$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json) Hash identifier: UII8DrLl3K516bbuyIeTHHgkymaQp77OnfdAa/pX3tg= Subject key identifier: 68:5D:FA:3E:2C:A7:C7:44:B8:C9:A7:EA:DD:28:53:5C:C3:3B:43:25 Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Certificate serial: 0FB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft Manifest number: 0FAD Signing time: Fri 22 Nov 2024 17:29:24 +0000 Manifest this update: Fri 22 Nov 2024 17:29:23 +0000 Manifest next update: Fri 29 Nov 2024 17:29:23 +0000 Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: 7tnb5VKpwOCwlKZ94sI33iYaQZHOp3A1naoINSWlYLY=) 2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: lqruPGCWCd2AwXtf9QcFK4QcBzBxApi0WicGVmwcjJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4024 (0xfb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Validity Not Before: Nov 22 17:29:23 2024 GMT Not After : Nov 29 17:29:23 2024 GMT Subject: CN=6740bf74-008a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:53:c7:a1:54:00:cf:4b:0d:8b:07:6b:89: b2:64:e3:7e:3a:90:a7:d6:7b:23:80:05:df:93:b1: c9:48:85:f0:eb:5a:75:57:23:ca:37:d2:b7:33:65: c7:7a:2c:db:c8:08:e6:23:cd:2b:72:7f:09:82:5f: 60:41:a2:0e:d9:ee:e3:52:79:17:23:d3:52:ea:08: cc:3b:91:ee:94:24:34:2c:96:93:8c:40:e3:6a:db: 0a:fb:74:6e:82:6d:68:60:6c:e8:75:ed:9c:95:af: 76:b1:50:28:60:06:e5:14:08:3a:7b:7e:36:2d:3b: 6e:37:e9:fa:79:0d:25:13:93:f9:73:65:81:f7:2e: af:63:5a:d8:9c:f7:da:ea:b8:77:2f:b3:8a:1e:84: 07:75:d7:b9:69:8c:52:1a:95:d6:e5:87:d8:39:93: f9:3d:35:2b:11:ee:77:71:fa:af:e6:30:24:a5:88: 56:3d:0e:3e:8d:ed:50:9a:c4:4f:2a:60:c1:72:13: 8e:a9:20:1a:9b:37:00:e9:59:1c:6b:4e:a9:8f:83: b1:37:78:a6:64:de:5b:2b:b3:23:e9:f7:52:bf:cc: 7e:48:19:f4:80:10:d6:8e:88:31:a7:bd:8e:1c:6c: 9b:93:55:b4:55:ba:c9:99:8f:e2:d6:8f:ca:c0:02: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:FA:3E:2C:A7:C7:44:B8:C9:A7:EA:DD:28:53:5C:C3:3B:43:25 X509v3 Authority Key Identifier: keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:01:60:b0:c2:e8:0b:9d:b6:56:9f:0f:1f:48:a1:8a:cb:c7: 70:aa:28:d4:be:23:4f:d7:32:ff:32:39:74:11:da:35:49:87: 16:22:4e:dd:dc:04:e5:19:37:0e:75:73:c3:d5:f3:f9:99:f7: 2c:b8:89:45:09:94:5e:28:f8:0c:4c:29:44:cf:43:50:a2:82: 93:92:b4:ef:d9:73:a0:86:36:7d:2c:a9:e1:20:c5:ed:61:79: 84:0f:e5:57:87:11:72:8e:e6:06:fb:c3:d3:29:5a:62:34:12: da:d4:c7:9b:7d:25:56:79:8c:69:3e:86:e5:1a:1a:f6:ec:5f: 56:50:2e:68:cf:0d:36:96:8c:0d:8f:43:9b:e0:ce:08:2a:a6: 10:ed:22:83:0f:c1:6b:38:a9:81:a2:dd:11:4c:0b:58:1b:52: 7c:c1:88:80:b5:27:6a:82:c8:75:91:1e:b1:43:9e:5a:91:47: 52:ca:d3:9d:04:8f:ec:07:dd:25:f1:88:d9:10:4f:23:99:aa: ea:26:c0:ea:b8:5c:82:08:06:8d:f7:78:56:75:fb:1a:ce:e0: 61:c0:b9:e4:a8:ff:af:23:31:f8:e9:e6:62:61:a2:b4:f6:22: 50:f0:e8:74:97:19:71:f7:55:22:6c:ce:64:52:f5:1d:c4:26: 84:e1:b9:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5MEYxMTAvBgNVBAUTKDM0NEZCNDk5QTZBMzdEMjYzMjlBQjdENUZGNTI2MjUx MDk4RTVERjIwHhcNMjQxMTIyMTcyOTIzWhcNMjQxMTI5MTcyOTIzWjAYMRYwFAYD VQQDEw02NzQwYmY3NC0wMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGxTx6FUAM9LDYsHa4myZON+OpCn1nsjgAXfk7HJSIXw61p1VyPKN9K3M2XH eizbyAjmI80rcn8Jgl9gQaIO2e7jUnkXI9NS6gjMO5HulCQ0LJaTjEDjatsK+3Ru gm1oYGzode2cla92sVAoYAblFAg6e342LTtuN+n6eQ0lE5P5c2WB9y6vY1rYnPfa 6rh3L7OKHoQHdde5aYxSGpXW5YfYOZP5PTUrEe53cfqv5jAkpYhWPQ4+je1QmsRP KmDBchOOqSAamzcA6Vkca06pj4OxN3imZN5bK7Mj6fdSv8x+SBn0gBDWjogxp72O HGybk1W0VbrJmY/i1o/KwAKYDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhd+j4s p8dEuMmn6t0oU1zDO0MlMB8GA1UdIwQYMBaAFDRPtJmmo30mMpq31f9SYlEJjl3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTkwRi82Q0MwRjlGNDQ3 QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZTWXltcmZWXzFKaVVRbU9Y ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FLTBtYWFqZlNZeW1yZlZfMUppVVFtT1hmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTkwRi82Q0MwRjlGNDQ3QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZT WXltcmZWXzFKaVVRbU9YZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByAWCwwugLnbZWnw8fSKGKy8dwqijUviNP1zL/Mjl0Edo1SYcWIk7d 3ATlGTcOdXPD1fP5mfcsuIlFCZReKPgMTClEz0NQooKTkrTv2XOghjZ9LKnhIMXt YXmED+VXhxFyjuYG+8PTKVpiNBLa1MebfSVWeYxpPoblGhr27F9WUC5ozw02lowN j0Ob4M4IKqYQ7SKDD8FrOKmBot0RTAtYG1J8wYiAtSdqgsh1kR6xQ55akUdSytOd BI/sB90l8YjZEE8jmarqJsDquFyCCAaN93hWdfsazuBhwLnkqP+vIzH46eZiYaK0 9iJQ8Oh0lxlx91UibM5kUvUdxCaE4bmS -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org