$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft File: BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft (raw, json) Hash identifier: 58AJH4HEjEUO/skW/Vr7xoiUZQc3QH5h3NQlYxy5j+8= Subject key identifier: 0E:CC:2C:2D:C7:B7:B7:7D:79:72:A6:C8:96:12:01:AF:87:B8:23:11 Authority key identifier: BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24 Certificate issuer: /CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24 Certificate serial: 0F6469312670966733FC3262C86FE85D154067E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft Manifest number: 0231 Signing time: Sun 19 May 2024 12:12:57 +0000 Manifest this update: Sun 19 May 2024 12:07:57 +0000 Manifest next update: Mon 20 May 2024 12:44:57 +0000 Files and hashes: 1: 3130332e3134312e36382e302f32332d3234203d3e20383334.roa (hash: oZ1FfZRe8bZrSaP+qYylXbwCltzBW73qMGRdZbl2km8=) 2: 323430353a393234303a3a2f33322d3332203d3e203631333137.roa (hash: T3lI5I0ibMwot2kfzDeDXjdHqZ3J+lsRr0fSaqNQxq8=) 3: BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl (hash: 73gns6Nbw9eo0KXe89LcQtcRMbcZ7frRbBUu4RcJe40=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 12:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:64:69:31:26:70:96:67:33:fc:32:62:c8:6f:e8:5d:15:40:67:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24 Validity Not Before: May 19 12:07:57 2024 GMT Not After : May 20 12:44:57 2024 GMT Subject: CN=0ECC2C2DC7B7B77D7972A6C8961201AF87B82311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:8b:3e:f8:a9:ad:23:52:b7:c5:a3:42:1e: 45:3c:0c:25:16:07:68:48:df:93:74:a8:85:04:52: 99:c1:a2:0e:4e:a8:23:d7:d0:e3:38:d9:8f:ef:d8: c9:76:da:7b:1a:9e:05:a6:64:4c:7f:e0:ab:1a:01: bb:c6:f3:c7:5c:75:a6:ff:b7:0d:ca:e2:28:85:5a: a3:97:1c:37:2f:18:00:40:99:c4:28:83:30:36:6a: ea:50:a1:f8:1e:0e:48:4c:a5:5e:8d:c0:0c:4d:36: 3f:b3:b8:e2:d5:5e:db:81:65:dc:7b:dd:f5:33:17: d1:ef:f8:76:c1:0a:52:2b:9d:7b:6f:16:51:a2:02: e0:b9:91:5c:85:86:0f:4e:11:d1:5b:80:e0:d2:18: f1:a6:1c:d7:1e:95:42:25:ff:36:51:93:15:b3:fb: 00:da:8e:3d:38:24:e8:f3:78:fd:73:1c:9b:d5:37: 5e:c0:a3:f3:a6:f2:51:1e:16:ea:9a:0a:c9:04:eb: 93:29:f1:32:75:c0:eb:65:af:c8:75:31:94:fe:80: d3:09:5a:48:db:8d:a4:37:6e:d4:26:01:c1:cf:91: d1:77:c7:62:11:f6:d2:f3:eb:6e:18:08:9d:4c:b4: a5:22:6b:dc:c5:14:70:3c:2f:95:aa:d1:09:f8:ec: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:2C:2D:C7:B7:B7:7D:79:72:A6:C8:96:12:01:AF:87:B8:23:11 X509v3 Authority Key Identifier: keyid:BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ef:32:1b:ec:fe:6b:ef:6c:67:06:a7:e4:6a:c7:cf:1f:bf: 35:a3:05:af:c0:22:57:ce:f9:d8:d8:c6:bd:49:11:50:84:10: 62:39:2d:02:27:03:ec:ff:ab:93:d3:6f:82:ef:0f:42:79:83: a4:c8:a6:47:06:01:23:76:eb:4f:e4:d3:57:20:44:72:48:ee: 0a:96:34:d6:22:d6:c7:ea:ba:30:c8:1b:26:83:40:e4:19:de: e1:57:3a:6b:a8:c4:fc:54:fd:db:81:af:20:f3:b8:b6:b3:4f: 8c:7e:da:62:27:2a:58:b3:f5:a6:09:45:62:2e:91:36:93:dc: fc:36:ff:d2:78:30:96:e6:30:d1:78:09:3f:e0:93:4f:b1:57: 17:b8:90:36:a9:07:3a:29:18:c5:72:eb:d0:10:23:f8:60:94: 63:f5:2c:cb:04:d1:e2:20:4b:25:a0:aa:ae:1d:33:27:8c:db: fd:65:e8:66:90:b0:64:92:90:23:af:6c:d8:3b:6b:5e:c8:0e: 34:9b:13:8e:20:cf:3e:70:6f:51:26:04:08:d2:35:90:7b:1c: 51:35:4c:b8:d0:20:d1:63:c5:1a:80:45:19:42:f0:33:eb:5c: a5:e7:c5:61:62:ca:65:8e:f7:33:cb:e9:bb:5c:39:e2:f4:bf: f7:f1:2c:f3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUD2RpMSZwlmcz/DJiyG/oXRVAZ+MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODU3ODEwMDAwMTEwLwYDVQQFEyhCRUNFQjZGNzZB MTlCODEyMDhGM0QzNDAyNjE3RjUxQUU2OUU4QzI0MB4XDTI0MDUxOTEyMDc1N1oX DTI0MDUyMDEyNDQ1N1owMzExMC8GA1UEAxMoMEVDQzJDMkRDN0I3Qjc3RDc5NzJB NkM4OTYxMjAxQUY4N0I4MjMxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjKiz74qa0jUrfFo0IeRTwMJRYHaEjfk3SohQRSmcGiDk6oI9fQ4zjZj+/Y yXbaexqeBaZkTH/gqxoBu8bzx1x1pv+3DcriKIVao5ccNy8YAECZxCiDMDZq6lCh +B4OSEylXo3ADE02P7O44tVe24Fl3Hvd9TMX0e/4dsEKUiude28WUaIC4LmRXIWG D04R0VuA4NIY8aYc1x6VQiX/NlGTFbP7ANqOPTgk6PN4/XMcm9U3XsCj86byUR4W 6poKyQTrkynxMnXA62WvyHUxlP6A0wlaSNuNpDdu1CYBwc+R0XfHYhH20vPrbhgI nUy0pSJr3MUUcDwvlarRCfjssNkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQOzCwt x7e3fXlypsiWEgGvh7gjETAfBgNVHSMEGDAWgBS+zrb3ahm4Egjz00AmF/Ua5p6M JDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4NTc4MTAwMDAvMC9CRUNFQjZG NzZBMTlCODEyMDhGM0QzNDAyNjE3RjUxQUU2OUU4QzI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92czYyOTJvWnVC SUk4OU5BSmhmMUd1YWVqQ1EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4NTc4 MTAwMDAvMC9CRUNFQjZGNzZBMTlCODEyMDhGM0QzNDAyNjE3RjUxQUU2OUU4QzI0 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAqO8yG+z+a+9sZwan5GrHzx+/NaMFr8AiV8752NjGvUkRUIQQ YjktAicD7P+rk9Nvgu8PQnmDpMimRwYBI3brT+TTVyBEckjuCpY01iLWx+q6MMgb JoNA5Bne4Vc6a6jE/FT924GvIPO4trNPjH7aYicqWLP1pglFYi6RNpPc/Db/0ngw luYw0XgJP+CTT7FXF7iQNqkHOikYxXLr0BAj+GCUY/UsywTR4iBLJaCqrh0zJ4zb /WXoZpCwZJKQI69s2DtrXsgONJsTjiDPPnBvUSYECNI1kHscUTVMuNAg0WPFGoBF GULwM+tcpefFYWLKZY73M8vpu1w54vS/9/Es8w== -----END CERTIFICATE-----Generated at Sun May 19 13:38:13 2024 by rpki-client on console-ams.rpki-client.org