$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft File: rN673IrqemETaTGDOGOx454Bfic.mft (raw, json) Hash identifier: 8LRWyo6VeuAliO+XZdyIkG0wemiYY/vqow93vFYeL50= Subject key identifier: E2:5A:CA:D1:27:C1:BC:9C:8F:9F:0B:AF:13:5E:82:34:1C:38:8A:6F Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Certificate serial: 0AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft Manifest number: 0AEC Signing time: Mon 28 Apr 2025 19:47:06 +0000 Manifest this update: Mon 28 Apr 2025 19:47:06 +0000 Manifest next update: Mon 05 May 2025 19:47:06 +0000 Files and hashes: 1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: b2+Yu0lFULjK2Gp1vCgk4/eJJNS96DKwZPxTtJzC8p8=) 2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Validity Not Before: Apr 28 19:47:06 2025 GMT Not After : May 5 19:47:06 2025 GMT Subject: CN=680fdb3a-182c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:09:34:20:45:f6:04:ba:56:88:9c:1d:59: 62:02:5d:d5:41:20:a2:59:8e:db:8e:87:7b:5e:7f: 85:20:d5:82:0b:db:94:dc:ed:c7:fb:08:6a:0f:92: 58:76:8e:96:4e:7a:c4:30:ba:cc:33:75:8e:f2:39: a0:b4:38:f8:78:f1:bc:a0:80:2f:01:a9:2d:ae:32: 6d:f9:22:fa:43:ba:1d:00:02:e0:97:51:9a:1f:01: f0:70:bb:d5:d7:d3:9b:08:65:81:7e:84:12:7c:f6: 1d:86:dd:66:49:fb:e0:8f:d1:ce:12:4c:12:f5:c1: 2b:77:c4:74:8b:d0:9b:e6:42:ab:6e:9b:44:b2:aa: 3a:f3:54:34:82:f6:bf:18:6f:b4:2d:21:da:a0:77: 56:eb:01:4a:3c:75:e4:20:62:45:ba:62:a7:2a:38: 74:ea:e7:42:42:6d:f2:75:93:ed:00:27:ea:8d:1c: 4f:f5:86:fe:eb:d0:44:27:cf:fa:d3:a1:76:f1:bc: d2:a4:87:c4:e8:bb:9a:13:99:fe:b6:30:be:c2:44: ee:a6:07:51:94:37:40:40:f4:59:99:e7:cf:bf:4a: 7c:08:7f:ca:60:dc:d8:9e:fe:22:67:b6:61:b2:02: 70:35:c0:75:f5:9d:f6:30:5b:13:3d:2e:b4:a1:31: 9f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5A:CA:D1:27:C1:BC:9C:8F:9F:0B:AF:13:5E:82:34:1C:38:8A:6F X509v3 Authority Key Identifier: keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:b1:40:7f:2f:cf:09:f7:b9:96:46:8f:be:91:a5:05:77:7b: 19:5e:4e:f7:cb:b1:df:36:b0:cc:ee:1b:21:51:f1:2d:97:43: 3b:2b:6d:ae:c4:b8:6c:b5:4a:4f:da:af:a4:e8:6f:84:ae:9d: 96:66:dd:e7:af:ab:de:e9:fa:02:4b:8a:59:e0:7e:37:30:3c: ba:b8:53:db:b4:4b:ae:97:de:d0:dd:bc:95:dd:f4:4b:90:c6: 0d:bc:3d:c8:f9:4e:6c:f9:58:02:cc:4f:bd:ee:3a:b5:92:a1: 11:fe:e0:3d:26:e6:e2:fd:d1:dc:74:dd:1f:0f:7e:41:b5:ff: fe:45:5a:76:b4:07:ec:c3:cf:4c:4a:d8:39:5c:48:1f:af:18: 8e:b8:52:58:85:02:a7:d2:43:eb:a8:e0:ba:f5:dd:10:b8:91: bd:1f:75:18:c8:26:6b:42:de:9d:e6:0f:23:b8:ec:54:53:5e: e7:5d:fa:2c:82:31:f2:33:96:72:d6:b3:32:34:55:0b:0a:b9: df:c6:9a:b4:53:60:89:a2:ff:ed:57:a0:e9:4f:1b:fe:c0:58: be:d9:84:c8:98:7d:65:b4:eb:b3:13:ca:c6:e5:56:83:18:cf: 90:f2:41:e4:b4:df:cd:85:c9:bf:3e:e5:86:c5:bf:00:ba:eb: c4:90:07:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZENTUxMTAvBgNVBAUTKEFDREVCQkRDOEFFQTdBNjExMzY5MzE4MzM4NjNCMUUz OUUwMTdFMjcwHhcNMjUwNDI4MTk0NzA2WhcNMjUwNTA1MTk0NzA2WjAYMRYwFAYD VQQDEw02ODBmZGIzYS0xODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApy8JNCBF9gS6VoicHVliAl3VQSCiWY7bjod7Xn+FINWCC9uU3O3H+whqD5JY do6WTnrEMLrMM3WO8jmgtDj4ePG8oIAvAaktrjJt+SL6Q7odAALgl1GaHwHwcLvV 19ObCGWBfoQSfPYdht1mSfvgj9HOEkwS9cErd8R0i9Cb5kKrbptEsqo681Q0gva/ GG+0LSHaoHdW6wFKPHXkIGJFumKnKjh06udCQm3ydZPtACfqjRxP9Yb+69BEJ8/6 06F28bzSpIfE6LuaE5n+tjC+wkTupgdRlDdAQPRZmefPv0p8CH/KYNzYnv4iZ7Zh sgJwNcB19Z32MFsTPS60oTGf9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJaytEn wbycj58LrxNegjQcOIpvMB8GA1UdIwQYMBaAFKzeu9yK6nphE2kxgzhjseOeAX4n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkQ1NS9FNzhGRDJBQTQ3 MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVtRVRhVEdET0dPeDQ1NEJm aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JONjczSXJxZW1FVGFUR0RPR094NDU0QmZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkQ1NS9FNzhGRDJBQTQ3MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVt RVRhVEdET0dPeDQ1NEJmaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYsUB/L88J97mWRo++kaUFd3sZXk73y7HfNrDM7hshUfEtl0M7K22u xLhstUpP2q+k6G+Erp2WZt3nr6ve6foCS4pZ4H43MDy6uFPbtEuul97Q3byV3fRL kMYNvD3I+U5s+VgCzE+97jq1kqER/uA9Jubi/dHcdN0fD35Btf/+RVp2tAfsw89M Stg5XEgfrxiOuFJYhQKn0kPrqOC69d0QuJG9H3UYyCZrQt6d5g8juOxUU17nXfos gjHyM5Zy1rMyNFULCrnfxpq0U2CJov/tV6DpTxv+wFi+2YTImH1ltOuzE8rG5VaD GM+Q8kHktN/Nhcm/PuWGxb8AuuvEkAeQ -----END CERTIFICATE-----Generated at Wed Apr 30 00:51:51 2025 by rpki-client