$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft File: rN673IrqemETaTGDOGOx454Bfic.mft (raw, json) Hash identifier: hyt618Mit4FWfPykp3q9X1gJ0yYe/dun5R5Gc2Qbf9Q= Subject key identifier: 5A:1F:05:FE:A2:94:96:5A:F1:44:30:8A:25:DD:48:FD:77:22:3F:B3 Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Certificate serial: 0B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft Manifest number: 0B0A Signing time: Sat 28 Jun 2025 19:03:53 +0000 Manifest this update: Sat 28 Jun 2025 19:03:52 +0000 Manifest next update: Sat 05 Jul 2025 19:03:52 +0000 Files and hashes: 1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: 8hRngx2NFbNtthEFg4/OxHkFNplBnCMlDd85zrSZNuQ=) 2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Validity Not Before: Jun 28 19:03:52 2025 GMT Not After : Jul 5 19:03:52 2025 GMT Subject: CN=68603c98-5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:28:d2:2c:9f:6d:6c:bc:2a:4f:39:8e:e8: 93:bb:81:fb:98:db:ae:02:57:f4:58:4e:d5:43:c7: 41:20:5d:4f:36:f2:a7:28:ef:87:cb:c9:41:d5:da: d0:35:02:0a:73:58:3e:c0:3a:82:9d:f1:32:bd:4f: fa:78:8f:a6:dd:6d:38:cd:c3:55:71:db:71:57:bd: 16:99:87:4c:e4:6d:06:0c:cf:65:c7:55:7f:c3:ad: 09:15:73:ee:c5:9c:bb:73:da:f4:32:03:c4:d0:d4: 0d:ee:44:97:4e:5c:eb:7d:24:c9:d1:92:8a:ad:bd: 66:a8:54:60:54:42:17:d6:83:f1:c0:5f:7b:4d:8f: 66:3a:32:87:89:de:48:43:93:98:27:2d:4b:48:de: fe:fa:3e:59:76:42:15:f2:c0:f4:04:dc:cf:6f:ad: c4:66:50:2a:ee:bb:e3:b3:f1:cf:d6:90:de:5a:c8: e0:23:cb:cd:07:b3:3c:1a:d6:cf:3b:ac:08:ba:b9: 7f:d5:9c:e8:7c:59:a1:59:f0:0e:ed:c0:a4:76:81: 9b:9b:ba:99:f9:84:56:4f:d0:34:a8:0f:9f:09:ed: bf:83:bc:6d:eb:1a:e9:f1:2f:89:9f:cd:79:ac:88: 11:41:f8:69:64:d5:b7:b7:96:08:30:b6:7d:c0:ef: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1F:05:FE:A2:94:96:5A:F1:44:30:8A:25:DD:48:FD:77:22:3F:B3 X509v3 Authority Key Identifier: keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:06:2a:db:7b:b9:38:20:ee:a5:68:b2:3b:e6:58:eb:f5:70: 45:32:79:31:69:24:ad:65:4f:8d:2b:2f:16:a5:3c:47:54:e8: da:e3:2e:e7:ff:6c:10:27:a7:0e:83:a1:8e:3c:60:53:d2:58: fc:03:ed:b4:93:9c:b2:26:57:e7:51:94:40:77:20:d9:87:f6: df:ec:0a:54:2d:eb:d1:cf:30:28:9a:58:86:1b:b5:54:8a:83: a4:bd:18:bb:52:e2:53:99:df:b3:cd:32:e6:1e:4e:44:01:8d: 2d:94:36:f6:3b:ed:d4:c0:07:ea:30:ac:1d:f0:2a:8e:56:70: 93:cc:f1:a7:06:b4:f2:e5:b8:57:75:73:9b:06:4e:c5:e4:1f: d2:22:1b:ca:82:2e:c5:00:60:1d:4f:b3:c7:9c:cd:cd:af:ab: b0:62:d8:a2:16:04:95:b0:04:54:b8:56:c9:20:d6:ef:56:db: b4:c7:11:0d:fc:81:97:f9:e3:f0:1d:c0:bc:61:14:5c:5a:4c: 5e:9d:22:38:a6:4c:6c:9b:a0:23:2a:02:10:88:9e:9a:6e:2e: 59:a4:ca:9c:39:41:ba:cd:70:6f:05:18:ac:14:7a:0f:8d:91: 03:ec:15:c9:32:91:45:20:66:75:91:d8:8a:42:5b:9b:3b:2a: c8:f8:4f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZENTUxMTAvBgNVBAUTKEFDREVCQkRDOEFFQTdBNjExMzY5MzE4MzM4NjNCMUUz OUUwMTdFMjcwHhcNMjUwNjI4MTkwMzUyWhcNMjUwNzA1MTkwMzUyWjAYMRYwFAYD VQQDEw02ODYwM2M5OC01MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e4o0iyfbWy8Kk85juiTu4H7mNuuAlf0WE7VQ8dBIF1PNvKnKO+Hy8lB1drQ NQIKc1g+wDqCnfEyvU/6eI+m3W04zcNVcdtxV70WmYdM5G0GDM9lx1V/w60JFXPu xZy7c9r0MgPE0NQN7kSXTlzrfSTJ0ZKKrb1mqFRgVEIX1oPxwF97TY9mOjKHid5I Q5OYJy1LSN7++j5ZdkIV8sD0BNzPb63EZlAq7rvjs/HP1pDeWsjgI8vNB7M8GtbP O6wIurl/1ZzofFmhWfAO7cCkdoGbm7qZ+YRWT9A0qA+fCe2/g7xt6xrp8S+Jn815 rIgRQfhpZNW3t5YIMLZ9wO/15QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFofBf6i lJZa8UQwiiXdSP13Ij+zMB8GA1UdIwQYMBaAFKzeu9yK6nphE2kxgzhjseOeAX4n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkQ1NS9FNzhGRDJBQTQ3 MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVtRVRhVEdET0dPeDQ1NEJm aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JONjczSXJxZW1FVGFUR0RPR094NDU0QmZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkQ1NS9FNzhGRDJBQTQ3MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVt RVRhVEdET0dPeDQ1NEJmaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVBirbe7k4IO6laLI75ljr9XBFMnkxaSStZU+NKy8WpTxHVOja4y7n /2wQJ6cOg6GOPGBT0lj8A+20k5yyJlfnUZRAdyDZh/bf7ApULevRzzAomliGG7VU ioOkvRi7UuJTmd+zzTLmHk5EAY0tlDb2O+3UwAfqMKwd8CqOVnCTzPGnBrTy5bhX dXObBk7F5B/SIhvKgi7FAGAdT7PHnM3Nr6uwYtiiFgSVsARUuFbJINbvVtu0xxEN /IGX+ePwHcC8YRRcWkxenSI4pkxsm6AjKgIQiJ6abi5ZpMqcOUG6zXBvBRisFHoP jZED7BXJMpFFIGZ1kdiKQlubOyrI+E8k -----END CERTIFICATE-----Generated at Mon Jun 30 19:56:17 2025 by rpki-client