$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json) Hash identifier: QJcun5USmFpfezaZ0kK1oyQtqGqTdveu/CY+NsW15Pg= Subject key identifier: C5:18:4F:90:38:72:14:6A:38:E9:F9:73:27:28:60:39:5B:7F:BF:A5 Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 3093B1FB21646F7EAFCC9D0BB41B44B65A2AD59F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft Manifest number: 02EE Signing time: Sun 03 Nov 2024 05:08:59 +0000 Manifest this update: Sun 03 Nov 2024 05:03:59 +0000 Manifest next update: Mon 04 Nov 2024 05:28:59 +0000 Files and hashes: 1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: 4tm4MN9QTL5HgA19ejSzX7wIgqpXJptZ++BSfBg1Gjg=) 2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: MzrUAMPVVij1ICdQvqdCbct4xPebivz1mn+HiquW3k4=) 3: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: H8gLNqh7yn+iSk+4wEVqjTJjqULkmSbmUc2nzD2G580=) 4: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: SbkxL+7COZ6Tytm7k2uPgmc/+iWRhYRcOoIgx0LtkYU=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Nov 2024 05:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:93:b1:fb:21:64:6f:7e:af:cc:9d:0b:b4:1b:44:b6:5a:2a:d5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Nov 3 05:03:59 2024 GMT Not After : Nov 4 05:28:59 2024 GMT Subject: CN=C5184F903872146A38E9F973272860395B7FBFA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cd:56:0f:72:d1:8d:b5:d1:7a:c5:e0:e1:ef: f2:49:fb:38:8f:8f:f1:85:ae:34:84:00:68:ff:a8: 04:31:2b:d9:82:0f:52:ec:26:e8:9b:6b:13:03:7f: eb:db:a3:fc:3e:18:49:00:a5:44:1b:4f:c5:eb:4f: e7:a4:18:d8:4c:43:2b:30:51:d2:4f:d7:ff:ff:6c: d5:fd:94:26:26:d0:be:7b:79:ba:ff:88:58:19:c4: 15:9d:de:ca:36:77:37:ed:e5:ec:79:70:7a:79:e8: af:f4:77:b7:dc:db:b7:9e:1f:84:f6:3a:d9:66:e8: 02:9a:56:24:c0:d4:7f:58:a1:11:e1:61:11:1f:6e: be:c6:44:65:47:f2:5c:55:9a:59:fb:1a:fa:54:c0: 54:21:f5:9c:76:20:57:d0:d1:a6:07:aa:7c:06:f0: 84:8c:c6:9b:ce:d4:82:15:a9:3f:56:4f:82:9c:e6: 6d:89:79:78:86:50:81:3a:b2:58:4d:83:e5:b1:7f: 5c:e7:71:ad:7a:44:81:6b:a5:ff:ab:9a:1a:64:0b: 46:fe:8a:f2:c4:1b:80:f2:b5:3e:fd:40:c8:a6:2a: 86:8c:f4:bb:2c:00:25:c7:81:27:2c:0a:40:fe:f7: e3:c9:86:c5:5a:8f:8c:14:7d:92:93:12:2b:75:49: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:18:4F:90:38:72:14:6A:38:E9:F9:73:27:28:60:39:5B:7F:BF:A5 X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:60:7d:4b:72:81:e3:04:ea:69:0a:a3:f1:68:af:6e:a6:02: 8f:35:a4:f3:92:56:1c:44:8a:ac:18:04:37:2d:8a:61:72:1f: d1:92:a8:1d:0c:e4:cc:8b:fa:d7:87:79:82:45:7c:c8:96:29: bd:22:94:b4:4e:b5:4d:55:fc:38:57:66:ce:33:d8:95:22:b5: b1:82:76:f6:68:6b:1e:f2:0e:9b:a6:c8:e1:cf:1a:42:82:9e: eb:3d:85:0e:ba:c5:67:46:55:41:ec:37:e5:6e:9f:b7:31:dd: d4:54:ca:27:5d:b3:96:22:db:39:f2:b3:ca:7e:a3:9d:4c:e8: 40:43:66:61:13:81:3a:c9:95:81:1d:86:27:aa:04:76:1b:a2: f1:74:14:d9:97:7d:0e:14:35:34:8e:ae:2e:05:7c:f0:9c:98: 02:f1:45:e6:f5:6a:35:20:03:d4:83:0c:85:ba:14:15:88:db: 39:c1:be:ae:cc:cb:e9:98:5e:4f:52:d5:cc:f8:51:9e:6e:92: 12:13:f0:c7:9f:b2:e1:a6:d8:d2:e6:dd:e9:b4:1a:92:1e:58: f8:7f:6b:d5:4e:62:d0:46:e1:9e:7b:ee:e8:dc:1c:fb:7c:bd: 6e:a8:b9:1a:78:b1:c9:d5:92:f8:8a:e8:1d:ce:a1:60:22:62: 32:85:96:a6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMJOx+yFkb36vzJ0LtBtEtloq1Z8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI0MTEwMzA1MDM1OVoX DTI0MTEwNDA1Mjg1OVowMzExMC8GA1UEAxMoQzUxODRGOTAzODcyMTQ2QTM4RTlG OTczMjcyODYwMzk1QjdGQkZBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObNVg9y0Y210XrF4OHv8kn7OI+P8YWuNIQAaP+oBDEr2YIPUuwm6JtrEwN/ 69uj/D4YSQClRBtPxetP56QY2ExDKzBR0k/X//9s1f2UJibQvnt5uv+IWBnEFZ3e yjZ3N+3l7Hlwennor/R3t9zbt54fhPY62WboAppWJMDUf1ihEeFhER9uvsZEZUfy XFWaWfsa+lTAVCH1nHYgV9DRpgeqfAbwhIzGm87UghWpP1ZPgpzmbYl5eIZQgTqy WE2D5bF/XOdxrXpEgWul/6uaGmQLRv6K8sQbgPK1Pv1AyKYqhoz0uywAJceBJywK QP7348mGxVqPjBR9kpMSK3VJOKkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTFGE+Q OHIUajjp+XMnKGA5W3+/pTAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEApmB9S3KB4wTqaQqj8WivbqYCjzWk85JWHESKrBgENy2KYXIf 0ZKoHQzkzIv614d5gkV8yJYpvSKUtE61TVX8OFdmzjPYlSK1sYJ29mhrHvIOm6bI 4c8aQoKe6z2FDrrFZ0ZVQew35W6ftzHd1FTKJ12zliLbOfKzyn6jnUzoQENmYROB OsmVgR2GJ6oEdhui8XQU2Zd9DhQ1NI6uLgV88JyYAvFF5vVqNSAD1IMMhboUFYjb OcG+rszL6ZheT1LVzPhRnm6SEhPwx5+y4abY0ubd6bQakh5Y+H9r1U5i0Ebhnnvu 6Nwc+3y9bqi5GnixydWS+IroHc6hYCJiMoWWpg== -----END CERTIFICATE-----Generated at Sun Nov 3 07:35:45 2024 by rpki-client on console-ams.rpki-client.org