$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft File: GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json) Hash identifier: h0z3flzPywydhsWNUKn6X/xnTToXOWju8tQKAKLE0dQ= Subject key identifier: B2:1C:BA:4F:2A:B8:CD:ED:72:E5:19:77:E4:6B:9B:10:F3:2F:B2:EF Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1EB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft Manifest number: 1E9F Signing time: Fri 22 Nov 2024 16:03:12 +0000 Manifest this update: Fri 22 Nov 2024 16:03:12 +0000 Manifest next update: Fri 29 Nov 2024 16:03:12 +0000 Files and hashes: 1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: 6TjGYqdkV7li18eFmCawcN8qUMtEj8oU54F5ZMIccDw=) 2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: HYGTpF3m+keebY1nO0nXesz+kyNSH4xN+Rv84L1hYFk=) 3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: NJFUwrppMcdU/f2soCnzh8F94AFSgqwu8og6TAE+osA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7857 (0x1eb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Validity Not Before: Nov 22 16:03:12 2024 GMT Not After : Nov 29 16:03:12 2024 GMT Subject: CN=6740ab40-692f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:77:e9:04:4a:9b:02:02:a1:1d:0e:42:89: 7f:c1:6c:03:2d:27:bc:e8:eb:08:06:c0:30:61:82: 12:50:c0:a2:74:1e:bc:22:a6:24:6d:ff:59:28:fd: bd:da:43:00:91:b5:8c:02:0a:5d:62:b7:17:23:cc: 2a:11:12:b2:77:44:f8:ce:5b:15:cc:08:6c:2b:9e: 12:39:be:6f:c7:48:d4:de:d6:f4:b6:f9:2e:7a:27: 60:4d:8e:e6:95:e1:4f:60:2b:63:d7:be:a2:80:37: 5d:24:7d:42:66:47:dd:83:57:e4:01:14:08:6f:34: 25:f1:53:47:6d:ad:1e:fb:b1:ee:c3:d7:fa:a1:11: b4:92:8e:65:af:c5:70:c8:7c:7c:e9:f4:27:a1:8b: 52:60:1c:81:ae:0e:26:a7:51:4c:93:45:79:5e:30: 54:e9:3e:35:b1:8d:53:9f:6d:2d:82:9d:92:83:f6: 30:9b:6a:9b:cf:a5:57:44:18:7c:e2:9d:fe:15:28: d7:4d:53:5f:a6:e0:93:05:13:b6:f1:ab:c6:7a:71: 2b:cd:22:5a:09:c6:b7:d6:02:b2:f3:22:be:41:01: df:78:cf:6d:03:9b:30:d8:0f:20:6d:42:17:96:f3: a4:e9:87:43:43:c3:71:c9:d1:70:f1:25:f1:47:e3: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1C:BA:4F:2A:B8:CD:ED:72:E5:19:77:E4:6B:9B:10:F3:2F:B2:EF X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:39:29:2f:2e:e7:7b:40:70:7c:4f:1b:55:59:c6:f9:10:dd: 3a:92:4b:e2:73:a8:93:6b:8e:34:2e:92:4b:5a:a6:9e:eb:c4: 22:54:b0:1e:37:16:99:e6:5a:1b:3a:db:bf:63:42:f9:a6:aa: 00:0e:70:4a:a5:ab:9c:ff:e1:76:cb:42:16:54:a6:cd:bf:c1: 3b:cd:55:43:0f:36:7a:ce:0d:17:91:1e:53:82:50:d9:b4:d3: 68:8e:c0:82:10:8a:0f:dd:37:d2:f5:0e:0d:fe:1b:42:ce:c3: 4b:1b:33:58:af:f1:18:70:84:0c:5b:49:bb:f1:60:96:95:0c: ca:7b:46:3b:48:a1:06:f1:a8:51:e8:2f:3b:df:85:5d:ae:d2: d8:de:f0:04:e9:28:7b:a2:48:d9:c4:83:89:b7:83:e9:df:6e: f3:0b:a4:df:2b:64:25:1c:52:3d:d6:74:c5:f3:72:5d:a0:9a: 6d:71:a9:62:0c:e4:47:3e:c3:95:4c:20:d7:71:c6:18:f7:89: 59:07:ab:93:4d:3a:73:42:87:7c:19:8c:d0:f7:7f:82:70:5b: cb:81:ea:72:12:d6:af:c0:41:2c:10:78:78:22:63:d2:5e:d0: db:2e:b9:b9:20:d7:af:29:a1:d0:fd:c1:62:84:0c:de:95:95: cc:69:bd:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjQxMTIyMTYwMzEyWhcNMjQxMTI5MTYwMzEyWjAYMRYwFAYD VQQDEw02NzQwYWI0MC02OTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSN36QRKmwICoR0OQol/wWwDLSe86OsIBsAwYYISUMCidB68IqYkbf9ZKP29 2kMAkbWMAgpdYrcXI8wqERKyd0T4zlsVzAhsK54SOb5vx0jU3tb0tvkueidgTY7m leFPYCtj176igDddJH1CZkfdg1fkARQIbzQl8VNHba0e+7Huw9f6oRG0ko5lr8Vw yHx86fQnoYtSYByBrg4mp1FMk0V5XjBU6T41sY1Tn20tgp2Sg/Ywm2qbz6VXRBh8 4p3+FSjXTVNfpuCTBRO28avGenErzSJaCca31gKy8yK+QQHfeM9tA5sw2A8gbUIX lvOk6YdDQ8NxydFw8SXxR+NXIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIcuk8q uM3tcuUZd+RrmxDzL7LvMB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05Y VHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJOSkvLud7QHB8TxtVWcb5EN06kkvic6iTa440LpJLWqae68QiVLAe NxaZ5lobOtu/Y0L5pqoADnBKpauc/+F2y0IWVKbNv8E7zVVDDzZ6zg0XkR5TglDZ tNNojsCCEIoP3TfS9Q4N/htCzsNLGzNYr/EYcIQMW0m78WCWlQzKe0Y7SKEG8ahR 6C8734VdrtLY3vAE6Sh7okjZxIOJt4Pp327zC6TfK2QlHFI91nTF83JdoJptcali DORHPsOVTCDXccYY94lZB6uTTTpzQod8GYzQ93+CcFvLgepyEtavwEEsEHh4ImPS XtDbLrm5INevKaHQ/cFihAzelZXMab1f -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org