f:d1:f7: 76:17:89:00:f9:8b:fd:57:96:aa:9c:51:00:eb:57: ff:50:38:7f:d3:9f:f7:e7:a2:ff:5c:5e:55:3a:ee: 83:97:69:1a:b3:d6:1d:17:f1:69:e1:b9:f2:6d:71: 0b:c0:ff:61:6f:07:8f:78:ad:85:ee:58:06:82:fc: 49:01:58:2d:db:89:51:94:76:3d:1e:24:2e:56:e1: a5:b8:64:e7:d6:da:5f:ae:64:c6:08:5b:89:39:0c: 83:14:01:1b:ea:19:4b:de:88:3e:2d:25:ab:f4:73: b2:7d:be:6e:86:7f:ac:8e:61:00:f2:e5:5d:9b:11: 83:c3:78:84:1e:07:46:4b:2f:8f:bd:c6:be:90:03: fc:4f:0b:04:9e:9c:f5:84:e7:d9:d7:9a:81:0e:b3: f3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9F:C0:D7:BC:E0:B7:26:5B:16:67:81:FE:0A:B1:22:DC:90:CE:5F X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ce:2d:a4:7e:3b:d1:9b:c5:70:6a:0d:4d:28:2b:bb:e5:45: 4b:4c:5d:25:f3:83:c1:54:db:dc:26:96:b1:d4:ce:60:08:8b: 23:b1:bb:50:7a:d4:f0:5b:68:aa:ea:45:63:c6:67:11:c3:fc: f8:76:74:83:23:b2:f9:a2:79:a7:fa:31:4c:dd:42:4e:56:6b: 53:36:ae:95:15:53:fd:21:99:70:bb:b6:90:5d:c4:d8:df:f7: a1:38:27:78:df:dc:ce:e0:4d:17:8f:8c:c5:cd:0c:92:88:08: 91:a6:63:85:d0:87:ff:5c:63:4c:a9:c0:50:a7:16:e1:14:7c: 71:c6:b2:3f:05:74:f2:34:92:91:74:6c:ee:a2:18:64:46:78: 94:0c:68:2d:2f:ef:c9:43:44:f5:cd:22:93:5f:63:ad:44:8d: 73:cb:c8:1e:8d:c2:23:f1:5a:ff:60:a5:36:96:93:e2:04:74: ec:2e:bb:95:92:88:34:35:92:52:74:2d:fa:ff:dc:cc:53:dc: 60:42:38:33:a4:87:26:4b:de:ee:00:3f:f4:50:7b:43:2a:97: 22:d2:44:16:bd:d3:60:7e:40:8f:6b:26:60:88:f1:d5:f6:d6: 82:2c:aa:a9:75:db:cb:da:72:94:8a:82:8a:f7:e0:79:cc:9b: ea:5b:0b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjQwNTA0MTYyOTAxWhcNMjQwNTExMTYyOTAxWjAYMRYwFAYD VQQDEw02NjM2NjI0ZC02MzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqov6dxsdF5r/1zpgdYr/A/4Yw1HmjAWSkvUrZ4UNrw7WORywrtkCBrw/P/fE dQFroAlcx8127lqQu9lfM6EDHJSC+jdjR0qSSSGvIADbGcVsZWoJ75BvTSL4vfhY 4AsaZaIwH7Jv0fd2F4kA+Yv9V5aqnFEA61f/UDh/05/356L/XF5VOu6Dl2kas9Yd F/Fp4bnybXELwP9hbwePeK2F7lgGgvxJAVgt24lRlHY9HiQuVuGluGTn1tpfrmTG CFuJOQyDFAEb6hlL3og+LSWr9HOyfb5uhn+sjmEA8uVdmxGDw3iEHgdGSy+Pvca+ kAP8TwsEnpz1hOfZ15qBDrPz/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCfwNe8 4LcmWxZngf4KsSLckM5fMB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05Y VHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzzi2kfjvRm8Vwag1NKCu75UVLTF0l84PBVNvcJpax1M5gCIsjsbtQ etTwW2iq6kVjxmcRw/z4dnSDI7L5onmn+jFM3UJOVmtTNq6VFVP9IZlwu7aQXcTY 3/ehOCd439zO4E0Xj4zFzQySiAiRpmOF0If/XGNMqcBQpxbhFHxxxrI/BXTyNJKR dGzuohhkRniUDGgtL+/JQ0T1zSKTX2OtRI1zy8gejcIj8Vr/YKU2lpPiBHTsLruV kog0NZJSdC36/9zMU9xgQjgzpIcmS97uAD/0UHtDKpci0kQWvdNgfkCPayZgiPHV 9taCLKqpddvL2nKUioKK9+B5zJvqWwts -----END CERTIFICATE-----Generated at Sat May 4 17:44:38 2024 by rpki-client on console-ams.rpki-client.org