$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft File: 6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft (raw, json) Hash identifier: KHqVcZFMRXetmm455vADpw3JhPZNT/WMkiTj3eWuK/k= Subject key identifier: A7:34:40:E2:88:F9:9D:4D:EB:02:DA:53:2F:0D:7B:F7:90:4D:13:A4 Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F Certificate serial: 0A06236F89C93ACA97B21455A2CA46088BC01381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft Manifest number: 01DD Signing time: Sat 23 Nov 2024 10:00:53 +0000 Manifest this update: Sat 23 Nov 2024 09:55:53 +0000 Manifest next update: Sun 24 Nov 2024 13:04:53 +0000 Files and hashes: 1: 323430313a323036303a313030303a3a2f33362d3438203d3e20313437303230.roa (hash: SHmsWgoH0W5a4MIxTAojgLAEwCWFrmFdKxj2tt7AE10=) 2: 6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl (hash: s2MJTfA7GRmJbVZhXkPN7pO831WZ3aJNZOq2pXTec9A=) 3: 3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa (hash: dZCb0NNFa0t8qRGSq9V6Zny0WChx1nzDMlS1sNzpGkc=) 4: 323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa (hash: gPG8l3OXv2nZ75Sb3JVWXTUkACkZtrgOXoNSpOUaoI0=) 5: 323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa (hash: MKfMjJ5TpoAcS0RoIjPaUqgCChV2FoLRtYqM8x/DCcY=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 13:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:06:23:6f:89:c9:3a:ca:97:b2:14:55:a2:ca:46:08:8b:c0:13:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F Validity Not Before: Nov 23 09:55:53 2024 GMT Not After : Nov 24 13:04:53 2024 GMT Subject: CN=A73440E288F99D4DEB02DA532F0D7BF7904D13A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:b6:67:bf:83:75:63:53:b0:1a:be:5b:bd: 00:5b:12:de:36:e0:bc:91:83:d5:0d:10:e1:1f:52: ed:52:ad:e9:07:2b:db:c3:6b:f1:ea:8b:90:98:b3: a1:9e:0f:6c:e2:91:d2:99:c1:13:57:e3:0a:f1:71: 5b:54:64:7c:dc:c2:85:d6:a3:a6:fc:87:e9:5b:37: 42:f6:9c:30:cf:ba:92:37:1d:12:a1:0e:45:9d:d2: 7a:e8:d8:43:0b:03:1a:80:43:50:ba:96:36:1c:e4: f0:f9:4c:0b:0c:16:7d:d8:e7:53:9f:f2:21:69:84: 72:db:7c:de:30:0a:be:32:19:ff:4a:1e:56:f4:e2: 86:8c:3c:f7:60:ef:1f:a0:cc:d7:86:fa:6f:aa:95: 75:71:2a:af:fd:61:4e:b5:fa:3a:3a:9d:b2:89:98: 16:2d:84:d6:da:9e:b0:4b:89:a3:67:f5:21:a4:cf: 8e:8d:12:21:b1:4e:57:e1:d1:74:9a:3e:82:c6:29: fe:81:0f:00:de:c0:4a:5d:73:29:66:4e:7a:dd:71: 7b:05:ff:fc:9a:d2:6d:d4:64:a4:ad:cb:3c:5f:86: f9:fb:de:8a:74:ce:ac:bb:6d:12:be:42:3a:a9:89: 48:f6:e2:1e:c4:3d:3c:54:b2:10:66:de:6d:31:fd: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:34:40:E2:88:F9:9D:4D:EB:02:DA:53:2F:0D:7B:F7:90:4D:13:A4 X509v3 Authority Key Identifier: keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5c:ef:9d:56:b7:83:4f:ce:5e:cf:70:27:b3:9a:0a:03:b2: e5:bd:fd:6d:ba:79:91:ba:2a:68:04:59:71:29:20:25:f7:13: 32:ad:e5:6b:c0:36:e0:2e:a4:ff:0d:b8:e2:4e:46:0e:9a:f8: 8f:c2:b2:f9:da:4b:b6:29:92:f9:d2:58:c9:50:c1:ad:e1:af: 67:6f:fc:cb:40:2e:a0:35:32:fc:5d:16:1b:2d:1c:22:51:3c: 00:30:b1:85:6d:6e:bf:5d:c3:c8:25:35:52:70:4e:12:e3:02: 50:d5:c9:6b:bc:0f:8d:7b:95:99:16:01:f9:26:ae:fc:e4:a9: 79:35:e2:f6:f6:8b:78:07:bc:30:e5:d5:b1:f9:14:65:23:e9: de:e7:9a:f0:46:26:5e:48:04:51:8f:3c:c5:a9:26:d9:f8:d7: 04:6b:c2:88:37:fe:42:7f:7d:b3:4b:3f:c2:c4:5f:69:74:d9: d9:76:76:6a:4c:e9:39:93:d7:46:52:ad:9d:35:d0:e1:6a:b4: df:bf:47:b8:e5:50:c3:87:77:ae:4d:3a:75:1c:f5:ec:9b:25: 06:12:7f:34:12:d2:d0:cf:63:74:96:cb:fb:0b:b6:25:da:85: ed:e0:37:ae:5f:e6:dc:90:c8:06:d1:d2:4d:08:54:35:1f:fe: 36:dd:4e:b2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCgYjb4nJOsqXshRVospGCIvAE4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg2MjI4QTNDNkQ2 Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdGMB4XDTI0MTEyMzA5NTU1M1oX DTI0MTEyNDEzMDQ1M1owMzExMC8GA1UEAxMoQTczNDQwRTI4OEY5OUQ0REVCMDJE QTUzMkYwRDdCRjc5MDREMTNBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL35tme/g3VjU7Aavlu9AFsS3jbgvJGD1Q0Q4R9S7VKt6Qcr28Nr8eqLkJiz oZ4PbOKR0pnBE1fjCvFxW1RkfNzChdajpvyH6Vs3QvacMM+6kjcdEqEORZ3SeujY QwsDGoBDULqWNhzk8PlMCwwWfdjnU5/yIWmEctt83jAKvjIZ/0oeVvTihow892Dv H6DM14b6b6qVdXEqr/1hTrX6OjqdsomYFi2E1tqesEuJo2f1IaTPjo0SIbFOV+HR dJo+gsYp/oEPAN7ASl1zKWZOet1xewX//JrSbdRkpK3LPF+G+fveinTOrLttEr5C OqmJSPbiHsQ9PFSyEGbebTH9E3UCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSnNEDi iPmdTesC2lMvDXv3kE0TpDAfBgNVHSMEGDAWgBRiKKPG1jeAFpL319SCUdrTajzb fzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC82MjI4QTND NkQ2Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZaWlqeHRZM2dC YVM5OWZVZ2xIYTAybzgyMzguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0 RDAwMDAvMC82MjI4QTNDNkQ2Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdG Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAjlzvnVa3g0/OXs9wJ7OaCgOy5b39bbp5kboqaARZcSkgJfcT Mq3la8A24C6k/w244k5GDpr4j8Ky+dpLtimS+dJYyVDBreGvZ2/8y0AuoDUy/F0W Gy0cIlE8ADCxhW1uv13DyCU1UnBOEuMCUNXJa7wPjXuVmRYB+Sau/OSpeTXi9vaL eAe8MOXVsfkUZSPp3uea8EYmXkgEUY88xakm2fjXBGvCiDf+Qn99s0s/wsRfaXTZ 2XZ2akzpOZPXRlKtnTXQ4Wq0379HuOVQw4d3rk06dRz17JslBhJ/NBLS0M9jdJbL +wu2JdqF7eA3rl/m3JDIBtHSTQhUNR/+Nt1Osg== -----END CERTIFICATE-----Generated at Sat Nov 23 13:14:38 2024 by rpki-client on console-ams.rpki-client.org