$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft File: 130F57124A8921F00083A228FEBE2B78373015E3.mft (raw, json) Hash identifier: AEFfHr05aCCNhzm0+tzLa6QtuA7VwQWoChH0oe7K6r8= Subject key identifier: 04:AD:C3:E2:D8:62:98:C5:0B:7F:13:C8:A4:A7:43:DF:78:59:CA:C8 Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3 Certificate issuer: /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3 Certificate serial: 2888FB275B916C176B147D9DECDCA7B6F2DD7D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft Manifest number: 01CA Signing time: Fri 22 Nov 2024 00:28:13 +0000 Manifest this update: Fri 22 Nov 2024 00:23:13 +0000 Manifest next update: Sat 23 Nov 2024 02:14:13 +0000 Files and hashes: 1: 130F57124A8921F00083A228FEBE2B78373015E3.crl (hash: 1XZA6/8Keyl1X2obHINezWnGfY7xltV1ayj1cF4mnEY=) 2: 3130332e34392e34312e302f32342d3234203d3e20323036313530.roa (hash: Zl/k8hek4FF2ugApRyMvZfhd17cRgCGiY7i/HejrNRA=) 3: 3130332e34392e34332e302f32342d3234203d3e20383334.roa (hash: DN+gjpJlNzwcr+Q1bAt0d4BvyVC83vvLd6Vlc7mWFCw=) 4: 3130332e34392e34302e302f32342d3234203d3e203630373831.roa (hash: StQcUJyxIUAYGqA/t1ju0hqk9uIXXDiq/hlsysqbTT0=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 02:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:88:fb:27:5b:91:6c:17:6b:14:7d:9d:ec:dc:a7:b6:f2:dd:7d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3 Validity Not Before: Nov 22 00:23:13 2024 GMT Not After : Nov 23 02:14:13 2024 GMT Subject: CN=04ADC3E2D86298C50B7F13C8A4A743DF7859CAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:de:38:56:4f:45:5e:77:a0:cd:7c:fb:11: 41:0d:12:b1:18:43:5e:4b:09:e9:0f:34:c8:4d:7c: 9f:f9:76:34:53:2c:c8:b4:01:dc:3a:ce:a2:07:9d: 3f:d4:2f:b6:63:df:cc:b4:bb:72:3d:7e:5c:f5:b0: 9c:49:57:0a:56:a8:d5:ef:3d:16:74:83:20:70:ba: 05:eb:00:3a:59:59:b9:ff:d2:64:af:f2:26:d6:cb: f9:de:64:8f:9f:c3:bf:23:91:2f:e3:f2:cc:6f:3e: 4a:be:72:09:c5:40:68:2d:06:2e:27:ba:1e:a9:62: d9:2e:a1:a9:58:34:b2:67:db:fd:df:f7:aa:ce:10: 12:c2:d9:a5:ed:51:be:07:b7:c3:86:a8:cd:24:a5: 04:e0:69:5b:f3:3d:0f:e7:5a:2e:fa:28:32:3d:9b: 7a:0e:3e:ad:ea:30:e3:83:5e:c6:f1:7b:67:42:d1: 25:97:a5:ef:cd:1d:87:4f:a2:9e:19:3f:25:18:77: d7:58:ff:fe:f3:8e:46:9f:a4:6a:71:15:94:14:ce: 05:c7:18:7b:04:7f:73:95:62:2c:66:26:77:0a:cd: 1f:88:78:de:76:b9:a2:7b:d3:19:c3:44:4d:8e:93: ff:35:1c:43:63:24:32:22:8d:f3:cb:08:33:fd:98: 4d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AD:C3:E2:D8:62:98:C5:0B:7F:13:C8:A4:A7:43:DF:78:59:CA:C8 X509v3 Authority Key Identifier: keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b7:a8:5d:fe:61:f2:7b:d0:4c:ea:36:47:03:f6:60:f7:13: 35:16:62:78:7b:f4:9b:de:a0:28:cc:fb:55:9f:31:2a:7c:9a: c5:70:8d:4b:27:3a:15:28:4a:f3:a8:03:2d:c8:f1:d1:5f:91: 69:76:64:c8:f0:88:ca:74:76:11:b9:66:b6:0a:18:bc:d4:13: be:bd:75:a4:29:fa:94:4b:4a:66:c1:12:85:13:55:f7:be:69: 4a:cc:50:3c:df:3c:cb:a1:1f:6d:70:65:7f:40:3b:84:d1:35: ce:8c:0c:4f:44:c5:7a:83:5c:8e:db:0b:4d:63:12:55:63:cb: 4f:93:76:84:24:bc:df:82:54:2d:74:6d:16:f9:8c:3d:2f:9c: 1d:8a:82:02:43:e6:e4:90:f9:f4:62:cb:4f:f3:03:f9:1a:46: 5e:36:7a:42:e3:e8:db:ca:8e:3a:28:1f:8b:48:bf:e7:e0:32: d1:8e:2b:47:9a:ef:d5:c6:ee:0b:bc:33:b5:2b:03:c7:0c:20: 99:9b:f5:d4:e9:0c:1b:cc:de:e8:66:c0:1d:d0:a6:72:c6:00: 47:a3:ba:2f:ec:d0:99:9e:a8:ff:16:64:84:c6:80:04:2e:89: b1:58:6b:a3:8f:f4:c0:76:b4:eb:80:e5:b3:15:fc:cb:fb:fa: 91:b5:c0:17 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKIj7J1uRbBdrFH2d7NyntvLdfSUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjdFRUIwMDAwMTEwLwYDVQQFEygxMzBGNTcxMjRB ODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUzMB4XDTI0MTEyMjAwMjMxM1oX DTI0MTEyMzAyMTQxM1owMzExMC8GA1UEAxMoMDRBREMzRTJEODYyOThDNTBCN0Yx M0M4QTRBNzQzREY3ODU5Q0FDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ073jhWT0Ved6DNfPsRQQ0SsRhDXksJ6Q80yE18n/l2NFMsyLQB3DrOoged P9QvtmPfzLS7cj1+XPWwnElXClao1e89FnSDIHC6BesAOllZuf/SZK/yJtbL+d5k j5/DvyORL+PyzG8+Sr5yCcVAaC0GLie6Hqli2S6hqVg0smfb/d/3qs4QEsLZpe1R vge3w4aozSSlBOBpW/M9D+daLvooMj2beg4+reow44NexvF7Z0LRJZel780dh0+i nhk/JRh311j//vOORp+kanEVlBTOBccYewR/c5ViLGYmdwrNH4h43na5onvTGcNE TY6T/zUcQ2MkMiKN88sIM/2YTS8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQErcPi 2GKYxQt/E8ikp0PfeFnKyDAfBgNVHSMEGDAWgBQTD1cSSokh8ACDoij+vit4NzAV 4zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyN0VFQjAwMDAvMC8xMzBGNTcx MjRBODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUzLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FdzlYRWtxSklm QUFnNklvX3I0cmVEY3dGZU0uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyN0VF QjAwMDAvMC8xMzBGNTcxMjRBODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUz Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAUreoXf5h8nvQTOo2RwP2YPcTNRZieHv0m96gKMz7VZ8xKnya xXCNSyc6FShK86gDLcjx0V+RaXZkyPCIynR2EblmtgoYvNQTvr11pCn6lEtKZsES hRNV975pSsxQPN88y6EfbXBlf0A7hNE1zowMT0TFeoNcjtsLTWMSVWPLT5N2hCS8 34JULXRtFvmMPS+cHYqCAkPm5JD59GLLT/MD+RpGXjZ6QuPo28qOOigfi0i/5+Ay 0Y4rR5rv1cbuC7wztSsDxwwgmZv11OkMG8ze6GbAHdCmcsYAR6O6L+zQmZ6o/xZk hMaABC6JsVhro4/0wHa064DlsxX8y/v6kbXAFw== -----END CERTIFICATE-----Generated at Fri Nov 22 02:39:56 2024 by rpki-client on console-ams.rpki-client.org