$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft File: 7A443962573EC01D5131651F90F46DA19AFC21D2.mft (raw, json) Hash identifier: vCx3SnILk+3Aucw7afodI1TauAAG6L6jt10PGUpIWsc= Subject key identifier: 38:0A:99:F9:9B:3D:FC:B5:F5:35:B0:00:21:E5:B0:91:59:75:7B:B3 Authority key identifier: 7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2 Certificate issuer: /CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2 Certificate serial: 2C0E8CFD8A54624E8DA9B83C13AEAAA0B092FC66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft Manifest number: 28 Signing time: Thu 24 Oct 2024 08:20:15 +0000 Manifest this update: Thu 24 Oct 2024 08:15:15 +0000 Manifest next update: Fri 25 Oct 2024 11:18:15 +0000 Files and hashes: 1: 323030313a6466343a353134613a3a2f34372d3438203d3e20313533333436.roa (hash: 7q36wnc9V0pKwi/YmqLT1hbm95tG/4ksx1xj/AKNi1Y=) 2: 7A443962573EC01D5131651F90F46DA19AFC21D2.crl (hash: J61/1sJXKZT+OB88enZ11hPcobmi7p70KVfA5xRs3bo=) 3: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: ZftJKNkcxqt8viV6ch9Nq0ZeTxEgq19lQySWqr859Vk=) 4: 323030313a6466343a353134633a3a2f34382d3438203d3e20313533333436.roa (hash: dqeOZ/w+XH5bLYPbin6nNJo90aCcBDQmU9w+LphFW2I=) 5: 323030313a6466343a353134643a3a2f34382d3438203d3e20313533333436.roa (hash: jyXrkPBz5fGYB/J2XrdnQ2pHXTSOM5q35/ywqUmR/bY=) 6: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: sI07zzSAXGixhhWNEulodEuHS3fOeXcgCleyhRICyvI=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Oct 2024 11:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0e:8c:fd:8a:54:62:4e:8d:a9:b8:3c:13:ae:aa:a0:b0:92:fc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2 Validity Not Before: Oct 24 08:15:15 2024 GMT Not After : Oct 25 11:18:15 2024 GMT Subject: CN=380A99F99B3DFCB5F535B00021E5B09159757BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:c3:81:17:65:7a:1e:ce:ba:a7:c5:25:ed: b7:a5:63:56:6b:94:38:f2:80:b2:ac:6c:0d:39:71: 54:6f:5f:42:e5:8c:3a:91:f8:46:3f:e2:98:e6:8e: c5:63:17:95:f1:87:3a:ae:a2:fb:84:9a:fb:ad:e1: 78:d8:d6:24:26:da:4e:e7:e5:a8:c3:66:0a:72:5a: 27:f1:34:51:ff:b4:1b:4b:2b:08:a6:80:a5:a5:0b: cc:f5:65:45:2a:c9:01:10:60:ce:b4:ce:ef:75:3b: a6:75:cf:3a:7d:7d:b2:3d:52:c9:28:53:08:67:32: 18:75:aa:ab:dd:78:37:c9:c0:27:a7:1e:68:35:db: d1:3c:16:9c:a2:fa:e1:65:c3:20:5c:f7:5a:27:17: 52:d3:f0:eb:85:90:6a:9e:fb:a6:a9:20:bf:63:5c: 14:54:08:0d:f2:b7:a1:70:5a:be:ca:cd:e1:28:f6: 13:b4:9e:41:e2:84:c7:b8:8e:0c:2f:51:cf:5c:29: 6c:39:c7:3c:82:14:b1:43:c1:4e:b4:70:b9:35:0f: d0:58:7d:21:cf:5a:04:13:a0:f8:8e:ca:34:5c:24: 92:23:70:1b:c4:ce:53:92:36:47:4f:cd:71:c1:27: e4:a1:cf:f3:8b:78:9d:40:72:07:7a:4b:47:d7:b6: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0A:99:F9:9B:3D:FC:B5:F5:35:B0:00:21:E5:B0:91:59:75:7B:B3 X509v3 Authority Key Identifier: keyid:7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:31:28:74:78:65:bd:02:aa:9a:00:0f:27:66:9f:3d:5f:21: 1d:8f:16:9b:6e:a5:c2:9c:05:9d:ea:ef:f3:23:87:c9:68:43: 6d:51:8b:07:cb:5b:3f:c3:af:84:89:3e:e3:f7:4a:c9:a5:91: 01:00:27:51:7f:03:5b:48:c0:56:03:b7:78:27:d6:d0:14:c6: ab:84:47:83:8a:87:c8:b9:9c:e2:35:29:84:a9:03:93:8a:6c: 3f:55:0d:d7:12:5e:f2:86:4b:0f:34:b0:66:90:21:18:68:40: 2a:77:22:07:38:6b:b8:c6:de:31:24:45:25:8d:01:67:2a:e3: 74:78:34:01:a4:ba:9d:63:d3:6c:27:d2:83:33:a4:7b:a3:c9: 7f:ab:63:70:e0:6e:7f:bc:71:d3:bc:84:a7:51:a6:9c:56:c9: 25:5b:3e:51:df:66:fa:3f:ca:bf:19:0d:76:26:01:db:5d:cf: f6:d1:dc:6b:10:25:c7:89:9e:b2:cf:6c:f9:d5:2d:f3:b7:a2: 3d:b2:5f:44:72:fa:e1:41:b8:77:68:14:8d:f9:f1:73:84:b0: a1:65:58:e9:6c:71:a1:4b:5e:ec:89:7f:a4:1c:52:4f:08:f8: ae:96:39:b2:20:de:3f:69:8f:07:88:ce:f1:1b:78:3f:e2:03: 07:71:b2:90 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULA6M/YpUYk6Nqbg8E66qoLCS/GYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyg3QTQ0Mzk2MjU3 M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQyMB4XDTI0MTAyNDA4MTUxNVoX DTI0MTAyNTExMTgxNVowMzExMC8GA1UEAxMoMzgwQTk5Rjk5QjNERkNCNUY1MzVC MDAwMjFFNUIwOTE1OTc1N0JCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBdw4EXZXoezrqnxSXtt6VjVmuUOPKAsqxsDTlxVG9fQuWMOpH4Rj/imOaO xWMXlfGHOq6i+4Sa+63heNjWJCbaTuflqMNmCnJaJ/E0Uf+0G0srCKaApaULzPVl RSrJARBgzrTO73U7pnXPOn19sj1SyShTCGcyGHWqq914N8nAJ6ceaDXb0TwWnKL6 4WXDIFz3WicXUtPw64WQap77pqkgv2NcFFQIDfK3oXBavsrN4Sj2E7SeQeKEx7iO DC9Rz1wpbDnHPIIUsUPBTrRwuTUP0Fh9Ic9aBBOg+I7KNFwkkiNwG8TOU5I2R0/N ccEn5KHP84t4nUByB3pLR9e2Q+kCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ4Cpn5 mz38tfU1sAAh5bCRWXV7szAfBgNVHSMEGDAWgBR6RDliVz7AHVExZR+Q9G2hmvwh 0jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS83QTQ0Mzk2 MjU3M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9la1E1WWxjLXdC MVJNV1Vma1BSdG9acjhJZEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMS83QTQ0Mzk2MjU3M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQy Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAFTEodHhlvQKqmgAPJ2afPV8hHY8Wm26lwpwFnerv8yOHyWhD bVGLB8tbP8OvhIk+4/dKyaWRAQAnUX8DW0jAVgO3eCfW0BTGq4RHg4qHyLmc4jUp hKkDk4psP1UN1xJe8oZLDzSwZpAhGGhAKnciBzhruMbeMSRFJY0BZyrjdHg0AaS6 nWPTbCfSgzOke6PJf6tjcOBuf7xx07yEp1GmnFbJJVs+Ud9m+j/KvxkNdiYB213P 9tHcaxAlx4mess9s+dUt87eiPbJfRHL64UG4d2gUjfnxc4SwoWVY6WxxoUte7Il/ pBxSTwj4rpY5siDeP2mPB4jO8Rt4P+IDB3GykA== -----END CERTIFICATE-----Generated at Thu Oct 24 10:01:56 2024 by rpki-client on console-ams.rpki-client.org