$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json) Hash identifier: k1OiJ+FtWSDEp7rsCqM5sgMlE+QafMMYeeCpfbksueU= Subject key identifier: 8B:85:CD:CF:4F:5A:08:E1:2C:29:5E:19:D5:79:EF:F3:66:3B:05:D0 Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Certificate serial: 100C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft Manifest number: 0FFF Signing time: Thu 24 Apr 2025 17:27:23 +0000 Manifest this update: Thu 24 Apr 2025 17:27:22 +0000 Manifest next update: Thu 01 May 2025 17:27:22 +0000 Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: Xmh/7VY9NrisRc3tcxKfn1EkcniFfhWfAVvRIU4e+G4=) 2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: OFPIMpQg51qSJdzRG2hnBGn1IXeWBpS0NU5Xq+7iYjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4108 (0x100c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Validity Not Before: Apr 24 17:27:22 2025 GMT Not After : May 1 17:27:22 2025 GMT Subject: CN=680a747a-2483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:30:55:35:a1:7c:92:3c:2e:4e:f6:7c:3f: 85:7c:5d:92:d8:43:52:cf:8e:12:a7:3c:ab:f9:65: e4:6a:d7:ef:b2:7e:2b:55:62:07:7f:9e:b1:7f:78: 9e:08:9e:bb:5b:4a:1d:36:cf:e5:c9:4e:a3:98:97: ea:6d:ce:27:e0:af:05:d3:0d:5d:23:1f:27:b8:00: 6f:c6:88:78:59:74:f7:ed:ce:bb:a8:23:b5:7a:8f: 60:b1:c5:3c:24:53:a6:18:eb:04:cb:8d:1e:72:a9: 27:85:d9:51:31:8b:80:44:db:58:fb:2d:96:2e:49: 70:3e:b9:90:e6:8a:be:92:25:f3:40:f6:82:23:15: dc:b5:b0:23:7d:64:db:36:49:9d:d2:d5:e4:c9:f0: 26:b8:ac:72:cd:66:9e:93:51:96:49:54:5d:53:bc: 66:e7:12:20:fe:32:d1:e3:fa:0c:34:5a:f3:a2:f6: e6:77:ee:ff:35:0f:af:d2:29:e1:35:b5:b7:3a:92: f6:58:e3:d3:77:1c:4b:27:db:e4:f2:55:f3:e4:12: 49:56:0a:88:ad:4c:4b:66:a4:ea:e9:4b:89:68:7d: 87:93:69:ef:f0:b1:c8:d8:95:ff:ac:d8:98:94:e1: 97:68:29:7e:dc:74:75:42:17:ae:19:dd:94:14:c1: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:85:CD:CF:4F:5A:08:E1:2C:29:5E:19:D5:79:EF:F3:66:3B:05:D0 X509v3 Authority Key Identifier: keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ba:e2:90:ef:52:95:7a:af:1e:1f:33:42:a9:0b:40:50:8d: 97:9a:00:b3:53:ae:86:06:96:a3:e1:2b:dc:39:ff:2d:ea:15: 27:f3:a4:d8:aa:66:91:ea:18:5f:9c:7f:81:9d:40:f2:d0:9d: 1f:7c:94:be:c5:0b:dd:4b:23:4b:cb:df:79:07:59:bb:b5:cd: 4f:ce:70:29:09:a6:f8:99:c3:0f:1d:25:35:c0:26:7d:aa:3c: ae:e5:86:36:cb:74:d6:fd:38:b1:b1:97:3a:05:b8:7c:66:9e: 9b:02:b9:f9:fb:96:27:76:63:98:a8:c3:d2:87:2e:30:03:c0: b1:95:9f:2c:e6:43:47:00:ef:0a:ed:be:af:f9:3e:69:0a:f5: 63:84:a1:ee:b4:0a:7f:a5:b6:b3:92:9f:33:16:7d:e9:d9:71: b2:4d:ef:19:25:94:7f:ad:ce:44:39:c3:4c:80:d1:0a:0c:e3: be:81:ac:ed:55:09:e3:85:f3:19:55:ad:e3:8c:e5:00:c3:d4: 7d:c5:7e:db:47:5d:af:03:13:98:8c:83:72:41:c1:24:36:aa: 28:2d:55:bf:0c:f6:5f:8c:fc:3b:f6:a4:3f:ec:63:d5:6a:bb: 7d:63:f8:b0:ee:09:48:2b:18:b3:42:2a:90:e4:c3:d6:da:17: 39:16:a7:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5MEYxMTAvBgNVBAUTKDM0NEZCNDk5QTZBMzdEMjYzMjlBQjdENUZGNTI2MjUx MDk4RTVERjIwHhcNMjUwNDI0MTcyNzIyWhcNMjUwNTAxMTcyNzIyWjAYMRYwFAYD VQQDEw02ODBhNzQ3YS0yNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFcwVTWhfJI8Lk72fD+FfF2S2ENSz44Spzyr+WXkatfvsn4rVWIHf56xf3ie CJ67W0odNs/lyU6jmJfqbc4n4K8F0w1dIx8nuABvxoh4WXT37c67qCO1eo9gscU8 JFOmGOsEy40ecqknhdlRMYuARNtY+y2WLklwPrmQ5oq+kiXzQPaCIxXctbAjfWTb Nkmd0tXkyfAmuKxyzWaek1GWSVRdU7xm5xIg/jLR4/oMNFrzovbmd+7/NQ+v0inh NbW3OpL2WOPTdxxLJ9vk8lXz5BJJVgqIrUxLZqTq6UuJaH2Hk2nv8LHI2JX/rNiY lOGXaCl+3HR1QheuGd2UFMHcGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuFzc9P WgjhLCleGdV57/NmOwXQMB8GA1UdIwQYMBaAFDRPtJmmo30mMpq31f9SYlEJjl3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTkwRi82Q0MwRjlGNDQ3 QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZTWXltcmZWXzFKaVVRbU9Y ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FLTBtYWFqZlNZeW1yZlZfMUppVVFtT1hmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTkwRi82Q0MwRjlGNDQ3QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZT WXltcmZWXzFKaVVRbU9YZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkuuKQ71KVeq8eHzNCqQtAUI2XmgCzU66GBpaj4SvcOf8t6hUn86TY qmaR6hhfnH+BnUDy0J0ffJS+xQvdSyNLy995B1m7tc1PznApCab4mcMPHSU1wCZ9 qjyu5YY2y3TW/TixsZc6Bbh8Zp6bArn5+5YndmOYqMPShy4wA8CxlZ8s5kNHAO8K 7b6v+T5pCvVjhKHutAp/pbazkp8zFn3p2XGyTe8ZJZR/rc5EOcNMgNEKDOO+gazt VQnjhfMZVa3jjOUAw9R9xX7bR12vAxOYjINyQcEkNqooLVW/DPZfjPw79qQ/7GPV art9Y/iw7glIKxizQiqQ5MPW2hc5Fqeo -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:40 2025 by rpki-client