$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json) Hash identifier: 6t5ko26pMtrArE7cm11DzZ6ImNAjaFpgyMWu6EW39oE= Subject key identifier: D6:92:CE:27:3B:10:AB:2C:0A:07:0A:C8:1E:5B:D3:C3:AF:E4:3F:1A Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Certificate serial: 0F51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft Manifest number: 0F46 Signing time: Sat 04 May 2024 18:20:45 +0000 Manifest this update: Sat 04 May 2024 18:20:44 +0000 Manifest next update: Sat 11 May 2024 18:20:44 +0000 Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: fof82K6Gbnhic3DEoNruWmT5RFDHkV5bLfnJVZ8wsYU=) 2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: lqruPGCWCd2AwXtf9QcFK4QcBzBxApi0WicGVmwcjJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3921 (0xf51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Validity Not Before: May 4 18:20:44 2024 GMT Not After : May 11 18:20:44 2024 GMT Subject: CN=66367c7d-b014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:b8:62:c1:46:f7:bd:02:1e:8b:ee:17:58: 1f:e7:4f:1a:79:05:50:34:09:23:5b:6e:0a:f2:29: 6a:79:73:4e:64:84:f7:31:94:83:af:68:1d:f4:4a: f5:74:5b:05:8d:95:32:08:13:1f:1f:aa:fa:56:98: 4d:2b:2b:74:6c:55:87:72:d7:88:d7:dc:83:6f:92: 0a:b3:1e:a5:e0:ab:14:b6:33:61:93:1a:c1:c0:75: 10:22:86:4d:25:f4:c5:50:b4:5a:bc:29:61:88:36: aa:ee:cf:ef:ad:ba:cb:f3:94:dc:1e:6c:0a:9e:7d: ab:ae:b1:c4:72:7b:c2:09:f8:05:12:4f:c7:8b:22: db:44:14:6e:86:8f:b5:5d:bb:67:7a:dd:03:b3:a4: 1a:01:6c:0a:7f:95:ea:7b:04:49:8e:5a:f3:50:bb: 3b:35:1c:2a:68:6d:d6:5e:82:94:de:de:a0:bd:63: e5:11:87:05:dd:32:46:2b:c5:79:d4:4c:e2:3c:a5: 70:64:f6:5b:d4:29:18:76:4a:31:e5:0d:27:bb:ed: 20:be:af:64:0d:61:b3:42:cb:37:57:25:3c:86:15: 81:aa:18:8a:da:ca:34:d6:1f:23:ad:91:32:85:7c: b6:3b:d4:b8:b7:d6:6b:d4:38:eb:17:ed:e2:6d:d8: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:92:CE:27:3B:10:AB:2C:0A:07:0A:C8:1E:5B:D3:C3:AF:E4:3F:1A X509v3 Authority Key Identifier: keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ac:42:7c:89:10:ea:a0:2d:4e:28:93:3a:51:cf:98:f1:af: fe:37:ab:73:e1:6d:90:30:f7:2c:74:46:77:db:09:11:b1:92: 1f:99:0a:c4:3e:42:37:dc:14:19:2e:bd:c4:2a:53:e8:11:81: f1:4c:03:10:2a:03:5e:77:ee:dc:8a:5d:a1:c8:a1:d3:cc:81: c4:bc:c6:04:d2:76:a7:f6:33:68:3b:20:dd:1c:dc:7d:84:ad: 04:77:5b:0c:3d:c1:47:28:9f:44:a6:fe:34:1d:97:c8:3d:1a: d4:b4:d3:03:8d:30:06:b5:e2:85:0e:6e:a7:50:b8:72:21:5d: ca:4a:7c:f4:32:fb:45:3a:c5:38:70:f5:7f:7f:0a:f8:22:4b: fc:09:07:b1:49:e2:4d:31:9f:fc:5b:4b:fc:3f:93:02:ea:c3: 40:8e:15:92:eb:20:38:13:7a:0b:12:49:c8:b4:64:73:42:be: ed:f4:03:60:ee:f4:e2:a3:8a:73:fd:72:24:4c:9c:69:4e:9c: ec:08:0d:36:33:06:14:ac:b3:63:90:55:08:2f:60:b3:6f:0f: 3a:17:c3:22:37:b0:b9:c9:24:ea:fc:a7:97:5a:24:74:62:ca: af:ac:a8:86:c9:f8:4d:f1:ea:63:eb:3a:f1:be:f4:16:91:ae: e6:4d:6c:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5MEYxMTAvBgNVBAUTKDM0NEZCNDk5QTZBMzdEMjYzMjlBQjdENUZGNTI2MjUx MDk4RTVERjIwHhcNMjQwNTA0MTgyMDQ0WhcNMjQwNTExMTgyMDQ0WjAYMRYwFAYD VQQDEw02NjM2N2M3ZC1iMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0a4YsFG970CHovuF1gf508aeQVQNAkjW24K8ilqeXNOZIT3MZSDr2gd9Er1 dFsFjZUyCBMfH6r6VphNKyt0bFWHcteI19yDb5IKsx6l4KsUtjNhkxrBwHUQIoZN JfTFULRavClhiDaq7s/vrbrL85TcHmwKnn2rrrHEcnvCCfgFEk/HiyLbRBRuho+1 Xbtnet0Ds6QaAWwKf5XqewRJjlrzULs7NRwqaG3WXoKU3t6gvWPlEYcF3TJGK8V5 1EziPKVwZPZb1CkYdkox5Q0nu+0gvq9kDWGzQss3VyU8hhWBqhiK2so01h8jrZEy hXy2O9S4t9Zr1DjrF+3ibdjo1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaSzic7 EKssCgcKyB5b08Ov5D8aMB8GA1UdIwQYMBaAFDRPtJmmo30mMpq31f9SYlEJjl3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTkwRi82Q0MwRjlGNDQ3 QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZTWXltcmZWXzFKaVVRbU9Y ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FLTBtYWFqZlNZeW1yZlZfMUppVVFtT1hmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTkwRi82Q0MwRjlGNDQ3QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZT WXltcmZWXzFKaVVRbU9YZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPrEJ8iRDqoC1OKJM6Uc+Y8a/+N6tz4W2QMPcsdEZ32wkRsZIfmQrE PkI33BQZLr3EKlPoEYHxTAMQKgNed+7cil2hyKHTzIHEvMYE0nan9jNoOyDdHNx9 hK0Ed1sMPcFHKJ9Epv40HZfIPRrUtNMDjTAGteKFDm6nULhyIV3KSnz0MvtFOsU4 cPV/fwr4Ikv8CQexSeJNMZ/8W0v8P5MC6sNAjhWS6yA4E3oLEknItGRzQr7t9ANg 7vTio4pz/XIkTJxpTpzsCA02MwYUrLNjkFUIL2Czbw86F8MiN7C5ySTq/KeXWiR0 YsqvrKiGyfhN8epj6zrxvvQWka7mTWxY -----END CERTIFICATE-----Generated at Sat May 4 20:37:04 2024 by rpki-client on console-fra.rpki-client.org