$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json) Hash identifier: QJylEVVQSrQ17To3Nasx7ZRjxOOr7+8vQl8z88GoU/U= Subject key identifier: E1:A2:61:9A:E7:55:85:B3:15:1D:25:A5:D0:44:12:A3:49:C9:FB:D1 Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Certificate serial: 1014 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft Manifest number: 1007 Signing time: Sat 10 May 2025 17:20:23 +0000 Manifest this update: Sat 10 May 2025 17:20:23 +0000 Manifest next update: Sat 17 May 2025 17:20:23 +0000 Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: 48QDk1jTDcu4K1kR1xncfPD7uh9uAG8cUDeaqk2nNU4=) 2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: OFPIMpQg51qSJdzRG2hnBGn1IXeWBpS0NU5Xq+7iYjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4116 (0x1014) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Validity Not Before: May 10 17:20:23 2025 GMT Not After : May 17 17:20:23 2025 GMT Subject: CN=681f8ad7-9f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d9:30:79:a1:0e:2d:d6:03:97:02:fb:25:9c: 57:4e:3b:e4:7f:b6:25:fc:3a:e0:a8:df:cc:40:d0: e4:50:f5:b3:05:1d:c4:7b:40:db:35:30:16:6e:9c: db:ee:6e:4f:e2:23:9e:0a:8a:f5:7e:09:2f:96:c5: 0d:a5:45:10:95:a2:e4:24:b0:56:c4:8b:77:b7:af: 0c:0f:b9:78:ed:45:9a:09:bd:31:22:38:db:cd:f7: d5:f8:d9:93:25:d2:81:8d:33:fa:4d:e0:b9:3e:a6: 70:a1:02:87:3f:e1:0f:c8:f0:71:ab:ab:ac:15:c9: 71:2b:e7:45:2e:7e:5a:62:51:3e:2c:d6:0e:aa:bb: 95:21:16:55:ff:f1:0d:c5:95:00:26:04:18:c6:05: f7:4b:9e:a6:82:73:97:7d:f3:c0:83:a0:7a:dd:d4: 96:e5:77:e1:9d:7c:36:20:71:b4:aa:fe:6d:2e:3c: cf:8a:ba:61:56:c5:58:20:c3:b0:c5:13:16:8c:28: a7:08:bd:04:90:c1:c7:84:f7:fc:fe:35:1a:54:ca: f9:ef:b3:5e:8d:fd:ea:6f:09:18:1f:b6:b6:6a:a9: 19:f5:95:52:a0:f6:5a:ca:5d:da:a6:a8:8f:c7:29: cb:eb:ff:b0:38:b5:bb:ae:81:9c:86:69:e1:b6:92: 49:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A2:61:9A:E7:55:85:B3:15:1D:25:A5:D0:44:12:A3:49:C9:FB:D1 X509v3 Authority Key Identifier: keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c6:23:c9:3e:fd:e1:2b:ed:a5:e7:77:7b:32:08:6d:05:c9: 3b:a6:63:55:37:26:30:c3:54:81:10:58:9b:ca:ac:97:70:67: 85:e2:08:24:6c:b4:71:34:09:3c:2d:66:d6:78:c6:88:be:04: 0c:91:14:21:1c:46:e7:e9:3b:3e:9c:67:b6:39:86:18:9d:70: bd:7e:94:e0:4c:bd:a0:05:f5:3c:08:62:5a:87:1d:c2:e7:0d: 97:2f:b9:a9:9d:e6:e7:91:26:7b:e0:cb:a9:a6:ce:83:2b:dc: 59:2f:21:ec:84:c0:d2:12:34:bf:7d:4f:b0:2a:c8:29:c4:ad: 5f:98:44:34:e4:22:51:c1:75:42:df:55:0a:81:9a:9c:e5:73: de:67:17:10:8b:70:db:56:68:c3:be:29:fc:18:f9:d1:69:2a: d0:80:7b:69:a5:47:ae:88:15:7e:b0:92:27:de:d9:07:ee:c1: 55:95:12:50:4e:15:79:28:04:00:96:e9:35:3b:54:f6:58:51: be:e9:e2:dc:bd:ae:ca:81:01:cd:bf:a6:7d:27:d2:2f:cc:86: 8b:5d:71:dc:8f:d4:7d:f2:2c:4a:92:a2:37:23:0a:9d:36:ad: 0a:96:68:64:73:02:c4:19:23:f8:84:c8:d6:8f:84:59:b3:ac: 2c:28:61:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5MEYxMTAvBgNVBAUTKDM0NEZCNDk5QTZBMzdEMjYzMjlBQjdENUZGNTI2MjUx MDk4RTVERjIwHhcNMjUwNTEwMTcyMDIzWhcNMjUwNTE3MTcyMDIzWjAYMRYwFAYD VQQDEw02ODFmOGFkNy05ZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NkweaEOLdYDlwL7JZxXTjvkf7Yl/DrgqN/MQNDkUPWzBR3Ee0DbNTAWbpzb 7m5P4iOeCor1fgkvlsUNpUUQlaLkJLBWxIt3t68MD7l47UWaCb0xIjjbzffV+NmT JdKBjTP6TeC5PqZwoQKHP+EPyPBxq6usFclxK+dFLn5aYlE+LNYOqruVIRZV//EN xZUAJgQYxgX3S56mgnOXffPAg6B63dSW5XfhnXw2IHG0qv5tLjzPirphVsVYIMOw xRMWjCinCL0EkMHHhPf8/jUaVMr577Nejf3qbwkYH7a2aqkZ9ZVSoPZayl3apqiP xynL6/+wOLW7roGchmnhtpJJowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGiYZrn VYWzFR0lpdBEEqNJyfvRMB8GA1UdIwQYMBaAFDRPtJmmo30mMpq31f9SYlEJjl3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTkwRi82Q0MwRjlGNDQ3 QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZTWXltcmZWXzFKaVVRbU9Y ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FLTBtYWFqZlNZeW1yZlZfMUppVVFtT1hmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTkwRi82Q0MwRjlGNDQ3QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZT WXltcmZWXzFKaVVRbU9YZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzxiPJPv3hK+2l53d7MghtBck7pmNVNyYww1SBEFibyqyXcGeF4ggk bLRxNAk8LWbWeMaIvgQMkRQhHEbn6Ts+nGe2OYYYnXC9fpTgTL2gBfU8CGJahx3C 5w2XL7mpnebnkSZ74Mupps6DK9xZLyHshMDSEjS/fU+wKsgpxK1fmEQ05CJRwXVC 31UKgZqc5XPeZxcQi3DbVmjDvin8GPnRaSrQgHtppUeuiBV+sJIn3tkH7sFVlRJQ ThV5KAQAluk1O1T2WFG+6eLcva7KgQHNv6Z9J9IvzIaLXXHcj9R98ixKkqI3Iwqd Nq0KlmhkcwLEGSP4hMjWj4RZs6wsKGHO -----END CERTIFICATE-----Generated at Mon May 12 12:36:49 2025 by rpki-client