$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft File: H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json) Hash identifier: wtHXbG5+JoDudk3Nabo5ykQzmJD88LhLuoTE95Dnjcg= Subject key identifier: 59:9E:3B:96:63:30:87:8B:3E:6B:98:0D:FF:00:07:6A:2F:4E:47:B4 Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B Certificate issuer: /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft Manifest number: 15 Signing time: Sat 23 Nov 2024 05:55:47 +0000 Manifest this update: Sat 23 Nov 2024 05:55:46 +0000 Manifest next update: Sat 30 Nov 2024 05:55:46 +0000 Files and hashes: 1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: 92RJVCoqkswhXyC+IVdzo01a7Pjg/mA+5cSwV9HAlOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Validity Not Before: Nov 23 05:55:46 2024 GMT Not After : Nov 30 05:55:46 2024 GMT Subject: CN=67416e63-b4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:7c:65:81:1b:42:55:5e:05:fa:b2:99:f0: a3:a7:c6:b2:4b:55:e0:4f:f5:17:b6:a9:d9:ee:1d: 3e:c7:0a:cc:e8:4d:d3:82:78:d3:63:a4:61:4e:db: 4e:b9:68:59:29:34:1e:5b:6e:72:1b:8a:e7:68:ff: 07:3a:ad:80:5e:2c:9b:d3:05:38:27:2f:7c:e0:4e: 78:3d:01:37:f6:e4:0a:55:85:35:d4:da:82:5a:b5: b0:1a:ab:40:b2:15:dd:c7:7c:78:20:e4:db:64:86: a8:a2:e2:c9:20:e0:61:21:88:94:47:3c:71:26:2b: 7c:27:09:da:0c:b4:a0:6e:9f:b7:07:40:3e:e7:ca: 99:4c:00:a5:0d:02:d1:de:16:0a:91:d6:0e:18:5c: ff:e6:53:32:34:22:da:22:24:63:e7:58:3a:95:27: d5:6a:ca:22:ef:f9:e3:0a:8b:de:06:79:55:00:10: cb:f5:66:1b:ae:18:b9:0f:d9:7b:36:59:08:c5:03: 24:1b:f7:6f:2e:3a:d4:b2:29:a6:22:fc:5d:83:89: 08:ad:e1:af:7b:d0:1a:03:61:58:cc:3b:e6:21:f8: 59:8f:21:00:8d:ae:25:c5:a1:55:77:bc:5d:3c:72: 07:d2:f3:45:c2:dc:d6:3f:c1:e5:b9:e6:fe:8e:44: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9E:3B:96:63:30:87:8B:3E:6B:98:0D:FF:00:07:6A:2F:4E:47:B4 X509v3 Authority Key Identifier: keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c7:e0:15:67:26:ef:3d:f4:f4:e2:e5:c4:57:bc:80:07:c8: 96:c4:7b:80:f8:8c:37:31:01:d3:bd:e4:13:48:16:2e:8b:f6: cf:15:78:df:b9:65:ff:fb:89:84:75:5f:f2:41:5e:9c:b3:3f: 96:e7:0d:18:18:1b:53:1f:ed:30:51:90:58:5f:a2:cf:5a:b1: e0:70:a4:88:54:0b:5e:86:fb:9c:d7:94:81:91:07:f2:73:73: ce:8e:eb:88:24:8a:7d:85:d9:e9:dc:c1:15:c3:a8:fc:91:59: 3e:94:40:49:08:97:e3:27:42:59:5b:2f:aa:18:f8:b2:13:91: e8:5b:37:26:e5:a0:31:15:20:6b:21:6a:13:9e:b1:14:65:b5: 39:ea:c2:27:30:e1:3b:f8:2b:41:2a:2d:15:f3:4b:08:09:4b: 3e:ba:4e:25:42:e1:03:4e:86:d7:1f:27:fa:d8:44:08:2a:d0: a9:58:57:47:67:b9:1e:92:98:c7:90:8b:85:ec:92:a4:f2:c0: 1d:79:60:af:d8:81:2b:eb:f6:63:a6:2d:fe:d9:52:25:ea:28: db:b2:6b:dd:76:43:6c:c3:f0:31:86:9a:b0:02:51:9c:fd:2a: 57:9d:bf:be:6b:49:27:c0:eb:cd:e3:69:da:bf:11:b9:ab:fe: 67:92:46:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDM4ODExMC8GA1UEBRMoMUY5RDNGOTkxNzRDNkIzNzBBMEU1MTAwMDBDQTNERjdC Njc0MEM3QjAeFw0yNDExMjMwNTU1NDZaFw0yNDExMzAwNTU1NDZaMBgxFjAUBgNV BAMTDTY3NDE2ZTYzLWI0ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/d3xlgRtCVV4F+rKZ8KOnxrJLVeBP9Re2qdnuHT7HCszoTdOCeNNjpGFO2065 aFkpNB5bbnIbiudo/wc6rYBeLJvTBTgnL3zgTng9ATf25ApVhTXU2oJatbAaq0Cy Fd3HfHgg5Ntkhqii4skg4GEhiJRHPHEmK3wnCdoMtKBun7cHQD7nyplMAKUNAtHe FgqR1g4YXP/mUzI0ItoiJGPnWDqVJ9VqyiLv+eMKi94GeVUAEMv1ZhuuGLkP2Xs2 WQjFAyQb928uOtSyKaYi/F2DiQit4a970BoDYVjMO+Yh+FmPIQCNriXFoVV3vF08 cgfS80XC3NY/weW55v6ORHTFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWZ47lmMw h4s+a5gN/wAHai9OR7QwHwYDVR0jBBgwFoAUH50/mRdMazcKDlEAAMo997Z0DHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0Mzg4LzQxMzlGODk2OEMz NzExRUY4MDkwMUMyRUM0RjlBRTAyL0g1MF9tUmRNYXpjS0RsRUFBTW85OTdaMERI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDUwX21SZE1hemNLRGxFQUFNbzk5N1owREhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 Mzg4LzQxMzlGODk2OEMzNzExRUY4MDkwMUMyRUM0RjlBRTAyL0g1MF9tUmRNYXpj S0RsRUFBTW85OTdaMERIcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG/H4BVnJu899PTi5cRXvIAHyJbEe4D4jDcxAdO95BNIFi6L9s8VeN+5 Zf/7iYR1X/JBXpyzP5bnDRgYG1Mf7TBRkFhfos9aseBwpIhUC16G+5zXlIGRB/Jz c86O64gkin2F2encwRXDqPyRWT6UQEkIl+MnQllbL6oY+LITkehbNybloDEVIGsh ahOesRRltTnqwicw4Tv4K0EqLRXzSwgJSz66TiVC4QNOhtcfJ/rYRAgq0KlYV0dn uR6SmMeQi4XskqTywB15YK/YgSvr9mOmLf7ZUiXqKNuya912Q2zD8DGGmrACUZz9 Kledv75rSSfA683jadq/Ebmr/meSRms= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org