$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: bjmglpqZ+eUgwmpBNKEjaIFa5CYbytSohJNxcSWQHHo= Subject key identifier: 40:DE:72:B2:A4:44:98:1E:87:58:F6:DE:BC:6C:91:4D:22:1C:FD:3F Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 6B4320596571EBC768D3886D68E0AF54DBBEAFAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 02E8 Signing time: Tue 14 May 2024 05:38:57 +0000 Manifest this update: Tue 14 May 2024 05:33:57 +0000 Manifest next update: Wed 15 May 2024 07:55:57 +0000 Files and hashes: 1: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: H8gLNqh7yn+iSk+4wEVqjTJjqULkmSbmUc2nzD2G580=) 2: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: iIQUD9+YEQ81/NcOUX+hV+8k5sAgghpJApGeyoM7dlc=) 3: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: 4tm4MN9QTL5HgA19ejSzX7wIgqpXJptZ++BSfBg1Gjg=) 4: 4B1987D5160068092602529871C93EA320045A75.crl (hash: k9gHQIelKk8fF7OTD+qJvEVtd0uQ6+P/itCbB+RGfXE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 07:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:43:20:59:65:71:eb:c7:68:d3:88:6d:68:e0:af:54:db:be:af:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: May 14 05:33:57 2024 GMT Not After : May 15 07:55:57 2024 GMT Subject: CN=40DE72B2A444981E8758F6DEBC6C914D221CFD3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:48:3f:f0:29:5a:ad:ea:8f:5d:75:93:ca: 8c:23:7f:3c:6a:58:c3:e6:3a:d4:45:3d:68:b4:16: 52:2d:54:69:e0:09:f1:72:78:68:e1:00:92:9d:5c: fc:0e:7c:20:99:20:f7:5c:4f:10:be:37:5e:5f:3d: f0:f8:7f:2c:39:ab:16:60:f1:b4:ec:6f:b7:34:6d: 83:bf:46:08:ba:06:ff:ab:9f:7f:63:74:0e:e5:39: 9a:44:75:4c:66:2e:25:c0:b3:4f:d6:6d:3f:cc:f1: ff:15:be:3d:e8:dc:9a:3b:3a:7e:22:7c:4b:d0:1c: 64:86:5a:ff:89:3f:fb:82:38:ad:0a:0a:4d:a2:14: 0b:53:56:17:f8:ba:94:ef:5b:95:dc:15:96:c8:16: b9:9c:a2:72:99:75:26:fa:d0:0d:90:ec:f3:ec:06: 09:67:30:17:61:ee:6f:e8:f1:84:4c:f2:49:fa:e8: 7d:79:16:67:b3:6c:e8:b3:00:86:2f:d2:97:4f:28: 3e:19:6c:b6:b9:59:14:82:4b:24:d9:25:1f:ce:4f: 6f:af:ad:7d:5a:e9:32:f1:7c:63:cb:f2:31:f0:c3: 3b:95:65:49:3f:ac:48:73:a6:3c:31:d7:58:07:c8: f0:f6:17:0f:a0:cd:1d:93:82:d2:1c:42:91:f0:59: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:72:B2:A4:44:98:1E:87:58:F6:DE:BC:6C:91:4D:22:1C:FD:3F X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:08:38:1a:c2:af:10:eb:e2:6d:5e:cd:7f:08:2b:ae:fa:1b: c4:32:54:6c:03:d1:05:3b:ff:6f:2a:16:af:7d:8b:2e:b1:bf: 79:2c:43:6a:86:4a:2b:44:07:77:2a:06:a6:6a:68:81:e6:6d: f2:1b:ba:2f:8c:89:17:65:99:93:eb:a5:e5:1d:1b:2d:ea:30: c6:b3:7c:ce:5e:4b:f6:c4:3f:ae:f1:23:82:ca:36:0d:89:28: 36:08:6c:ae:bf:9f:59:3e:41:55:01:2c:34:f8:11:31:2b:d1: a8:c3:55:4f:06:bc:3f:7b:16:90:8a:1b:39:d7:97:ab:ab:ff: 57:7e:81:90:24:fa:cf:28:2a:7c:2e:3a:0a:4c:e6:89:d7:ab: 6f:1a:27:fb:6f:e7:1d:fd:a0:b9:ee:81:e6:48:5d:4e:cd:99: 9e:75:79:bf:f4:6f:98:91:f5:81:b7:86:e7:1d:f7:b3:3e:ae: 55:fd:f0:11:1a:f1:c4:fa:bb:a9:4a:56:1b:7c:13:58:38:73: e8:a8:74:07:3b:99:c5:c5:47:26:50:90:18:55:27:5f:a3:ed: 4b:f1:99:95:76:a1:99:12:d8:fb:9c:00:dd:4b:ed:9e:2c:a7: c1:47:a0:5d:33:79:ad:21:74:a7:40:04:ba:b2:97:a7:79:89: e0:bf:d3:7a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUa0MgWWVx68do04htaOCvVNu+r64wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI0MDUxNDA1MzM1N1oX DTI0MDUxNTA3NTU1N1owMzExMC8GA1UEAxMoNDBERTcyQjJBNDQ0OTgxRTg3NThG NkRFQkM2QzkxNEQyMjFDRkQzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+pSD/wKVqt6o9ddZPKjCN/PGpYw+Y61EU9aLQWUi1UaeAJ8XJ4aOEAkp1c /A58IJkg91xPEL43Xl898Ph/LDmrFmDxtOxvtzRtg79GCLoG/6uff2N0DuU5mkR1 TGYuJcCzT9ZtP8zx/xW+Pejcmjs6fiJ8S9AcZIZa/4k/+4I4rQoKTaIUC1NWF/i6 lO9bldwVlsgWuZyicpl1JvrQDZDs8+wGCWcwF2Hub+jxhEzySfrofXkWZ7Ns6LMA hi/Sl08oPhlstrlZFIJLJNklH85Pb6+tfVrpMvF8Y8vyMfDDO5VlST+sSHOmPDHX WAfI8PYXD6DNHZOC0hxCkfBZhsECAwEAAaOCAhswggIXMB0GA1UdDgQWBBRA3nKy pESYHodY9t68bJFNIhz9PzAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAAgg4GsKvEOvibV7NfwgrrvobxDJUbAPRBTv/byoWr32LLrG/ eSxDaoZKK0QHdyoGpmpogeZt8hu6L4yJF2WZk+ul5R0bLeowxrN8zl5L9sQ/rvEj gso2DYkoNghsrr+fWT5BVQEsNPgRMSvRqMNVTwa8P3sWkIobOdeXq6v/V36BkCT6 zygqfC46Ckzmiderbxon+2/nHf2gue6B5khdTs2ZnnV5v/RvmJH1gbeG5x33sz6u Vf3wERrxxPq7qUpWG3wTWDhz6Kh0BzuZxcVHJlCQGFUnX6PtS/GZlXahmRLY+5wA 3UvtniynwUegXTN5rSF0p0AEurKXp3mJ4L/Teg== -----END CERTIFICATE-----Generated at Tue May 14 10:37:56 2024 by rpki-client on console-fra.rpki-client.org