$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft File: H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json) Hash identifier: xfGW1alv44Yb1v5kY+QK4t8j1P/ZO5UF67kw/jv2dh8= Subject key identifier: ED:F2:E4:BE:6E:BD:10:A4:44:31:52:74:E7:7E:28:A4:54:FB:F7:3B Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B Certificate issuer: /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft Manifest number: 05 Signing time: Wed 23 Oct 2024 06:52:29 +0000 Manifest this update: Wed 23 Oct 2024 06:52:29 +0000 Manifest next update: Wed 30 Oct 2024 06:52:29 +0000 Files and hashes: 1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: VsZh/gH4eNlTv8xcBQJjsc5jeywFP0gbh3dK00CbtnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Validity Not Before: Oct 23 06:52:29 2024 GMT Not After : Oct 30 06:52:29 2024 GMT Subject: CN=67189d2d-5773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:97:57:04:09:6e:c6:5a:bb:c1:64:61:ca: 96:fc:fe:4f:e0:eb:14:9c:9a:ac:d7:cf:d7:a4:79: 97:91:32:1b:16:15:5e:03:9e:66:57:84:a7:71:82: 63:ae:b2:18:f8:7d:83:fe:38:ff:40:4b:b7:89:c1: 56:06:58:55:8a:ce:62:4f:29:29:d8:2e:8a:6d:10: ad:b2:5a:8f:4c:f8:b2:ef:47:0f:dd:f6:1e:9f:f5: 7a:e5:13:3f:c3:df:e2:b8:4c:42:b7:9f:50:94:8e: c8:94:0e:3c:7c:f7:7e:01:d9:0c:42:30:97:e1:9f: cd:9b:1a:c4:77:4b:b8:3e:d1:6e:30:c3:71:f1:4a: 59:70:c4:c3:7e:d6:c1:dc:56:3c:7e:86:9e:42:07: 4a:6c:17:a3:10:43:e3:da:71:6c:4d:a0:33:c8:eb: d4:0f:8b:63:14:83:b6:30:3a:58:37:5b:40:f2:bb: 7b:3a:b2:86:d9:b7:ec:4b:7b:e8:e2:58:de:ca:c8: d7:e7:b8:d4:6b:63:2f:2a:f2:fc:96:58:78:96:bd: a9:e3:e5:83:4b:96:f7:c7:f4:11:e8:4f:b0:16:ae: 17:d4:4c:65:17:49:35:13:e8:6b:ca:0a:98:74:ee: 03:a1:45:03:72:25:7a:9f:38:d1:38:c1:3c:4a:62: 4d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F2:E4:BE:6E:BD:10:A4:44:31:52:74:E7:7E:28:A4:54:FB:F7:3B X509v3 Authority Key Identifier: keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c2:91:32:00:e6:88:e5:87:48:bc:3f:a2:0a:22:d9:3a:f5: 8e:b8:87:93:3b:2c:4a:01:ef:76:9e:3a:e4:d4:df:2f:7f:54: ed:22:0f:0d:e4:88:40:cb:3c:0d:31:18:06:23:10:9a:84:d8: 18:e5:6f:a7:df:67:fc:23:62:90:04:e2:ec:2d:4e:6a:77:8c: ca:a4:45:a3:f9:6e:45:f3:c9:75:a0:45:da:8e:d4:ca:24:8a: ce:08:38:3f:af:ec:2d:7c:4e:64:e7:e1:4d:8c:6a:fc:39:bb: 57:61:80:31:42:f4:8e:20:04:8c:87:c4:88:40:ad:8d:58:39: ca:69:b2:4b:95:30:ec:42:7c:08:e7:35:c7:5d:35:41:26:1a: 14:ee:b0:0c:97:4a:41:e6:ac:57:7e:c2:02:52:ff:cd:e1:bb: 58:c0:0d:29:85:fe:8e:fa:d7:37:a9:a2:5f:e9:35:c9:9a:1c: 38:16:c2:4f:db:5a:1f:ba:ef:f2:35:4c:15:b9:2e:dc:6d:19: 33:df:a4:f8:75:69:32:0e:ba:40:0f:33:46:c1:b8:97:16:ca: e0:a6:ca:55:7a:a9:02:f9:d3:94:73:1b:c0:28:55:9e:7a:b0: a4:4f:17:df:1d:a3:88:25:bc:c9:58:3a:7d:00:99:35:26:0a: b6:b9:b2:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDM4ODExMC8GA1UEBRMoMUY5RDNGOTkxNzRDNkIzNzBBMEU1MTAwMDBDQTNERjdC Njc0MEM3QjAeFw0yNDEwMjMwNjUyMjlaFw0yNDEwMzAwNjUyMjlaMBgxFjAUBgNV BAMTDTY3MTg5ZDJkLTU3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9gZdXBAluxlq7wWRhypb8/k/g6xScmqzXz9ekeZeRMhsWFV4DnmZXhKdxgmOu shj4fYP+OP9AS7eJwVYGWFWKzmJPKSnYLoptEK2yWo9M+LLvRw/d9h6f9XrlEz/D 3+K4TEK3n1CUjsiUDjx8934B2QxCMJfhn82bGsR3S7g+0W4ww3HxSllwxMN+1sHc Vjx+hp5CB0psF6MQQ+PacWxNoDPI69QPi2MUg7YwOlg3W0Dyu3s6sobZt+xLe+ji WN7KyNfnuNRrYy8q8vyWWHiWvanj5YNLlvfH9BHoT7AWrhfUTGUXSTUT6GvKCph0 7gOhRQNyJXqfONE4wTxKYk33AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7fLkvm69 EKREMVJ0534opFT79zswHwYDVR0jBBgwFoAUH50/mRdMazcKDlEAAMo997Z0DHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0Mzg4LzQxMzlGODk2OEMz NzExRUY4MDkwMUMyRUM0RjlBRTAyL0g1MF9tUmRNYXpjS0RsRUFBTW85OTdaMERI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDUwX21SZE1hemNLRGxFQUFNbzk5N1owREhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 Mzg4LzQxMzlGODk2OEMzNzExRUY4MDkwMUMyRUM0RjlBRTAyL0g1MF9tUmRNYXpj S0RsRUFBTW85OTdaMERIcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTCkTIA5ojlh0i8P6IKItk69Y64h5M7LEoB73aeOuTU3y9/VO0iDw3k iEDLPA0xGAYjEJqE2Bjlb6ffZ/wjYpAE4uwtTmp3jMqkRaP5bkXzyXWgRdqO1Mok is4IOD+v7C18TmTn4U2Mavw5u1dhgDFC9I4gBIyHxIhArY1YOcppskuVMOxCfAjn NcddNUEmGhTusAyXSkHmrFd+wgJS/83hu1jADSmF/o761zepol/pNcmaHDgWwk/b Wh+67/I1TBW5LtxtGTPfpPh1aTIOukAPM0bBuJcWyuCmylV6qQL505RzG8AoVZ56 sKRPF98do4glvMlYOn0AmTUmCra5sgI= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:19 2024 by rpki-client on console-fra.rpki-client.org