$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft File: D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft (raw, json) Hash identifier: w94YJQLfB6kLPXHjfgmoTdAHQ1r2NldDsAcHtiA6CXQ= Subject key identifier: 47:6D:5A:75:F1:30:70:A2:36:E2:15:20:D7:10:D8:99:7C:99:6F:C0 Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40 Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940 Certificate serial: 5AF1938AB473C3B647D92B2FA60C3523C0972EE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft Manifest number: 0254 Signing time: Fri 22 Nov 2024 08:36:30 +0000 Manifest this update: Fri 22 Nov 2024 08:31:30 +0000 Manifest next update: Sat 23 Nov 2024 11:15:30 +0000 Files and hashes: 1: D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl (hash: en4M2rBdSq/5TtzyiE2XVnokwnSK2Ix38508+HdWFig=) 2: 3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa (hash: NOGiiY918DvBlQquMQqchM/2tk+zFTCvEUe0hw6M5FA=) 3: 3130332e3137332e3232352e302f32342d3234203d3e20323036323634.roa (hash: lAIKGbxFVCbuZH4Unn4B5dmf+xIFD6IcrD7k7TnBr/g=) 4: 3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa (hash: yPSmYs8E5fDkvfo+Rden//MJ2GgUiuaVxMD3uvXP4x4=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 11:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f1:93:8a:b4:73:c3:b6:47:d9:2b:2f:a6:0c:35:23:c0:97:2e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940 Validity Not Before: Nov 22 08:31:30 2024 GMT Not After : Nov 23 11:15:30 2024 GMT Subject: CN=476D5A75F13070A236E21520D710D8997C996FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:dd:9a:3e:bd:44:60:ad:c6:97:64:87:5a: 7d:a0:4e:a9:07:1c:cc:5f:6f:6a:3c:7c:b7:81:f4: 4d:ab:1f:78:30:95:ec:1f:9c:8e:7a:4f:88:1a:ce: b0:15:e4:78:59:e4:4e:18:f5:21:0c:37:be:29:24: 60:ba:54:96:e5:85:aa:a2:d0:3b:df:21:9a:fe:a4: ee:4a:8f:45:66:26:e4:5e:2d:8c:79:7e:ed:aa:a5: cf:43:16:25:09:7f:08:2a:42:31:be:ab:2f:f2:0f: 15:3a:04:3c:24:af:1c:24:8a:77:89:c6:ec:c5:5c: 8b:d6:18:29:7e:58:51:6d:47:f2:86:44:9b:73:a3: 75:cc:f0:ef:67:46:2c:59:06:f0:4a:6d:8c:80:2c: 10:f7:64:24:0d:75:c2:e1:6a:ce:a2:ed:37:20:cd: 07:04:ea:60:2d:0a:e1:89:1b:66:ae:2c:21:e1:f3: 39:ff:f8:f6:70:d1:1a:87:54:d1:17:37:5e:59:ad: 1e:29:bb:28:48:97:03:01:f1:de:b8:80:fa:d3:93: 6e:31:c4:8f:01:47:da:b6:d8:69:15:0f:c0:42:5b: 1c:3e:b8:5c:a4:3f:47:5a:c4:49:52:b4:3f:3f:06: a6:8b:ad:69:99:d1:7d:32:0e:d2:7b:0d:b4:6c:d8: 28:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6D:5A:75:F1:30:70:A2:36:E2:15:20:D7:10:D8:99:7C:99:6F:C0 X509v3 Authority Key Identifier: keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e5:eb:ef:d5:9f:b4:67:32:e0:6c:d4:23:a7:73:a9:54:f2: e9:eb:6c:8f:2b:07:be:b3:a9:56:83:a5:ae:25:38:44:32:36: 1b:18:7b:e7:5e:5a:97:6b:0a:c0:e7:c5:a6:fa:2c:1f:6f:69: 1a:45:ad:f9:32:0b:bf:fa:c9:94:bf:ff:51:f7:88:0e:26:6b: e6:92:b0:22:7c:fb:bd:df:f9:78:36:35:c8:5c:90:61:3d:8d: cc:6c:ab:2f:c7:db:32:48:a7:4b:5d:e1:18:4c:d4:2f:a0:06: 05:26:7f:fa:15:2e:41:a0:13:92:f3:4e:5c:45:d8:ce:7e:67: 7a:28:82:4c:21:13:ae:94:b0:af:c9:7e:d2:c5:23:9f:8a:dc: 64:9b:31:fa:41:39:b0:a5:84:b1:ab:a9:1a:85:b8:d7:49:d8: d5:f5:05:65:4c:7b:1f:8f:5c:fc:78:0f:1a:6a:e4:0f:e0:0e: fd:61:02:5f:ea:24:52:ab:75:8a:24:a6:22:85:3a:3e:4e:47: eb:97:99:97:1a:e7:e4:29:db:97:b6:26:a2:9a:64:ce:c4:ad: 43:04:32:28:ec:f4:00:b6:9a:ad:77:53:7d:06:50:bd:7d:0f: 00:31:bd:fa:70:55:d6:5e:a2:72:de:5e:c4:5f:09:cf:52:25: 61:11:6f:fc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWvGTirRzw7ZH2Ssvpgw1I8CXLuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTU0ODEwMDAwMTEwLwYDVQQFEyhEOTg4QjJEQTdG NDMwNUYwQ0RCOTNCRjg4QjZGNUE5REY5OEQ4OTQwMB4XDTI0MTEyMjA4MzEzMFoX DTI0MTEyMzExMTUzMFowMzExMC8GA1UEAxMoNDc2RDVBNzVGMTMwNzBBMjM2RTIx NTIwRDcxMEQ4OTk3Qzk5NkZDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANn73Zo+vURgrcaXZIdafaBOqQcczF9vajx8t4H0TasfeDCV7B+cjnpPiBrO sBXkeFnkThj1IQw3vikkYLpUluWFqqLQO98hmv6k7kqPRWYm5F4tjHl+7aqlz0MW JQl/CCpCMb6rL/IPFToEPCSvHCSKd4nG7MVci9YYKX5YUW1H8oZEm3Ojdczw72dG LFkG8EptjIAsEPdkJA11wuFqzqLtNyDNBwTqYC0K4YkbZq4sIeHzOf/49nDRGodU 0Rc3XlmtHim7KEiXAwHx3riA+tOTbjHEjwFH2rbYaRUPwEJbHD64XKQ/R1rESVK0 Pz8GpoutaZnRfTIO0nsNtGzYKHUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRHbVp1 8TBwojbiFSDXENiZfJlvwDAfBgNVHSMEGDAWgBTZiLLaf0MF8M25O/iLb1qd+Y2J QDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNTQ4MTAwMDAvMC9EOTg4QjJE QTdGNDMwNUYwQ0RCOTNCRjg4QjZGNUE5REY5OEQ4OTQwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yWWl5Mm45REJm RE51VHY0aTI5YW5mbU5pVUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNTQ4 MTAwMDAvMC9EOTg4QjJEQTdGNDMwNUYwQ0RCOTNCRjg4QjZGNUE5REY5OEQ4OTQw Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAmeXr79WftGcy4GzUI6dzqVTy6etsjysHvrOpVoOlriU4RDI2 Gxh7515al2sKwOfFpvosH29pGkWt+TILv/rJlL//UfeIDiZr5pKwInz7vd/5eDY1 yFyQYT2NzGyrL8fbMkinS13hGEzUL6AGBSZ/+hUuQaATkvNOXEXYzn5neiiCTCET rpSwr8l+0sUjn4rcZJsx+kE5sKWEsaupGoW410nY1fUFZUx7H49c/HgPGmrkD+AO /WECX+okUqt1iiSmIoU6Pk5H65eZlxrn5Cnbl7YmoppkzsStQwQyKOz0ALaarXdT fQZQvX0PADG9+nBV1l6ict5exF8Jz1IlYRFv/A== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:28 2024 by rpki-client on console-ams.rpki-client.org