$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft File: 6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft (raw, json) Hash identifier: GxaLMuvu8RzkQSreEEucuLDq6Fm2wLnLgu0RtUaXBww= Subject key identifier: C1:7E:D6:FC:97:4E:6C:15:3C:5B:66:62:77:9B:C7:CB:C6:71:56:58 Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F Certificate serial: 7F86DD5808662292F1CD1E1591A92107A6F21970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft Manifest number: D8 Signing time: Thu 16 May 2024 21:30:12 +0000 Manifest this update: Thu 16 May 2024 21:25:12 +0000 Manifest next update: Fri 17 May 2024 23:27:12 +0000 Files and hashes: 1: 323430313a323036303a326630303a3a2f34382d3438203d3e20313437303230.roa (hash: VVfpJFldzwkHDZLJT6q0OZmaE083dTBl8aJjxwi+wQ0=) 2: 323430313a323036303a326666313a3a2f34382d3438203d3e20313437303230.roa (hash: y1S158nhPS7JVr7vT8DlNzGrwqGuVvu0lHun/155XRs=) 3: 323430313a323036303a313435353a3a2f34382d3438203d3e20313437303230.roa (hash: C4oJT5IHHPPpX8zAibXHwGdRduHc7q7JdNmUP6C2M0Q=) 4: 323430313a323036303a326630313a3a2f34382d3438203d3e20313437303230.roa (hash: zHjRQy4CHaOINV7bJnG2OlGNSE8WeIlWyKhF7yB98j0=) 5: 323430313a323036303a323031613a3a2f34382d3438203d3e20313437303230.roa (hash: X8ILcALGwgtDvZA7bmM2LZMbTbDrquWpSU/YilLpHAQ=) 6: 323430313a323036303a323030303a3a2f34302d3430203d3e20313437303230.roa (hash: OWi5s18994o+bbpwCKpNuSfeOxsN4BUm8AGNsUtpwvY=) 7: 6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl (hash: xF0IfO67cfV01yi1RAyv7z4wpngtwAAzukr7iaUxczU=) 8: 323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa (hash: nqu2FMfFuiX4Iyy+V5SRDwVzwN2OjWoO2awUFDd4Dfc=) 9: 3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa (hash: 3FQ1YpCkD4XjTn0HTw/Efu4/uQB9JYAjE48TnMIWhV8=) 10: 323430313a323036303a323030303a3a2f34382d3438203d3e20313437303230.roa (hash: n9QY1ZgJ7rz+7vEYy0UzUDcPK9WF4hRAnukcU81renM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 23:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:86:dd:58:08:66:22:92:f1:cd:1e:15:91:a9:21:07:a6:f2:19:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F Validity Not Before: May 16 21:25:12 2024 GMT Not After : May 17 23:27:12 2024 GMT Subject: CN=C17ED6FC974E6C153C5B6662779BC7CBC6715658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:35:5e:04:57:e6:53:9a:a6:d8:8c:e3:e4:60: 99:b9:30:22:df:6f:60:e8:ee:40:ae:6f:fc:a9:64: a7:ea:05:c0:08:02:eb:c9:ad:7a:13:c6:2c:f4:7c: d1:53:10:ee:1f:df:41:32:a0:4f:f1:1c:1e:b3:a7: 99:37:d0:77:42:ff:3b:a3:2c:96:ce:15:51:45:59: a1:fa:89:7c:ca:fc:24:4e:f9:25:ce:b8:06:91:ac: a7:3f:b2:a9:9e:c6:c9:8d:af:41:1f:95:10:c6:de: 14:5d:dc:01:aa:3b:82:9f:a1:65:0f:55:7d:38:70: 0e:5a:17:7a:f4:f4:0e:b9:72:bd:a0:64:cd:71:24: 67:ad:e2:1e:d9:36:1e:80:3f:c4:50:57:df:07:5b: 6f:06:c8:5a:88:47:e3:26:46:4a:b4:47:c3:e2:b5: 00:8d:33:04:ff:a3:54:5b:45:79:64:a3:61:5b:43: a2:0e:70:76:81:c2:c4:41:30:a5:ae:c2:a0:db:71: 1e:a1:91:f9:bd:8f:32:fc:38:fe:9e:72:34:12:6e: 40:f4:9d:bd:d9:a6:b2:33:d3:02:d0:eb:e5:d1:a2: ac:a7:69:7c:4c:23:bb:f1:09:59:57:0e:ab:37:69: 0e:5b:0c:76:83:3c:61:25:13:c1:ff:b9:f4:5d:53: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7E:D6:FC:97:4E:6C:15:3C:5B:66:62:77:9B:C7:CB:C6:71:56:58 X509v3 Authority Key Identifier: keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4c:bc:d4:50:be:d5:9a:71:9e:b6:00:db:14:c9:ec:53:23: 72:61:65:43:c9:22:34:69:90:92:1e:06:ec:cd:a5:aa:e0:a3: 60:ea:93:e7:5d:00:2b:3a:a3:75:2b:c3:1c:ff:2a:c3:ce:ef: bd:cd:6e:de:23:71:03:8f:a7:3f:72:57:4b:a9:c7:2e:9a:06: 27:bf:a1:c6:23:54:f6:a9:6a:06:e8:af:72:16:fa:9a:5f:69: c4:fc:50:f4:2c:5d:31:32:70:cb:df:de:d9:20:b5:16:76:21: 90:d1:17:3a:47:a5:3c:62:3d:20:6c:97:87:73:fb:e4:bf:ad: 36:c5:f1:eb:0c:63:6a:c0:15:59:54:4a:41:37:54:34:2e:c2: 79:7c:68:05:b6:99:f0:a3:4e:b5:db:b6:bc:fc:93:43:94:26: 38:f8:13:44:3d:72:36:7c:4e:8b:64:10:5c:23:b6:52:3d:43: 08:40:c0:db:db:bf:44:e1:7a:a9:83:b0:a6:7a:4b:77:06:c6: 98:af:6a:27:5a:f5:42:fe:89:e7:54:6c:af:e0:45:d5:1b:bb: c8:de:90:02:b1:6f:14:1d:0f:f1:35:eb:91:3c:49:85:d2:d7: 01:bd:27:19:d6:54:0b:ce:6c:e1:25:18:30:a4:18:ac:7e:63: 3d:d2:12:b1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUf4bdWAhmIpLxzR4VkakhB6byGXAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg2MjI4QTNDNkQ2 Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdGMB4XDTI0MDUxNjIxMjUxMloX DTI0MDUxNzIzMjcxMlowMzExMC8GA1UEAxMoQzE3RUQ2RkM5NzRFNkMxNTNDNUI2 NjYyNzc5QkM3Q0JDNjcxNTY1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPg1XgRX5lOaptiM4+RgmbkwIt9vYOjuQK5v/Klkp+oFwAgC68mtehPGLPR8 0VMQ7h/fQTKgT/EcHrOnmTfQd0L/O6Msls4VUUVZofqJfMr8JE75Jc64BpGspz+y qZ7GyY2vQR+VEMbeFF3cAao7gp+hZQ9VfThwDloXevT0DrlyvaBkzXEkZ63iHtk2 HoA/xFBX3wdbbwbIWohH4yZGSrRHw+K1AI0zBP+jVFtFeWSjYVtDog5wdoHCxEEw pa7CoNtxHqGR+b2PMvw4/p5yNBJuQPSdvdmmsjPTAtDr5dGirKdpfEwju/EJWVcO qzdpDlsMdoM8YSUTwf+59F1Tn18CAwEAAaOCAhswggIXMB0GA1UdDgQWBBTBftb8 l05sFTxbZmJ3m8fLxnFWWDAfBgNVHSMEGDAWgBRiKKPG1jeAFpL319SCUdrTajzb fzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC82MjI4QTND NkQ2Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZaWlqeHRZM2dC YVM5OWZVZ2xIYTAybzgyMzguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0 RDAwMDAvMC82MjI4QTNDNkQ2Mzc4MDE2OTJGN0Q3RDQ4MjUxREFEMzZBM0NEQjdG Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAk0y81FC+1ZpxnrYA2xTJ7FMjcmFlQ8kiNGmQkh4G7M2lquCj YOqT510AKzqjdSvDHP8qw87vvc1u3iNxA4+nP3JXS6nHLpoGJ7+hxiNU9qlqBuiv chb6ml9pxPxQ9CxdMTJwy9/e2SC1FnYhkNEXOkelPGI9IGyXh3P75L+tNsXx6wxj asAVWVRKQTdUNC7CeXxoBbaZ8KNOtdu2vPyTQ5QmOPgTRD1yNnxOi2QQXCO2Uj1D CEDA29u/ROF6qYOwpnpLdwbGmK9qJ1r1Qv6J51Rsr+BF1Ru7yN6QArFvFB0P8TXr kTxJhdLXAb0nGdZUC85s4SUYMKQYrH5jPdISsQ== -----END CERTIFICATE-----Generated at Thu May 16 22:56:33 2024 by rpki-client on console-ams.rpki-client.org