$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft File: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json) Hash identifier: oLTdy8EW2QhGPJDmKZdsdcdtS8k1kh2f3N6j8ySinQE= Subject key identifier: 1E:C3:6D:90:45:D2:BF:F3:87:10:AC:87:CF:FC:47:85:DC:D7:18:CF Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 145F439ACDB6A157321E0AA182837997F3333A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft Manifest number: 03ED Signing time: Sat 25 May 2024 12:00:01 +0000 Manifest this update: Sat 25 May 2024 11:55:01 +0000 Manifest next update: Sun 26 May 2024 12:05:01 +0000 Files and hashes: 1: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: 9DJay/851lVwbvtEVU0xit+qNWZolzMOZNPHBme6QHk=) 2: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: 5aB8TDzNC812hBpfBTDPmClE4aSLFpKlSt59SN5tzLY=) 3: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: Yj/vQCGpT1bxP+bZFfOTwh9EopmeE90xQIzVl3Gejts=) 4: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: Rl4MN2Xw4+nqS9HwCi3mEej414TJXkF16bbqf5Ot+54=) 5: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: H0tbcTvCu85heTMZ9rNE06GL/TF681mLEl8J9Gcq2QY=) 6: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: BPdgeN1El31FAB5/ikh6EaWt2jGpovaQE4hgM5QksdA=) 7: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: h5d4nm6UDVIM1mHpAmBBMuYbnv7Z434/dGxh/e5XEXM=) Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 12:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5f:43:9a:cd:b6:a1:57:32:1e:0a:a1:82:83:79:97:f3:33:3a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: May 25 11:55:01 2024 GMT Not After : May 26 12:05:01 2024 GMT Subject: CN=1EC36D9045D2BFF38710AC87CFFC4785DCD718CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:82:70:60:1c:ce:cf:18:4d:fa:50:9e:19:59: 9e:c3:1b:91:b8:36:e9:2c:52:c9:dd:88:b6:ab:88: 4c:cc:fb:d6:eb:bd:e5:20:a5:a4:b7:62:4d:50:7d: a9:72:ac:a8:47:07:df:66:6f:e4:d9:19:50:db:3c: c2:ba:81:23:ea:cd:31:54:8e:86:96:83:2a:ee:0c: cf:e5:1a:de:ce:ae:cd:ac:31:62:25:28:3a:7c:0c: cb:b7:9f:5a:25:12:33:33:56:ff:7f:e7:a9:a3:35: 92:df:70:2a:fc:00:64:68:55:b4:9a:8e:09:a9:6f: b3:2b:fa:d0:14:87:41:72:8c:15:2c:49:32:f0:2e: f0:f7:25:8e:f1:b2:76:4c:10:a0:64:8d:fe:89:f4: f8:61:74:a9:65:ee:9b:cd:57:1e:34:b0:38:91:50: 73:43:25:59:da:d2:66:7d:a0:b6:15:a5:7c:4b:10: 03:27:1e:f7:42:3a:df:65:31:15:c7:4e:30:8e:28: 42:12:38:ed:34:37:aa:d0:7e:a8:39:7d:e3:d8:df: f6:08:01:a4:db:c1:3f:11:13:69:4b:2c:65:be:cb: 71:65:94:36:01:21:87:6a:ad:c8:d2:da:1a:e0:fb: 06:fc:7b:c2:53:56:08:4b:19:aa:b3:e4:93:c7:af: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C3:6D:90:45:D2:BF:F3:87:10:AC:87:CF:FC:47:85:DC:D7:18:CF X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f1:9a:bb:57:ad:c7:1c:36:80:7f:cf:7b:36:f3:d4:9b:57: 6c:7d:0a:2b:34:fe:71:62:27:1a:6a:ac:7b:db:66:25:72:f6: 7d:0a:56:1c:bc:bd:f9:0d:4f:94:56:45:10:b5:14:34:d9:66: 62:56:a7:89:91:07:af:6e:3b:3e:0a:14:36:27:d3:91:2f:df: 63:a1:70:52:7f:93:dc:1c:46:3d:96:8b:55:45:9f:a0:b8:52: fb:74:52:90:be:66:5f:82:77:a5:4e:e5:10:40:9d:60:2f:12: 49:bf:1c:e7:6a:5f:99:ce:95:a8:be:c6:6c:2b:a8:2b:cf:d0: 25:20:2a:38:3f:8e:1d:a1:0a:bb:1d:d8:52:fa:3f:2d:42:c2: 17:c2:38:ff:cf:19:15:c9:7a:85:89:47:5d:58:81:1d:e5:80: 1e:c2:ea:3a:c2:dc:c5:de:e3:ba:a9:54:7d:b3:36:b3:74:a1: 48:77:41:a3:a8:ad:30:bb:3a:26:33:0f:33:e8:b9:ed:99:9e: 20:15:f9:a7:27:29:a4:08:25:2f:f5:8f:90:94:f3:a7:9e:91: c1:6b:b4:6c:11:ef:92:0e:22:7a:88:eb:47:aa:5a:6a:b6:e9: 43:59:1d:28:bc:24:4e:00:61:47:17:f5:3d:f2:de:52:4d:45: b2:4d:b9:e9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUFF9Dms22oVcyHgqhgoN5l/MzOgIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI0MDUyNTExNTUwMVoX DTI0MDUyNjEyMDUwMVowMzExMC8GA1UEAxMoMUVDMzZEOTA0NUQyQkZGMzg3MTBB Qzg3Q0ZGQzQ3ODVEQ0Q3MThDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyCcGAczs8YTfpQnhlZnsMbkbg26SxSyd2ItquITMz71uu95SClpLdiTVB9 qXKsqEcH32Zv5NkZUNs8wrqBI+rNMVSOhpaDKu4Mz+Ua3s6uzawxYiUoOnwMy7ef WiUSMzNW/3/nqaM1kt9wKvwAZGhVtJqOCalvsyv60BSHQXKMFSxJMvAu8PcljvGy dkwQoGSN/on0+GF0qWXum81XHjSwOJFQc0MlWdrSZn2gthWlfEsQAyce90I632Ux FcdOMI4oQhI47TQ3qtB+qDl949jf9ggBpNvBPxETaUssZb7LcWWUNgEhh2qtyNLa GuD7Bvx7wlNWCEsZqrPkk8ev/2UCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQew22Q RdK/84cQrIfP/EeF3NcYzzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC68Zq7V63HHDaAf897NvPUm1dsfQorNP5xYicaaqx722YlcvZ9ClYcvL35DU+U VkUQtRQ02WZiVqeJkQevbjs+ChQ2J9ORL99joXBSf5PcHEY9lotVRZ+guFL7dFKQ vmZfgnelTuUQQJ1gLxJJvxznal+ZzpWovsZsK6grz9AlICo4P44doQq7HdhS+j8t QsIXwjj/zxkVyXqFiUddWIEd5YAewuo6wtzF3uO6qVR9szazdKFId0GjqK0wuzom Mw8z6LntmZ4gFfmnJymkCCUv9Y+QlPOnnpHBa7RsEe+SDiJ6iOtHqlpqtulDWR0o vCROAGFHF/U98t5STUWyTbnp -----END CERTIFICATE-----Generated at Sat May 25 12:53:18 2024 by rpki-client on console-ams.rpki-client.org