$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft File: 6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft (raw, json) Hash identifier: bZSC1E+rj0S3yGtGx4EhhdSAz02LpUmtbM1cNCGqopA= Subject key identifier: 88:57:78:3F:10:8D:48:56:8D:18:94:00:07:63:08:B5:69:E4:B0:E6 Authority key identifier: 6F:20:4B:C2:AA:0D:E1:A4:00:1F:9A:CD:EA:09:92:55:CE:72:14:FB Certificate issuer: /CN=A91F73F50000/serialNumber=6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB Certificate serial: 6C758DB23A7778A37BC4960CDB2FE722190A3DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft Manifest number: 0238 Signing time: Fri 03 May 2024 03:29:02 +0000 Manifest this update: Fri 03 May 2024 03:24:02 +0000 Manifest next update: Sat 04 May 2024 03:55:02 +0000 Files and hashes: 1: 323430303a656261303a3a2f33322d3438203d3e2039383838.roa (hash: ifqo402YCWZhthXxmH57e5fXENAG2Rz9TPSmdb/L2jw=) 2: 6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.crl (hash: iBJ8LFR5QD2u5HAHndeGlSl8zwfNbcx/YqiP4vQhPtE=) 3: 3130332e3131352e39302e302f32332d3234203d3e20313531303432.roa (hash: K/KrDaljp1H4myaxPFT6dCIJNctB1j/tYPwu5Ytg03M=) 4: 323430303a656261303a3a2f33322d3438203d3e2039343439.roa (hash: wsRFv/hdrLecH0ou0olrksLECwM//yf9O9b1mCVk9yg=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:75:8d:b2:3a:77:78:a3:7b:c4:96:0c:db:2f:e7:22:19:0a:3d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F73F50000/serialNumber=6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB Validity Not Before: May 3 03:24:02 2024 GMT Not After : May 4 03:55:02 2024 GMT Subject: CN=8857783F108D48568D189400076308B569E4B0E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:f7:f9:a6:cf:c4:36:34:c3:95:b5:c4:1b: 1e:e9:5c:22:de:68:59:f9:9d:21:66:7a:d7:94:6b: fc:1d:4f:29:46:f8:04:8c:1c:77:e0:c7:82:b2:c1: a2:f7:74:f8:49:1a:ac:01:28:c1:4c:39:13:05:5e: 87:06:6e:94:cc:8a:12:88:a4:23:5e:0d:a7:34:8c: e1:6d:b7:77:71:2c:7c:77:ac:29:05:ce:c0:38:69: 54:f0:43:1e:1a:98:e8:1e:e5:e9:1a:f1:68:5a:52: 78:57:e2:a7:c6:b6:ce:c3:92:cc:ac:7b:19:a9:a6: e6:39:1d:73:a3:e7:a3:ef:2d:c2:15:c5:80:5b:22: b2:2d:27:81:83:d2:16:ef:67:b6:ab:6a:64:af:52: e4:e2:ab:05:a8:a0:06:1e:9a:30:9c:90:2d:6e:8f: b3:37:00:e2:46:a6:67:a8:b8:08:52:5c:c5:54:65: 1d:d5:26:8f:22:92:6d:83:8e:09:55:ce:bd:47:b0: 8e:7e:a5:bd:f6:27:be:b3:29:c0:56:d2:77:14:90: f1:1d:e2:b9:6d:12:dd:ba:d8:42:65:37:24:89:ba: 1e:ed:67:15:6a:67:0a:be:70:45:ad:50:08:e2:dd: bb:3e:3e:cd:78:9a:f1:78:f6:67:c7:05:50:88:9d: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:57:78:3F:10:8D:48:56:8D:18:94:00:07:63:08:B5:69:E4:B0:E6 X509v3 Authority Key Identifier: keyid:6F:20:4B:C2:AA:0D:E1:A4:00:1F:9A:CD:EA:09:92:55:CE:72:14:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:9c:68:25:2d:75:dc:8c:e1:dc:b9:9a:12:f5:ab:f2:0e:53: e6:64:93:77:07:c3:bd:4d:b0:7d:45:44:0a:17:81:93:00:d2: c4:e5:22:a4:1e:98:b4:5e:27:8d:f5:81:3b:53:79:cd:a6:e9: de:45:0d:14:a0:e2:22:d2:87:df:8c:cc:4e:91:95:6a:e8:40: 0b:9a:e4:b0:f3:a2:c2:97:81:1e:16:e0:86:65:47:f6:a9:ea: f1:7c:ec:ff:a8:95:c0:6c:57:ff:2c:e0:87:cc:a6:18:0d:80: 8c:f7:b2:99:86:69:94:d0:ee:0a:84:93:23:fe:aa:24:3c:66: d2:27:52:1b:e3:72:ac:06:4c:e0:16:c9:06:26:c8:ff:0c:6e: 3c:49:12:08:c1:4c:0d:9f:2f:8d:4c:dd:58:18:26:5b:a8:ca: 1a:ee:d8:85:e9:af:fe:56:05:84:fd:fc:24:ce:1d:39:d6:63: 55:24:d9:fe:0f:65:4d:40:43:8f:8d:98:35:ab:85:34:66:f0: 70:bf:16:c0:22:6f:a7:04:be:7c:d1:3d:9f:92:53:c9:42:a2: b0:37:66:e3:92:4a:ab:c0:30:71:99:6a:62:81:d1:2b:70:c0: 25:bb:c8:34:9e:4c:7c:db:9a:77:2d:8e:26:43:b9:90:80:e6: 82:24:30:a5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbHWNsjp3eKN7xJYM2y/nIhkKPfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjczRjUwMDAwMTEwLwYDVQQFEyg2RjIwNEJDMkFB MERFMUE0MDAxRjlBQ0RFQTA5OTI1NUNFNzIxNEZCMB4XDTI0MDUwMzAzMjQwMloX DTI0MDUwNDAzNTUwMlowMzExMC8GA1UEAxMoODg1Nzc4M0YxMDhENDg1NjhEMTg5 NDAwMDc2MzA4QjU2OUU0QjBFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4X9/mmz8Q2NMOVtcQbHulcIt5oWfmdIWZ615Rr/B1PKUb4BIwcd+DHgrLB ovd0+EkarAEowUw5EwVehwZulMyKEoikI14NpzSM4W23d3EsfHesKQXOwDhpVPBD HhqY6B7l6RrxaFpSeFfip8a2zsOSzKx7Gamm5jkdc6Pno+8twhXFgFsisi0ngYPS Fu9ntqtqZK9S5OKrBaigBh6aMJyQLW6PszcA4kamZ6i4CFJcxVRlHdUmjyKSbYOO CVXOvUewjn6lvfYnvrMpwFbSdxSQ8R3iuW0S3brYQmU3JIm6Hu1nFWpnCr5wRa1Q COLduz4+zXia8Xj2Z8cFUIidSzECAwEAAaOCAhswggIXMB0GA1UdDgQWBBSIV3g/ EI1IVo0YlAAHYwi1aeSw5jAfBgNVHSMEGDAWgBRvIEvCqg3hpAAfms3qCZJVznIU +zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOC82RjIwNEJD MkFBMERFMUE0MDAxRjlBQ0RFQTA5OTI1NUNFNzIxNEZCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ieUJMd3FvTjRh UUFINXJONmdtU1ZjNXlGUHMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOC82RjIwNEJDMkFBMERFMUE0MDAxRjlBQ0RFQTA5OTI1NUNFNzIxNEZC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAsZxoJS113Izh3LmaEvWr8g5T5mSTdwfDvU2wfUVECheBkwDS xOUipB6YtF4njfWBO1N5zabp3kUNFKDiItKH34zMTpGVauhAC5rksPOiwpeBHhbg hmVH9qnq8Xzs/6iVwGxX/yzgh8ymGA2AjPeymYZplNDuCoSTI/6qJDxm0idSG+Ny rAZM4BbJBibI/wxuPEkSCMFMDZ8vjUzdWBgmW6jKGu7Yhemv/lYFhP38JM4dOdZj VSTZ/g9lTUBDj42YNauFNGbwcL8WwCJvpwS+fNE9n5JTyUKisDdm45JKq8AwcZlq YoHRK3DAJbvINJ5MfNuady2OJkO5kIDmgiQwpQ== -----END CERTIFICATE-----Generated at Fri May 3 05:48:12 2024 by rpki-client on console-fra.rpki-client.org