$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft File: rN673IrqemETaTGDOGOx454Bfic.mft (raw, json) Hash identifier: +b3HvnNPFv5JyjiHwNS7dk5IYHLD22HESPIOHVIti0I= Subject key identifier: 0F:FB:11:E2:FC:B5:EB:16:CE:4D:AD:F0:60:DE:16:30:34:93:B3:A6 Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Certificate serial: 0AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft Manifest number: 0AEF Signing time: Sun 04 May 2025 19:13:11 +0000 Manifest this update: Sun 04 May 2025 19:13:11 +0000 Manifest next update: Sun 11 May 2025 19:13:11 +0000 Files and hashes: 1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: jNCkBJl7zkpbeDBS4HLmvU1Gm1rTPIu1vB3gbcrQrEY=) 2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Validity Not Before: May 4 19:13:11 2025 GMT Not After : May 11 19:13:11 2025 GMT Subject: CN=6817bc47-3ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:1d:74:17:3b:65:d7:da:91:f2:c3:ca:71: 2e:f7:a6:71:41:f6:20:23:a0:7e:32:e5:06:1b:a7: 1f:25:c4:a7:90:03:38:29:46:82:c7:66:50:a0:d6: 28:b3:97:32:20:7e:31:75:9a:0b:ae:68:4e:b3:ef: 16:e4:7c:a6:bb:52:c1:ba:86:14:06:f4:e9:8b:45: e8:84:11:1c:33:18:f7:70:39:0e:81:f8:96:66:56: 8d:f8:7d:2a:e8:8c:5c:6f:d9:97:f5:5e:35:08:8e: 9d:d2:4d:58:1e:d4:32:d5:83:91:29:82:83:ef:2b: 7e:43:c4:e1:17:6a:51:61:bb:1a:df:a8:cf:b6:25: 88:e7:24:a1:57:58:7a:5f:a9:f5:6a:1a:07:64:ec: 2f:c5:0a:0c:72:98:d3:ae:1f:c7:e2:3f:00:61:62: 80:5a:df:9c:2f:a0:67:7e:22:fb:0e:fb:3a:75:ed: 2f:f2:cf:80:09:1f:ca:1e:4c:d5:cc:f0:b1:1e:e2: ac:ae:b3:5f:79:34:d0:29:5c:e7:9e:0a:b7:84:42: 39:64:d8:cd:b7:42:e4:56:83:40:71:b4:f5:e3:47: 5e:27:6f:b9:28:82:62:13:d8:c2:20:ad:e1:b6:ca: da:b7:f8:7c:3a:ab:97:3b:a5:30:bb:e6:fe:36:44: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FB:11:E2:FC:B5:EB:16:CE:4D:AD:F0:60:DE:16:30:34:93:B3:A6 X509v3 Authority Key Identifier: keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:51:bd:80:e9:96:b7:dc:76:81:b8:e4:97:c6:c2:ba:f3:b1: 85:e0:0e:1d:ee:7a:f9:90:8f:fd:84:8d:88:7f:32:d2:ab:7c: 89:22:f1:24:09:a4:e2:60:3e:c3:3c:ca:d6:a0:81:9d:a2:e8: 30:a9:26:60:3e:37:48:7c:2e:30:a6:68:43:58:24:95:2c:4a: 4a:4d:11:56:06:2c:f7:26:b0:ca:63:62:54:7f:88:5f:64:58: b6:37:bc:74:bf:9e:71:81:95:af:80:33:d6:63:4c:35:c9:70: e5:1e:88:1c:d2:83:40:a7:81:a4:98:0d:43:26:0c:97:c4:a1: 84:26:8e:3a:a5:ca:8e:fa:88:9e:18:99:b2:af:e2:56:d3:ef: 79:22:94:63:65:26:d2:ff:59:4a:42:fe:9f:f0:20:19:fe:fc: 14:57:83:75:54:b8:76:e8:21:70:c6:c2:b1:1a:41:f4:e1:d3: 22:76:02:36:b7:f2:af:9d:2b:93:fb:f5:48:35:4c:73:0a:cd: f4:d9:61:03:fe:50:a2:59:94:55:99:22:72:b2:41:ee:ca:1c: dc:76:88:c0:cd:75:78:38:23:e0:fd:45:2d:ac:a8:42:d0:ac: 89:8f:75:fd:fb:c0:4f:98:67:09:3f:3e:0b:84:9f:18:a2:58: e0:ea:a7:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZENTUxMTAvBgNVBAUTKEFDREVCQkRDOEFFQTdBNjExMzY5MzE4MzM4NjNCMUUz OUUwMTdFMjcwHhcNMjUwNTA0MTkxMzExWhcNMjUwNTExMTkxMzExWjAYMRYwFAYD VQQDEw02ODE3YmM0Ny0zYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApc8ddBc7ZdfakfLDynEu96ZxQfYgI6B+MuUGG6cfJcSnkAM4KUaCx2ZQoNYo s5cyIH4xdZoLrmhOs+8W5Hymu1LBuoYUBvTpi0XohBEcMxj3cDkOgfiWZlaN+H0q 6Ixcb9mX9V41CI6d0k1YHtQy1YORKYKD7yt+Q8ThF2pRYbsa36jPtiWI5yShV1h6 X6n1ahoHZOwvxQoMcpjTrh/H4j8AYWKAWt+cL6BnfiL7Dvs6de0v8s+ACR/KHkzV zPCxHuKsrrNfeTTQKVznngq3hEI5ZNjNt0LkVoNAcbT140deJ2+5KIJiE9jCIK3h tsrat/h8OquXO6Uwu+b+NkTbYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/7EeL8 tesWzk2t8GDeFjA0k7OmMB8GA1UdIwQYMBaAFKzeu9yK6nphE2kxgzhjseOeAX4n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkQ1NS9FNzhGRDJBQTQ3 MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVtRVRhVEdET0dPeDQ1NEJm aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JONjczSXJxZW1FVGFUR0RPR094NDU0QmZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkQ1NS9FNzhGRDJBQTQ3MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVt RVRhVEdET0dPeDQ1NEJmaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIUb2A6Za33HaBuOSXxsK687GF4A4d7nr5kI/9hI2IfzLSq3yJIvEk CaTiYD7DPMrWoIGdougwqSZgPjdIfC4wpmhDWCSVLEpKTRFWBiz3JrDKY2JUf4hf ZFi2N7x0v55xgZWvgDPWY0w1yXDlHogc0oNAp4GkmA1DJgyXxKGEJo46pcqO+oie GJmyr+JW0+95IpRjZSbS/1lKQv6f8CAZ/vwUV4N1VLh26CFwxsKxGkH04dMidgI2 t/KvnSuT+/VINUxzCs302WED/lCiWZRVmSJyskHuyhzcdojAzXV4OCPg/UUtrKhC 0KyJj3X9+8BPmGcJPz4LhJ8Yoljg6qdG -----END CERTIFICATE-----Generated at Mon May 5 02:57:39 2025 by rpki-client