$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: pN8WSHOZg/wRpxkLRTaY4s9c5H5hHJE0p+3cVOxOMRw= Subject key identifier: 41:B6:4E:4C:E5:20:6A:F5:49:30:9B:18:72:C4:8D:39:C0:3A:ED:81 Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: 0B Signing time: Wed 25 Dec 2024 06:11:44 +0000 Manifest this update: Wed 25 Dec 2024 06:11:44 +0000 Manifest next update: Wed 01 Jan 2025 06:11:44 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: S9Iy+Yk/ZcUODw0NKPRNkkwplOBDvzpy8AsL0pg5miI=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: 6g3uL1vgtNQrEFWorVaYh83+voNNJt+isK3sxzf2iKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Dec 25 06:11:44 2024 GMT Not After : Jan 1 06:11:44 2025 GMT Subject: CN=676ba220-65f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:95:39:57:d6:67:ae:4d:9a:af:6e:c7:55: 4e:af:b1:72:85:0a:6c:05:b4:80:da:ba:e3:dc:1f: 97:c9:49:37:f0:84:95:07:1c:c5:b0:28:8d:4a:e1: d1:b1:39:e4:8b:68:81:79:81:bf:5c:70:8f:6d:7c: d5:9d:23:9e:88:49:ee:fa:0d:ba:59:5b:85:05:ac: c1:5a:ab:54:b1:71:dd:59:44:9b:3c:0f:28:55:3a: 55:89:41:d4:bb:ff:dc:97:f1:34:ef:89:45:e5:38: 20:c4:17:23:d1:08:f6:0d:47:da:53:90:48:c2:4e: fc:1c:4e:c4:f0:42:73:91:27:87:e2:3b:f8:16:a1: 40:e8:2f:72:23:e4:45:3c:fe:a9:c8:79:f9:d5:e0: 9b:b5:8d:51:e7:97:09:49:86:4f:43:f7:15:8d:0e: 02:f7:df:d4:2e:e1:8f:09:75:08:fd:ae:a1:b5:5d: 0b:b9:98:b8:63:3e:22:ae:6b:ea:f0:d9:d6:aa:5c: 5b:52:67:8a:43:3e:c6:8b:79:41:1e:b5:e1:37:76: fc:f4:8e:e6:33:53:8e:c0:0e:c1:25:d4:7f:90:62: f7:43:7b:ac:1f:fb:a1:52:ed:86:46:d4:89:15:91: 25:e1:cf:bf:b8:52:82:56:99:b2:bc:f7:c5:50:49: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B6:4E:4C:E5:20:6A:F5:49:30:9B:18:72:C4:8D:39:C0:3A:ED:81 X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f1:d6:44:73:31:f1:3c:fa:04:ce:fa:66:15:50:51:e2:eb: 6c:40:58:bc:54:bb:b9:74:6c:55:4d:c9:8d:25:5e:a6:74:dc: 3c:4d:f7:a3:81:a1:64:8f:f9:6c:87:6f:0e:a7:55:9f:83:02: a6:51:ac:33:e8:16:3a:49:a8:3d:db:ed:63:86:61:76:6c:3d: 3c:bb:5b:c0:ac:2d:09:44:03:e6:f1:bb:26:c1:b8:9c:3f:bd: e1:0c:72:b5:40:2f:09:25:2c:27:17:b2:85:78:25:14:16:36: 57:8e:37:47:5a:af:90:04:44:47:39:86:05:4f:9b:d6:16:c7: e6:be:c3:c6:7d:e3:c3:82:5f:4e:81:55:13:be:26:4c:aa:da: e5:02:7d:89:1c:21:8b:82:b3:63:2c:ae:85:5f:12:db:15:30: fc:29:f4:b9:ea:8e:30:ac:45:c2:16:45:e9:2b:b8:59:25:80: f7:e8:dd:3c:5c:7d:e5:b6:64:32:0e:50:09:2f:e8:e5:0e:ad: 07:cc:4e:52:e3:10:9e:eb:e9:99:1b:1f:a0:0c:b5:30:6d:d9: 4d:9f:9f:e9:49:15:fb:92:3e:36:51:ce:a2:2b:1d:13:93:c8: 5c:9c:e8:a3:86:ba:db:4c:36:af:8f:9d:88:45:21:1a:d7:c7: 8f:e4:34:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkFDQjExMC8GA1UEBRMoMzU4MTRCMTVGQjgzNDkzOUVFQTg1Q0M0QTY3QzRFMUE2 QTg1QTRGNTAeFw0yNDEyMjUwNjExNDRaFw0yNTAxMDEwNjExNDRaMBgxFjAUBgNV BAMTDTY3NmJhMjIwLTY1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWMJU5V9Znrk2ar27HVU6vsXKFCmwFtIDauuPcH5fJSTfwhJUHHMWwKI1K4dGx OeSLaIF5gb9ccI9tfNWdI56ISe76DbpZW4UFrMFaq1Sxcd1ZRJs8DyhVOlWJQdS7 /9yX8TTviUXlOCDEFyPRCPYNR9pTkEjCTvwcTsTwQnORJ4fiO/gWoUDoL3Ij5EU8 /qnIefnV4Ju1jVHnlwlJhk9D9xWNDgL339Qu4Y8JdQj9rqG1XQu5mLhjPiKua+rw 2daqXFtSZ4pDPsaLeUEeteE3dvz0juYzU47ADsEl1H+QYvdDe6wf+6FS7YZG1IkV kSXhz7+4UoJWmbK898VQSRirAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQbZOTOUg avVJMJsYcsSNOcA67YEwHwYDVR0jBBgwFoAUNYFLFfuDSTnuqFzEpnxOGmqFpPUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGQUNCLzI1RDExODg2QjQ2 NTExRUY5QkZCQUE2N0M0RjlBRTAyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTllGTEZmdURTVG51cUZ6RXBueE9HbXFGcFBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG QUNCLzI1RDExODg2QjQ2NTExRUY5QkZCQUE2N0M0RjlBRTAyL05ZRkxGZnVEU1Ru dXFGekVwbnhPR21xRnBQVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALTx1kRzMfE8+gTO+mYVUFHi62xAWLxUu7l0bFVNyY0lXqZ03DxN96OB oWSP+WyHbw6nVZ+DAqZRrDPoFjpJqD3b7WOGYXZsPTy7W8CsLQlEA+bxuybBuJw/ veEMcrVALwklLCcXsoV4JRQWNleON0dar5AEREc5hgVPm9YWx+a+w8Z948OCX06B VRO+Jkyq2uUCfYkcIYuCs2MsroVfEtsVMPwp9LnqjjCsRcIWRekruFklgPfo3Txc feW2ZDIOUAkv6OUOrQfMTlLjEJ7r6ZkbH6AMtTBt2U2fn+lJFfuSPjZRzqIrHROT yFyc6KOGuttMNq+PnYhFIRrXx4/kNLE= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:20 2024 by rpki-client on console-fra.rpki-client.org