$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft File: D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft (raw, json) Hash identifier: EqG5E1MCA6q6ZcBfhRPGKo0m8aS9Lx/WtxvjJRPVPQ8= Subject key identifier: 3D:95:AD:E5:20:65:1C:E7:9C:80:68:98:30:5E:4D:8C:E3:13:D0:8B Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40 Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940 Certificate serial: 01EDB11B8F6272C40A32DBE3AC454F4D926BD95D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft Manifest number: 0161 Signing time: Mon 20 May 2024 02:43:21 +0000 Manifest this update: Mon 20 May 2024 02:38:21 +0000 Manifest next update: Tue 21 May 2024 04:09:21 +0000 Files and hashes: 1: D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl (hash: km6VvqnLWPWHK5pvLusIYGWcqTyCUk1uyC99gtIpRAU=) 2: 3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa (hash: NOGiiY918DvBlQquMQqchM/2tk+zFTCvEUe0hw6M5FA=) 3: 3130332e3137332e3232352e302f32342d3234203d3e20323036323634.roa (hash: lAIKGbxFVCbuZH4Unn4B5dmf+xIFD6IcrD7k7TnBr/g=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ed:b1:1b:8f:62:72:c4:0a:32:db:e3:ac:45:4f:4d:92:6b:d9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940 Validity Not Before: May 20 02:38:21 2024 GMT Not After : May 21 04:09:21 2024 GMT Subject: CN=3D95ADE520651CE79C806898305E4D8CE313D08B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:26:58:61:2c:5e:3a:31:c4:60:2a:ff:5d: 0e:7b:ce:82:48:28:5d:5d:4a:90:ce:b5:2b:2a:5e: 9a:6c:3b:45:23:51:e6:28:05:25:fd:63:eb:49:ab: 7b:2c:58:06:1a:d6:4c:95:98:43:33:67:24:33:f1: 92:b3:1a:2a:29:1e:f1:ff:72:49:41:21:ad:ab:c5: 3d:c8:60:f3:5e:2d:36:6c:2b:a0:50:9a:af:ad:4e: b7:4e:14:78:29:a9:06:44:d0:52:35:d6:aa:f8:71: c4:12:10:45:c1:22:9b:7d:8a:70:57:fd:d3:0b:75: c6:98:6b:10:64:2a:46:ca:16:7a:d3:19:c3:cb:7d: 0a:77:4e:ea:35:42:85:a0:71:52:1d:63:c4:79:83: e1:7c:83:3f:f1:be:b4:b4:3a:83:14:2f:23:e4:ff: f3:eb:c3:3b:f5:d9:ae:a2:63:1e:81:76:48:5f:16: e1:af:3c:c6:da:d4:e0:a1:02:aa:6b:d9:92:8b:dd: 9e:c1:20:4d:98:82:c6:9f:25:c5:58:ed:fd:23:1d: 90:3b:97:8f:df:be:30:17:8c:fe:7b:43:b5:f8:ff: 5a:07:33:32:d8:c4:c5:71:f8:d4:c7:c7:06:62:61: 13:1f:13:d2:2d:98:76:7e:40:25:9e:1d:21:32:70: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:95:AD:E5:20:65:1C:E7:9C:80:68:98:30:5E:4D:8C:E3:13:D0:8B X509v3 Authority Key Identifier: keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:70:9d:02:2e:e7:4b:ca:aa:56:05:47:1d:2c:73:6e:d2:90: a5:fa:9d:55:9d:1e:70:69:88:d8:7f:66:2f:76:8d:e0:6f:99: 01:7a:12:90:3b:26:eb:b1:30:8d:e8:a6:5f:12:1b:e7:d5:01: 12:64:a0:6e:ed:2e:77:5e:c4:65:43:2c:cc:c9:9a:32:97:17: 81:92:8c:cd:32:ac:c1:3a:1a:88:c5:fc:3c:21:5a:82:7e:72: c9:42:b0:25:83:a8:54:a7:d8:e1:02:b0:07:88:42:11:cd:83: d6:59:be:88:0c:77:e0:a8:9d:5a:d6:a4:c8:30:d5:2e:fd:3c: de:49:db:3e:cf:52:c4:04:ef:99:d8:12:6d:db:1e:a5:11:95: 54:f8:65:30:99:ec:77:59:4d:50:6b:04:1d:d2:cd:14:38:4e: 2c:39:e6:d3:f3:ba:e3:d8:86:a9:d6:87:de:ba:1a:48:e0:b3: a0:87:d9:0a:60:bc:22:62:7d:5d:61:a0:fd:55:6d:f8:30:54: b7:17:96:a3:28:b1:a6:be:e0:59:68:9f:ee:36:ed:75:c4:6a: 2e:f7:2f:67:e9:7f:3d:4f:c5:d2:19:66:8d:f6:54:a6:8a:1a: ea:2f:ba:2e:74:5d:14:d2:c7:50:9b:39:e0:7a:94:04:09:a7: 8d:03:b4:7e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAe2xG49icsQKMtvjrEVPTZJr2V0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTU0ODEwMDAwMTEwLwYDVQQFEyhEOTg4QjJEQTdG NDMwNUYwQ0RCOTNCRjg4QjZGNUE5REY5OEQ4OTQwMB4XDTI0MDUyMDAyMzgyMVoX DTI0MDUyMTA0MDkyMVowMzExMC8GA1UEAxMoM0Q5NUFERTUyMDY1MUNFNzlDODA2 ODk4MzA1RTREOENFMzEzRDA4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcoJlhhLF46McRgKv9dDnvOgkgoXV1KkM61Kypemmw7RSNR5igFJf1j60mr eyxYBhrWTJWYQzNnJDPxkrMaKike8f9ySUEhravFPchg814tNmwroFCar61Ot04U eCmpBkTQUjXWqvhxxBIQRcEim32KcFf90wt1xphrEGQqRsoWetMZw8t9CndO6jVC haBxUh1jxHmD4XyDP/G+tLQ6gxQvI+T/8+vDO/XZrqJjHoF2SF8W4a88xtrU4KEC qmvZkovdnsEgTZiCxp8lxVjt/SMdkDuXj9++MBeM/ntDtfj/WgczMtjExXH41MfH BmJhEx8T0i2Ydn5AJZ4dITJwlRcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ9la3l IGUc55yAaJgwXk2M4xPQizAfBgNVHSMEGDAWgBTZiLLaf0MF8M25O/iLb1qd+Y2J QDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNTQ4MTAwMDAvMC9EOTg4QjJE QTdGNDMwNUYwQ0RCOTNCRjg4QjZGNUE5REY5OEQ4OTQwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yWWl5Mm45REJm RE51VHY0aTI5YW5mbU5pVUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNTQ4 MTAwMDAvMC9EOTg4QjJEQTdGNDMwNUYwQ0RCOTNCRjg4QjZGNUE5REY5OEQ4OTQw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAgnCdAi7nS8qqVgVHHSxzbtKQpfqdVZ0ecGmI2H9mL3aN4G+Z AXoSkDsm67EwjeimXxIb59UBEmSgbu0ud17EZUMszMmaMpcXgZKMzTKswToaiMX8 PCFagn5yyUKwJYOoVKfY4QKwB4hCEc2D1lm+iAx34KidWtakyDDVLv083knbPs9S xATvmdgSbdsepRGVVPhlMJnsd1lNUGsEHdLNFDhOLDnm0/O649iGqdaH3roaSOCz oIfZCmC8ImJ9XWGg/VVt+DBUtxeWoyixpr7gWWif7jbtdcRqLvcvZ+l/PU/F0hlm jfZUpooa6i+6LnRdFNLHUJs54HqUBAmnjQO0fg== -----END CERTIFICATE-----Generated at Mon May 20 03:22:19 2024 by rpki-client on console-ams.rpki-client.org