$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: 7U+IY+b11GANVD6Hdvq7Yfngsbtb/hcz5JqqYmjkmIU= Subject key identifier: 52:D0:BB:A9:AF:5C:5A:EB:8F:7A:72:9E:9B:34:37:E9:30:68:94:88 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0BA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0B8B Signing time: Sat 18 May 2024 19:30:18 +0000 Manifest this update: Sat 18 May 2024 19:30:18 +0000 Manifest next update: Sat 25 May 2024 19:30:18 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: yZN1o/fREQu3/a+BbrB5w/xnRwIqOlMqaKuSkcfEvy8=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: Cxeg6/2R0l/1Ra7SpfOt4WX+yqNXRq0yTeO61ABIfck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: May 18 19:30:18 2024 GMT Not After : May 25 19:30:18 2024 GMT Subject: CN=664901ca-2df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0c:bf:7b:fc:60:7c:ae:40:23:0e:f2:e0:a9: 21:4c:1a:9f:7c:c4:ce:59:5d:cd:fb:03:5a:85:4e: e5:26:a2:4d:e6:65:dd:e0:55:d3:ff:88:cc:d6:89: 07:e2:42:78:e7:49:6f:92:59:a6:68:89:04:11:3c: 7d:db:e3:71:27:80:b2:c4:a5:31:e8:86:18:8a:c7: 12:aa:f9:1e:5c:07:82:2c:a4:bb:bd:29:50:13:2c: cd:2c:fd:00:ad:c7:64:51:13:15:74:e4:e4:53:57: 3b:92:c1:a3:e6:ff:f7:4c:82:4e:c1:50:f2:cd:41: 74:9e:15:09:4a:84:c1:a6:76:fc:d5:96:22:df:bb: fb:48:b5:db:67:bb:b8:c9:39:42:0a:d8:54:c4:8a: 3b:00:31:d2:03:b8:b7:66:48:06:b2:32:66:62:a4: 00:a1:ce:e8:bf:70:f8:59:93:04:07:25:fb:02:ca: bd:c6:0b:60:9c:08:36:11:3f:99:46:b0:36:5a:a9: 2d:98:25:82:6a:ab:5a:57:a8:fe:f1:6e:9b:23:88: 89:53:12:79:f2:7d:30:57:1e:4d:6f:64:f6:7c:69: 44:55:8d:87:c7:53:56:f2:ab:79:5b:fb:21:7c:87: 3b:2f:7c:53:32:86:52:9b:b4:cd:79:ef:f6:82:80: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D0:BB:A9:AF:5C:5A:EB:8F:7A:72:9E:9B:34:37:E9:30:68:94:88 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:44:68:2b:f1:da:61:e5:83:f6:ac:cf:cd:91:ec:ec:60:ca: 3b:f1:12:3b:16:fc:cb:5a:4f:04:4d:29:90:1d:03:6c:56:9e: c0:49:29:df:a7:56:7d:69:e1:56:0a:da:5c:bf:6d:06:bd:d9: a8:9a:07:23:8c:63:38:55:e1:a3:d4:f7:43:f8:61:78:12:17: 52:12:70:e1:2d:ed:d7:08:61:c9:6e:77:3c:cb:1f:d5:d3:0d: 70:68:44:ed:dd:11:fd:58:d8:a2:37:12:fe:24:39:06:0c:63: 37:35:9c:4d:bd:2e:db:8d:c4:0b:81:9e:11:04:d4:6c:2b:4b: 89:b6:09:3d:c0:27:ce:28:9b:3d:ce:1a:1e:ed:d7:a3:00:84: d5:2b:84:01:22:eb:48:28:cd:e1:e9:6a:67:0a:c1:4d:90:b7: 89:d9:54:de:2f:f4:02:31:85:ba:d4:74:63:f7:a4:ad:3e:47: 75:87:30:ea:17:f0:d8:5f:32:ab:d7:b9:5a:65:6f:c2:3f:e0: 43:cb:71:53:6e:61:e1:e5:50:65:9d:90:a0:06:f0:6e:36:3d: b2:06:11:7a:c3:e5:9c:ef:4b:61:29:2e:7b:42:7d:94:eb:18: 4b:09:d9:5a:c1:d1:d5:94:f1:ee:67:a1:bc:97:24:ec:0e:52: a4:18:00:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjQwNTE4MTkzMDE4WhcNMjQwNTI1MTkzMDE4WjAYMRYwFAYD VQQDEw02NjQ5MDFjYS0yZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Qy/e/xgfK5AIw7y4KkhTBqffMTOWV3N+wNahU7lJqJN5mXd4FXT/4jM1okH 4kJ450lvklmmaIkEETx92+NxJ4CyxKUx6IYYiscSqvkeXAeCLKS7vSlQEyzNLP0A rcdkURMVdOTkU1c7ksGj5v/3TIJOwVDyzUF0nhUJSoTBpnb81ZYi37v7SLXbZ7u4 yTlCCthUxIo7ADHSA7i3ZkgGsjJmYqQAoc7ov3D4WZMEByX7Asq9xgtgnAg2ET+Z RrA2WqktmCWCaqtaV6j+8W6bI4iJUxJ58n0wVx5Nb2T2fGlEVY2Hx1NW8qt5W/sh fIc7L3xTMoZSm7TNee/2goBAEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLQu6mv XFrrj3pynps0N+kwaJSIMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvRGgr8dph5YP2rM/NkezsYMo78RI7FvzLWk8ETSmQHQNsVp7ASSnf p1Z9aeFWCtpcv20GvdmomgcjjGM4VeGj1PdD+GF4EhdSEnDhLe3XCGHJbnc8yx/V 0w1waETt3RH9WNiiNxL+JDkGDGM3NZxNvS7bjcQLgZ4RBNRsK0uJtgk9wCfOKJs9 zhoe7dejAITVK4QBIutIKM3h6WpnCsFNkLeJ2VTeL/QCMYW61HRj96StPkd1hzDq F/DYXzKr17laZW/CP+BDy3FTbmHh5VBlnZCgBvBuNj2yBhF6w+Wc70thKS57Qn2U 6xhLCdlawdHVlPHuZ6G8lyTsDlKkGAC5 -----END CERTIFICATE-----Generated at Sat May 18 20:15:58 2024 by rpki-client on console-ams.rpki-client.org