$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: S+e1vyLyf4K3dXSdOkCSLmyQWuhwg1IlApnvU5DUyCo= Subject key identifier: 26:87:35:43:71:8C:DD:BB:6A:85:D2:4E:87:B5:76:07:1E:F0:E6:E7 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0B84 Signing time: Thu 02 May 2024 19:36:52 +0000 Manifest this update: Thu 02 May 2024 19:36:52 +0000 Manifest next update: Thu 09 May 2024 19:36:52 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: T7dCRaDW+4QZDIfwZCT6qLveZA2hBKiM7Ry09zwu8j8=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: Cxeg6/2R0l/1Ra7SpfOt4WX+yqNXRq0yTeO61ABIfck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: May 2 19:36:52 2024 GMT Not After : May 9 19:36:52 2024 GMT Subject: CN=6633eb54-23fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:48:59:49:5f:2c:fa:80:82:bd:49:81:b1: f3:31:ff:b6:69:3d:3f:4a:9f:82:b1:ea:fe:49:ca: 6c:a0:9f:6d:40:bf:a0:87:d6:f3:c0:3c:56:1b:45: c7:5d:2d:7f:5b:ed:ca:ab:d8:d6:ea:c9:32:98:e3: da:b1:2d:16:dc:c0:23:70:a4:ce:a2:6c:00:00:d6: 28:f9:b6:63:db:01:c8:19:57:a2:97:fe:b4:56:3b: 99:8a:0a:80:74:aa:53:ae:10:40:a3:91:61:43:69: 98:8c:60:5a:4c:ed:3b:df:c1:ca:12:b0:de:af:d5: dc:69:12:9c:e5:3a:d5:a7:2a:12:10:67:26:2d:82: 8f:47:23:79:e2:41:9b:79:a3:f7:7a:e3:f7:a1:72: c5:35:d7:ee:8b:d4:6a:65:51:24:fd:05:8c:17:c5: bf:61:c4:fb:73:e0:83:9b:2d:38:5c:cf:fd:96:86: 81:5b:ba:30:2d:11:3c:e2:e5:1c:4f:81:e7:0f:c5: 34:0e:38:26:b3:26:4c:3d:cb:90:51:13:39:03:4a: f3:7a:84:2d:9b:bc:aa:cf:e8:11:ea:a6:5d:d4:17: 98:c3:21:00:8e:03:07:48:40:79:e5:90:5d:ea:18: 2f:27:a7:0d:b6:83:7e:8d:c4:64:c0:ca:38:4c:1d: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:87:35:43:71:8C:DD:BB:6A:85:D2:4E:87:B5:76:07:1E:F0:E6:E7 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:84:34:78:59:e3:2b:79:8b:0e:ff:39:7d:b7:5f:e6:c6:f5: 14:e1:60:04:0b:b9:56:79:d6:c4:fc:82:c0:71:56:02:c7:68: 2f:20:61:92:3c:75:66:2f:64:f8:b9:ec:b1:b4:8f:83:93:12: fa:d0:29:48:5a:b1:4c:0e:90:83:c7:2f:0f:48:27:34:bf:67: b5:d2:96:86:6b:db:ed:08:42:f9:46:0c:e9:2f:cf:5c:00:d5: 1f:04:a9:92:ce:9b:7f:af:18:c5:87:f1:28:80:77:3c:f5:74: 7a:9c:f2:08:23:8d:f5:d7:0d:31:1a:ec:f6:6e:4d:8c:52:fe: a1:1d:8b:ae:a1:c8:ff:db:2e:5c:5b:ce:c1:b7:b0:08:19:67: 2f:c3:e1:ad:4f:f5:ce:69:8a:3e:5f:f9:6a:74:3f:db:fd:d1: 90:35:f3:53:5b:d7:62:4f:d3:9f:d0:1f:f6:aa:16:0e:54:2b: 40:b5:5f:86:e7:8e:9e:4b:92:7d:ae:26:25:4c:3c:a5:d1:30: 34:b4:08:5c:18:22:99:62:62:d6:92:72:f9:27:16:c5:b8:2d: 78:4e:26:b7:1d:4c:f0:7f:1b:92:f3:e4:95:92:3d:c2:4c:ca: ff:6f:d0:74:85:8e:57:f1:b8:56:95:cd:cb:34:34:a3:48:68: a7:cd:ea:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjQwNTAyMTkzNjUyWhcNMjQwNTA5MTkzNjUyWjAYMRYwFAYD VQQDEw02NjMzZWI1NC0yM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSxIWUlfLPqAgr1JgbHzMf+2aT0/Sp+Cser+ScpsoJ9tQL+gh9bzwDxWG0XH XS1/W+3Kq9jW6skymOPasS0W3MAjcKTOomwAANYo+bZj2wHIGVeil/60VjuZigqA dKpTrhBAo5FhQ2mYjGBaTO0738HKErDer9XcaRKc5TrVpyoSEGcmLYKPRyN54kGb eaP3euP3oXLFNdfui9RqZVEk/QWMF8W/YcT7c+CDmy04XM/9loaBW7owLRE84uUc T4HnD8U0DjgmsyZMPcuQURM5A0rzeoQtm7yqz+gR6qZd1BeYwyEAjgMHSEB55ZBd 6hgvJ6cNtoN+jcRkwMo4TB1IyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaHNUNx jN27aoXSToe1dgce8ObnMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAghDR4WeMreYsO/zl9t1/mxvUU4WAEC7lWedbE/ILAcVYCx2gvIGGS PHVmL2T4ueyxtI+DkxL60ClIWrFMDpCDxy8PSCc0v2e10paGa9vtCEL5RgzpL89c ANUfBKmSzpt/rxjFh/EogHc89XR6nPIII4311w0xGuz2bk2MUv6hHYuuocj/2y5c W87Bt7AIGWcvw+GtT/XOaYo+X/lqdD/b/dGQNfNTW9diT9Of0B/2qhYOVCtAtV+G 546eS5J9riYlTDyl0TA0tAhcGCKZYmLWknL5JxbFuC14Tia3HUzwfxuS8+SVkj3C TMr/b9B0hY5X8bhWlc3LNDSjSGinzeoD -----END CERTIFICATE-----Generated at Thu May 2 20:50:18 2024 by rpki-client on console-fra.rpki-client.org