$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json) Hash identifier: m4O9PwQ0O6Kr7Rx3kRG5WijQGyIUtUu4gdKvhmbpXT8= Subject key identifier: 24:DC:7D:87:18:CB:48:0B:9F:97:8F:2A:C1:A7:4E:DC:BF:5F:EC:23 Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Certificate serial: 1261834635A31CFE4A08EF1282C03EA3CCE9A15E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft Manifest number: 1A Signing time: Thu 21 Nov 2024 19:28:13 +0000 Manifest this update: Thu 21 Nov 2024 19:23:13 +0000 Manifest next update: Fri 22 Nov 2024 21:39:13 +0000 Files and hashes: 1: 3130332e3232332e3138362e302f32332d3233203d3e20323132323338.roa (hash: 0583AX/23YYl/Sjqp9hGA+KayBfgA5Vq+fnJI/lfcEQ=) 2: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: l4/DMwSbzVe1IyxoGh0aS4pNMb5p3DxoGMbALcwKBCw=) 3: 3130332e3232332e3138342e302f32332d3234203d3e20313531313036.roa (hash: CBbZdYOvzs1t+tqtDF6Ts0Z4cSe+M4/U5oUl3sp2oLk=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 21:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:61:83:46:35:a3:1c:fe:4a:08:ef:12:82:c0:3e:a3:cc:e9:a1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0 Validity Not Before: Nov 21 19:23:13 2024 GMT Not After : Nov 22 21:39:13 2024 GMT Subject: CN=24DC7D8718CB480B9F978F2AC1A74EDCBF5FEC23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:1c:88:43:8c:ae:e3:7a:33:20:c6:10:3f: a4:69:ec:21:36:d5:86:04:f5:28:75:f4:9c:6e:8a: 41:4b:22:2f:9a:e5:6b:68:82:f4:27:b4:16:b8:50: 8b:f5:22:b1:77:c2:f2:bd:80:8d:c6:ec:1b:a7:d8: 8b:7a:b5:19:69:8d:cf:b7:b5:fc:be:8d:68:bc:65: 2b:d3:42:57:d4:48:ec:e6:81:c4:83:e0:fe:d7:63: ac:e1:1c:14:49:ee:4c:da:f0:2e:3b:a8:b6:a7:19: 88:1b:1b:58:3f:d6:9f:50:aa:b1:a8:07:ac:a4:63: 0f:77:82:d4:76:3f:8c:ee:61:26:ae:1c:8a:c5:9f: 5d:85:10:87:9e:74:d9:c2:98:63:d9:9d:69:38:19: 08:2c:cc:5c:a5:82:d9:f6:f3:31:64:da:29:90:d2: e3:32:f5:26:8c:37:3f:78:50:ae:8c:07:e3:9c:bf: e3:36:db:64:0f:d3:bf:7c:f5:55:94:24:40:ea:dd: df:50:18:31:e8:2c:37:f4:48:a5:07:46:ac:a3:b0: 84:32:a9:e6:3d:d4:ff:ac:fe:cd:f2:1a:45:90:5e: 99:e7:09:d2:bf:2b:38:c4:0d:3f:33:5f:dd:94:74: d1:d6:69:bb:e4:b6:a7:55:40:7f:57:d6:30:55:fb: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DC:7D:87:18:CB:48:0B:9F:97:8F:2A:C1:A7:4E:DC:BF:5F:EC:23 X509v3 Authority Key Identifier: keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:a0:21:56:d6:0a:05:76:00:ac:c7:6c:dc:82:54:99:69:ce: 62:d7:38:85:a0:f4:ea:09:57:61:31:e4:e5:0a:15:7b:13:55: 34:c4:c3:ab:32:90:b9:39:92:49:76:a1:d1:e3:41:4d:b9:a4: e0:11:9d:77:af:2e:32:1e:05:33:66:dc:35:1e:12:17:76:10: 3a:06:b4:62:55:17:90:59:8b:8a:c3:15:17:dc:b1:9e:04:48: 0a:1d:db:2f:41:66:f6:59:5a:b2:fc:21:9d:5c:c7:e4:88:9d: 29:7b:3d:9e:13:2f:2e:55:b7:d8:c8:8c:10:d4:7e:c1:e7:67: 46:c5:a9:f9:8a:21:5f:fa:c1:4d:03:b0:c8:cb:60:5d:b4:9f: 74:ab:4c:df:8f:8f:b9:f2:3d:12:51:d5:92:55:eb:de:21:6e: 66:00:b7:f2:af:5f:82:46:ae:de:02:0c:73:1c:88:7e:54:ed: bd:f2:58:2f:b8:e2:b7:05:aa:c4:a6:d5:e4:90:97:3b:95:d1: 26:b7:c4:4a:d6:1c:16:2b:f2:40:70:bf:8b:61:39:20:ee:71: 70:08:41:cd:43:4e:9c:c0:c3:ad:2d:cc:ef:a5:71:5d:94:88: c3:d0:8c:99:e1:11:1a:80:41:54:7f:4c:38:80:3f:38:9e:aa: 59:a9:97:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEmGDRjWjHP5KCO8SgsA+o8zpoV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhCRjcwMDAwMTEwLwYDVQQFEygzMzlGRkE5MzM1 N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwMB4XDTI0MTEyMTE5MjMxM1oX DTI0MTEyMjIxMzkxM1owMzExMC8GA1UEAxMoMjREQzdEODcxOENCNDgwQjlGOTc4 RjJBQzFBNzRFRENCRjVGRUMyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDpHIhDjK7jejMgxhA/pGnsITbVhgT1KHX0nG6KQUsiL5rla2iC9Ce0FrhQ i/UisXfC8r2AjcbsG6fYi3q1GWmNz7e1/L6NaLxlK9NCV9RI7OaBxIPg/tdjrOEc FEnuTNrwLjuotqcZiBsbWD/Wn1CqsagHrKRjD3eC1HY/jO5hJq4cisWfXYUQh550 2cKYY9mdaTgZCCzMXKWC2fbzMWTaKZDS4zL1Jow3P3hQrowH45y/4zbbZA/Tv3z1 VZQkQOrd31AYMegsN/RIpQdGrKOwhDKp5j3U/6z+zfIaRZBemecJ0r8rOMQNPzNf 3ZR00dZpu+S2p1VAf1fWMFX7E9sCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQk3H2H GMtIC5+XjyrBp07cv1/sIzAfBgNVHSMEGDAWgBQzn/qTNX+vJhQoKfq/Ilrq5Bc3 8DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJGNzAwMDAvMC8zMzlGRkE5 MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0YwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NNV82a3pWX3J5 WVVLQ242dnlKYTZ1UVhOX0EuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0OEJG NzAwMDAvMC8zMzlGRkE5MzM1N0ZBRjI2MTQyODI5RkFCRjIyNUFFQUU0MTczN0Yw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEA0aAhVtYKBXYArMds3IJUmWnOYtc4haD06glXYTHk5QoVexNV NMTDqzKQuTmSSXah0eNBTbmk4BGdd68uMh4FM2bcNR4SF3YQOga0YlUXkFmLisMV F9yxngRICh3bL0Fm9llasvwhnVzH5IidKXs9nhMvLlW32MiMENR+wednRsWp+Yoh X/rBTQOwyMtgXbSfdKtM34+PufI9ElHVklXr3iFuZgC38q9fgkau3gIMcxyIflTt vfJYL7jitwWqxKbV5JCXO5XRJrfEStYcFivyQHC/i2E5IO5xcAhBzUNOnMDDrS3M 76VxXZSIw9CMmeERGoBBVH9MOIA/OJ6qWamXoA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:14:50 2024 by rpki-client on console-fra.rpki-client.org