$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: suSZSewqpo/C8vOxlMvzhg9w/QwCaVWDUgOBwFUB3gE= Subject key identifier: F3:BC:B6:55:BF:66:97:F2:9E:20:F7:18:65:19:3E:11:61:E0:59:21 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 45ACF1FBE62F5FC7F59D4CFA94A1D02E41A44609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 03E5 Signing time: Mon 20 May 2024 00:00:01 +0000 Manifest this update: Sun 19 May 2024 23:55:01 +0000 Manifest next update: Tue 21 May 2024 01:48:01 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: Aqr8t8R6/Pm5VLL9DvbxrtDcMfZwZSDzHC7CDBdSxtg=) 2: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: Rl4MN2Xw4+nqS9HwCi3mEej414TJXkF16bbqf5Ot+54=) 3: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: BPdgeN1El31FAB5/ikh6EaWt2jGpovaQE4hgM5QksdA=) 4: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: 5aB8TDzNC812hBpfBTDPmClE4aSLFpKlSt59SN5tzLY=) 5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 9DJay/851lVwbvtEVU0xit+qNWZolzMOZNPHBme6QHk=) 6: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: h5d4nm6UDVIM1mHpAmBBMuYbnv7Z434/dGxh/e5XEXM=) 7: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: 9Gk+CbLwpu59Xho3ok9eeYAYnGE6eMEOcu0xPhigByI=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 01:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ac:f1:fb:e6:2f:5f:c7:f5:9d:4c:fa:94:a1:d0:2e:41:a4:46:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: May 19 23:55:01 2024 GMT Not After : May 21 01:48:01 2024 GMT Subject: CN=F3BCB655BF6697F29E20F71865193E1161E05921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f1:d3:79:19:71:77:99:55:de:17:e3:99:00: 39:5a:58:50:e4:91:d6:90:d5:06:d5:f2:6e:cb:61: 5e:e0:22:b8:8b:ab:99:3c:da:ad:0e:2c:5d:3f:07: 4d:87:3a:79:5e:36:16:aa:18:89:6a:1f:6e:c2:95: 47:76:91:f2:83:46:ab:f8:d4:49:af:6e:b7:98:eb: 08:a0:02:74:3f:32:91:ff:cb:8f:55:ed:e8:81:8f: 4a:26:93:f0:3f:a2:4b:1e:ea:b7:37:7c:1f:50:f0: 1b:c0:11:f5:b4:53:11:dc:10:56:f4:c9:a3:25:7b: 1e:57:50:d9:f5:57:84:27:e3:84:8f:81:14:06:ec: 44:eb:f1:f2:e8:11:07:04:52:09:93:f7:28:97:e5: 38:72:41:d0:3e:ed:26:63:be:b7:88:3e:bc:bb:20: 9b:dd:1e:50:b7:e6:b1:56:53:d2:1d:d1:f3:e8:43: 64:33:25:52:d7:5b:50:ee:2c:17:0b:79:3c:f7:91: 34:6d:28:e9:6c:cf:5f:47:ff:bf:ee:2c:87:8f:18: 01:f4:cf:fc:ae:ce:1d:45:ec:7f:74:40:8a:bb:4c: e5:8f:6f:e8:d0:5d:76:37:da:79:5a:08:9e:85:57: d7:69:55:11:36:ab:53:e4:8b:0b:0b:4c:5f:2e:24: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BC:B6:55:BF:66:97:F2:9E:20:F7:18:65:19:3E:11:61:E0:59:21 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c4:d3:c4:d1:a4:3a:b0:01:fa:ef:8a:df:5d:50:8e:3d:e0: 88:4e:3e:27:62:f3:72:c2:1c:c3:b6:64:05:35:63:be:0a:a5: c0:f0:cd:94:b1:0d:b6:2b:7c:98:d6:f4:fc:3d:42:e0:d3:83: 81:fa:bd:9f:23:d7:ba:7a:f3:46:50:e4:c5:12:12:68:a3:b4: 49:69:12:fe:19:ac:80:b7:97:1f:5a:11:f6:75:95:58:f1:1c: b3:e1:58:ba:da:da:e1:e3:1b:c7:f7:f0:99:7e:d9:2d:d7:e2: 71:b0:24:2b:2b:eb:41:81:b1:42:26:7d:64:66:c9:8c:5b:c1: c8:bc:31:62:68:10:28:d5:4d:0d:62:06:b9:34:8e:ff:a8:96: 65:b9:63:e4:85:52:0f:79:2f:6b:0e:3b:1a:55:5a:9b:76:c0: 7a:e1:03:fb:6c:24:a4:4a:7f:35:e8:de:dc:a4:8e:7f:c7:2b: f2:34:95:be:18:85:3d:08:7f:a1:61:65:5d:d4:15:b9:84:70: cb:6e:66:02:16:06:5c:6e:ec:78:38:a9:55:75:3b:e7:b6:bc: 22:e5:1c:64:ff:fb:d1:b6:60:2e:20:a8:0c:a2:17:71:df:3c: 7f:47:02:c1:b4:53:d5:ac:44:42:65:75:11:ad:fe:b5:9d:6e: 14:f3:8f:2e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIURazx++YvX8f1nUz6lKHQLkGkRgkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI0MDUxOTIzNTUwMVoX DTI0MDUyMTAxNDgwMVowMzExMC8GA1UEAxMoRjNCQ0I2NTVCRjY2OTdGMjlFMjBG NzE4NjUxOTNFMTE2MUUwNTkyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPfx03kZcXeZVd4X45kAOVpYUOSR1pDVBtXybsthXuAiuIurmTzarQ4sXT8H TYc6eV42FqoYiWofbsKVR3aR8oNGq/jUSa9ut5jrCKACdD8ykf/Lj1Xt6IGPSiaT 8D+iSx7qtzd8H1DwG8AR9bRTEdwQVvTJoyV7HldQ2fVXhCfjhI+BFAbsROvx8ugR BwRSCZP3KJflOHJB0D7tJmO+t4g+vLsgm90eULfmsVZT0h3R8+hDZDMlUtdbUO4s Fwt5PPeRNG0o6WzPX0f/v+4sh48YAfTP/K7OHUXsf3RAirtM5Y9v6NBddjfaeVoI noVX12lVETarU+SLCwtMXy4kVYcCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTzvLZV v2aX8p4g9xhlGT4RYeBZITAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6xNPE0aQ6sAH674rfXVCOPeCITj4nYvNywhzDtmQFNWO+CqXA8M2UsQ22K3yY 1vT8PULg04OB+r2fI9e6evNGUOTFEhJoo7RJaRL+GayAt5cfWhH2dZVY8Ryz4Vi6 2trh4xvH9/CZftkt1+JxsCQrK+tBgbFCJn1kZsmMW8HIvDFiaBAo1U0NYga5NI7/ qJZluWPkhVIPeS9rDjsaVVqbdsB64QP7bCSkSn816N7cpI5/xyvyNJW+GIU9CH+h YWVd1BW5hHDLbmYCFgZcbux4OKlVdTvntrwi5Rxk//vRtmAuIKgMohdx3zx/RwLB tFPVrERCZXURrf61nW4U848u -----END CERTIFICATE-----Generated at Mon May 20 00:52:46 2024 by rpki-client on console-ams.rpki-client.org