$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft File: 6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft (raw, json) Hash identifier: 8GT2utk7MgDjfuwX03JJ3+uimaI9Q6Ie238a6FFLwpo= Subject key identifier: CF:5E:2F:85:DB:22:BC:E3:3A:80:4C:5A:43:47:F4:25:F9:56:81:6F Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F Certificate serial: 51A88BED3B48DFB474AF6E47ADF6284894BABCA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft Manifest number: DC Signing time: Sun 19 May 2024 22:35:18 +0000 Manifest this update: Sun 19 May 2024 22:30:18 +0000 Manifest next update: Tue 21 May 2024 00:47:18 +0000 Files and hashes: 1: 3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa (hash: 3FQ1YpCkD4XjTn0HTw/Efu4/uQB9JYAjE48TnMIWhV8=) 2: 323430313a323036303a326630313a3a2f34382d3438203d3e20313437303230.roa (hash: zHjRQy4CHaOINV7bJnG2OlGNSE8WeIlWyKhF7yB98j0=) 3: 323430313a323036303a323030303a3a2f34302d3430203d3e20313437303230.roa (hash: OWi5s18994o+bbpwCKpNuSfeOxsN4BUm8AGNsUtpwvY=) 4: 323430313a323036303a313435353a3a2f34382d3438203d3e20313437303230.roa (hash: C4oJT5IHHPPpX8zAibXHwGdRduHc7q7JdNmUP6C2M0Q=) 5: 323430313a323036303a323031613a3a2f34382d3438203d3e20313437303230.roa (hash: X8ILcALGwgtDvZA7bmM2LZMbTbDrquWpSU/YilLpHAQ=) 6: 323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa (hash: nqu2FMfFuiX4Iyy+V5SRDwVzwN2OjWoO2awUFDd4Dfc=) 7: 323430313a323036303a323030303a3a2f34382d3438203d3e20313437303230.roa (hash: n9QY1ZgJ7rz+7vEYy0UzUDcPK9WF4hRAnukcU81renM=) 8: 6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl (hash: n+hF0TwUZ0RzbqjWGPv+7BGA+sGb2ceuARucB56xHJA=) 9: 323430313a323036303a326666313a3a2f34382d3438203d3e20313437303230.roa (hash: y1S158nhPS7JVr7vT8DlNzGrwqGuVvu0lHun/155XRs=) 10: 323430313a323036303a326630303a3a2f34382d3438203d3e20313437303230.roa (hash: VVfpJFldzwkHDZLJT6q0OZmaE083dTBl8aJjxwi+wQ0=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a8:8b:ed:3b:48:df:b4:74:af:6e:47:ad:f6:28:48:94:ba:bc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F Validity Not Before: May 19 22:30:18 2024 GMT Not After : May 21 00:47:18 2024 GMT Subject: CN=CF5E2F85DB22BCE33A804C5A4347F425F956816F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:3e:ca:bb:47:6d:5b:da:11:9d:85:14:fb: ec:13:45:54:43:d7:16:1c:eb:82:27:bc:09:6c:40: bb:cf:65:4e:f5:3c:11:78:13:86:fb:be:49:a6:09: 94:60:34:61:26:3a:e9:99:a7:a3:51:eb:05:40:d8: 82:49:de:c0:d5:9f:7f:e8:29:3a:ca:74:18:b8:fb: 69:3b:72:9a:5c:37:23:68:af:b0:c4:8b:ec:35:45: 7f:c4:c1:35:95:8a:28:93:72:c5:fe:ec:58:4d:bf: 15:7a:26:b7:b2:55:de:5b:9c:8a:cf:37:f0:fc:2d: d5:d5:36:95:d0:1c:b7:67:73:7c:50:d0:64:e9:42: d1:7b:ea:ce:ed:ac:cd:22:bd:70:d0:43:12:20:7a: 25:fc:bb:19:b1:e5:12:f1:54:82:c6:e5:ae:c9:f3: 85:6c:d2:93:9a:35:17:bb:0c:d0:8b:fc:85:48:01: 68:64:1d:0d:e1:4a:78:2f:ca:fc:ec:cd:c4:e8:0a: 5d:e5:de:e2:97:cc:2d:6a:32:3e:f9:2b:ac:6d:66: af:b1:e1:21:e3:b2:df:9f:61:76:8c:5a:71:dc:1b: 24:aa:59:d8:b2:67:ee:4a:33:b0:df:1f:5b:55:e4: 1f:99:94:db:80:5a:d7:b5:c0:8f:44:40:bc:a1:d7: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5E:2F:85:DB:22:BC:E3:3A:80:4C:5A:43:47:F4:25:F9:56:81:6F X509v3 Authority Key Identifier: keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:40:d8:de:dd:7c:00:a7:92:f8:cd:7f:d3:98:26:c9:f7:09: d0:16:60:27:a9:b0:94:e8:3a:90:2a:f0:4d:89:6c:74:de:fd: 70:3d:76:99:86:b6:61:e8:b9:60:f6:75:d8:12:e9:8b:30:65: 5e:26:26:11:d6:c8:9f:89:a3:af:74:74:01:70:db:cc:56:a3: fa:92:c5:e4:0b:9d:70:8e:23:8a:50:14:0c:78:d8:81:a6:84: 7e:01:fd:02:6d:d8:4b:d5:59:52:7c:e7:1c:27:92:92:fe:e1: 16:99:f6:8c:8a:3a:72:cd:8e:00:ec:15:4b:81:c4:ec:97:1e: 39:96:06:2a:70:b4:80:35:27:99:2c:31:45:ec:cf:1c:d8:f4: 29:ea:06:0b:ac:4d:5a:02:d4:78:68:dd:47:cc:64:a8:40:cb: 90:f6:55:90:e5:02:37:34:48:35:a2:95:f8:e7:7c:97:9d:e3: 9e:f7:85:29:0e:3f:d8:32:01:32:b0:f1:08:84:15:b2:90:8c: 62:10:7e:66:4c:97:51:a5:b8:8c:66:dd:77:d2:9d:6b:0c:8d: f9:f3:5b:fe:c1:c4:c7:4b:b0:7d:90:bd:b3:27:00:f0:ef:fd: 50:f2:08:56:41:41:e2:08:1e:22:0f:f0:fe:ab:35:41:03:5d: b7:c6:99:2f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUaiL7TtI37R0r25HrfYoSJS6vKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg2MjI4QTNDNkQ2 Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdGMB4XDTI0MDUxOTIyMzAxOFoX DTI0MDUyMTAwNDcxOFowMzExMC8GA1UEAxMoQ0Y1RTJGODVEQjIyQkNFMzNBODA0 QzVBNDM0N0Y0MjVGOTU2ODE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOfPsq7R21b2hGdhRT77BNFVEPXFhzrgie8CWxAu89lTvU8EXgThvu+SaYJ lGA0YSY66Zmno1HrBUDYgknewNWff+gpOsp0GLj7aTtymlw3I2ivsMSL7DVFf8TB NZWKKJNyxf7sWE2/FXomt7JV3lucis838Pwt1dU2ldAct2dzfFDQZOlC0Xvqzu2s zSK9cNBDEiB6Jfy7GbHlEvFUgsblrsnzhWzSk5o1F7sM0Iv8hUgBaGQdDeFKeC/K /OzNxOgKXeXe4pfMLWoyPvkrrG1mr7HhIeOy359hdoxacdwbJKpZ2LJn7kozsN8f W1XkH5mU24Ba17XAj0RAvKHXMcsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTPXi+F 2yK84zqATFpDR/Ql+VaBbzAfBgNVHSMEGDAWgBRiKKPG1jeAFpL319SCUdrTajzb fzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC82MjI4QTND NkQ2Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZaWlqeHRZM2dC YVM5OWZVZ2xIYTAybzgyMzguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0 RDAwMDAvMC82MjI4QTNDNkQ2Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdG Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAvEDY3t18AKeS+M1/05gmyfcJ0BZgJ6mwlOg6kCrwTYlsdN79 cD12mYa2Yei5YPZ12BLpizBlXiYmEdbIn4mjr3R0AXDbzFaj+pLF5AudcI4jilAU DHjYgaaEfgH9Am3YS9VZUnznHCeSkv7hFpn2jIo6cs2OAOwVS4HE7JceOZYGKnC0 gDUnmSwxRezPHNj0KeoGC6xNWgLUeGjdR8xkqEDLkPZVkOUCNzRINaKV+Od8l53j nveFKQ4/2DIBMrDxCIQVspCMYhB+ZkyXUaW4jGbdd9KdawyN+fNb/sHEx0uwfZC9 sycA8O/9UPIIVkFB4ggeIg/w/qs1QQNdt8aZLw== -----END CERTIFICATE-----Generated at Sun May 19 23:43:27 2024 by rpki-client on console-fra.rpki-client.org