$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json) Hash identifier: DaBQwAD+NdKz9R5Uw0NYd+dOJk/mpe2R69M8Z06RwWs= Subject key identifier: 8C:89:0D:9C:68:4E:E5:EB:81:A2:B7:ED:13:44:79:D2:A9:42:1C:B9 Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft Manifest number: 0D Signing time: Wed 25 Dec 2024 06:10:00 +0000 Manifest this update: Wed 25 Dec 2024 06:10:00 +0000 Manifest next update: Wed 01 Jan 2025 06:10:00 +0000 Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: o5m3V2uxH876AYzLFXJN6wSlxDKzvFAAdvtmrlUwfhg=) 2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: uKwkZfPxaBZe+NEWyqJ10DRoEbJiI4u5JFaaWffNJlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5 Validity Not Before: Dec 25 06:10:00 2024 GMT Not After : Jan 1 06:10:00 2025 GMT Subject: CN=676ba1b8-7d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:dc:bd:d4:79:83:4a:2b:6f:6a:73:f5:35: fa:ad:8f:6b:8f:1c:5a:6e:b4:42:93:49:ae:3b:0f: 3d:89:78:99:1b:5d:05:64:f2:24:a0:b6:23:b1:ec: 81:88:ee:80:1b:bd:2e:2e:b0:d7:eb:be:ca:16:51: 42:b6:f2:81:fe:c3:31:67:ed:b6:2e:52:b5:40:0a: b8:1b:f9:17:43:94:90:9b:23:0e:c1:64:bd:c5:8d: 35:12:ef:2a:ac:85:8b:68:a4:37:8c:28:48:c4:ec: f7:b7:44:0e:1b:ae:c1:d9:e5:44:a2:fb:9e:93:1b: 45:e1:ed:cf:d2:25:3d:6f:64:d9:2a:fd:f8:52:d9: da:36:8f:26:6b:62:dc:47:d0:17:9e:58:48:7b:73: 58:2e:04:35:d6:3a:08:47:1d:a8:dc:8e:cf:6a:99: b3:7a:ef:28:9a:1c:5a:f7:5b:99:b7:a3:a3:c8:99: 33:6d:52:9a:37:bc:74:35:ec:4b:d8:63:c0:88:4b: 35:57:56:c3:5c:67:53:dd:66:fc:c1:2e:1f:6a:b7: 85:70:3c:3a:27:97:64:df:24:9d:16:69:a9:b5:c2: 32:1f:76:2c:da:54:85:96:35:2d:b3:32:c8:df:ec: 6e:0d:74:2e:f6:61:a4:ee:18:45:6b:98:9b:2d:db: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:0D:9C:68:4E:E5:EB:81:A2:B7:ED:13:44:79:D2:A9:42:1C:B9 X509v3 Authority Key Identifier: keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:95:0a:ed:74:c1:e2:52:e8:8c:6b:d5:e1:4e:fc:78:c4:47: 6c:e4:89:31:d4:dd:a8:91:4d:83:2d:7c:ab:0f:bd:70:e6:95: 81:c1:42:a8:cd:be:70:9a:28:28:d7:a7:b0:b4:28:6c:68:5a: a1:26:99:a5:a3:3b:a0:ee:bc:21:06:03:73:aa:8a:56:84:82: 92:09:59:89:73:09:23:86:55:dc:60:0c:85:e6:aa:14:e9:19: 38:a3:63:8f:95:f1:4d:fd:3a:55:51:3a:cd:96:46:22:75:1d: df:4a:99:60:aa:df:3d:27:79:f8:35:b2:39:a0:16:fa:99:7e: 07:a3:1d:d6:ce:25:1e:0f:c0:99:38:50:9c:c6:67:c7:54:b1: f5:2c:a8:34:8e:d1:c2:c6:7e:98:17:2e:02:d4:38:95:86:62: 47:9c:04:ca:fc:2e:10:e1:09:be:1d:bc:cf:b4:c3:bd:06:89: 9a:e5:ab:dc:ef:db:d0:d3:c5:ef:73:5c:96:e4:13:a2:60:6d: 8e:8f:8f:bd:de:e1:9a:b9:e2:7e:ba:c5:ae:fd:18:8e:db:c8: 4d:b7:b7:8d:06:fc:82:a7:a7:3a:4f:7f:96:b0:77:b9:e8:65: 56:bf:a4:96:7c:38:06:ac:7a:4e:bd:b5:b9:aa:c1:9f:dd:ed: ac:e2:e7:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTI5RDExMC8GA1UEBRMoMzU4NDFBRTMzREY2OTMxMjAxNDA2Nzk4QUU2NEZDQzA4 N0Y1QTFFNTAeFw0yNDEyMjUwNjEwMDBaFw0yNTAxMDEwNjEwMDBaMBgxFjAUBgNV BAMTDTY3NmJhMWI4LTdkNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmHNy91HmDSitvanP1Nfqtj2uPHFputEKTSa47Dz2JeJkbXQVk8iSgtiOx7IGI 7oAbvS4usNfrvsoWUUK28oH+wzFn7bYuUrVACrgb+RdDlJCbIw7BZL3FjTUS7yqs hYtopDeMKEjE7Pe3RA4brsHZ5USi+56TG0Xh7c/SJT1vZNkq/fhS2do2jyZrYtxH 0BeeWEh7c1guBDXWOghHHajcjs9qmbN67yiaHFr3W5m3o6PImTNtUpo3vHQ17EvY Y8CISzVXVsNcZ1PdZvzBLh9qt4VwPDonl2TfJJ0Waam1wjIfdizaVIWWNS2zMsjf 7G4NdC72YaTuGEVrmJst28SDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjIkNnGhO 5euBorftE0R50qlCHLkwHwYDVR0jBBgwFoAUNYQa4z32kxIBQGeYrmT8wIf1oeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MjlELzZFMDUwRUY2QjEz MDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9l VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTllRYTR6MzJreElCUUdlWXJtVDh3SWYxb2VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MjlELzZFMDUwRUY2QjEzMDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJ QlFHZVlybVQ4d0lmMW9lVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHeVCu10weJS6Ixr1eFO/HjER2zkiTHU3aiRTYMtfKsPvXDmlYHBQqjN vnCaKCjXp7C0KGxoWqEmmaWjO6DuvCEGA3OqilaEgpIJWYlzCSOGVdxgDIXmqhTp GTijY4+V8U39OlVROs2WRiJ1Hd9KmWCq3z0nefg1sjmgFvqZfgejHdbOJR4PwJk4 UJzGZ8dUsfUsqDSO0cLGfpgXLgLUOJWGYkecBMr8LhDhCb4dvM+0w70GiZrlq9zv 29DTxe9zXJbkE6JgbY6Pj73e4Zq54n66xa79GI7byE23t40G/IKnpzpPf5awd7no ZVa/pJZ8OAasek69tbmqwZ/d7azi59g= -----END CERTIFICATE-----Generated at Wed Dec 25 07:59:59 2024 by rpki-client on console-ams.rpki-client.org