$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft File: rN673IrqemETaTGDOGOx454Bfic.mft (raw, json) Hash identifier: zu9pDTxqd32I3tJ33tClZgW1+FMTCUpMk/OSIg4WzbY= Subject key identifier: EF:C4:4E:DB:77:F6:A5:BB:18:6C:CF:88:A1:B5:1C:4E:02:18:84:BC Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Certificate serial: 0B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft Manifest number: 0B03 Signing time: Sat 14 Jun 2025 19:12:28 +0000 Manifest this update: Sat 14 Jun 2025 19:12:27 +0000 Manifest next update: Sat 21 Jun 2025 19:12:27 +0000 Files and hashes: 1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: WG0eIU0AV67IVxQNivkq15CRUBtEh8RnI5iMMJC0+VY=) 2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2832 (0xb10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Validity Not Before: Jun 14 19:12:27 2025 GMT Not After : Jun 21 19:12:27 2025 GMT Subject: CN=684dc99c-b26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d9:aa:ad:69:db:70:a9:4f:c1:1f:a4:c0:26: 66:81:f4:f0:aa:77:fb:62:01:af:a4:59:e2:82:f2: 9e:c5:72:b7:63:f2:b9:04:43:24:6a:79:46:72:e2: bc:15:41:a1:03:2d:73:01:15:7e:98:ca:a3:ab:86: 08:8d:4c:fd:2d:16:76:5d:b8:ea:f4:15:77:a0:43: a2:62:70:d2:9d:79:a1:2e:60:b1:bc:a0:92:7c:1d: b3:4e:0f:d0:e9:2b:be:9f:95:cc:ce:d1:fd:73:92: 5b:a2:dd:49:2c:10:57:ed:98:4c:67:17:81:c2:1b: ad:5a:59:c8:08:d4:21:b7:15:b8:4b:55:97:e8:97: 7c:32:8d:db:b7:25:77:d8:34:8f:4d:86:70:0f:f0: 9d:31:4e:e8:5f:6e:fb:9f:0d:66:e3:4d:ea:6e:1a: 69:e9:be:99:e4:48:07:bb:9b:62:d9:df:c9:3f:d3: 75:51:88:95:63:7e:4d:13:5e:35:60:93:60:d8:38: 4e:92:d3:08:70:04:4f:4f:5d:1a:94:a2:5f:95:dd: 3c:a4:6e:d0:c2:7d:bf:a3:6d:00:fc:4d:28:9a:9c: 40:2a:40:da:0e:55:4c:49:c2:04:9a:80:83:06:b0: 16:37:df:0a:b0:fa:c7:60:3c:0b:49:80:99:ac:34: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C4:4E:DB:77:F6:A5:BB:18:6C:CF:88:A1:B5:1C:4E:02:18:84:BC X509v3 Authority Key Identifier: keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2e:de:43:83:03:ce:0f:1e:a7:02:2b:91:a3:b0:ea:fb:b4: 7e:a5:a2:43:8d:ec:1f:0f:0b:28:7e:3b:a4:f7:e4:30:c0:e8: ac:ac:bc:21:91:88:72:eb:7a:27:4f:4b:b2:23:ef:37:9a:58: 26:80:88:39:39:cf:07:26:c2:3a:39:65:26:41:64:4f:c6:5c: 1b:7f:0a:21:e7:15:22:a8:52:be:4e:ae:24:c9:c7:f1:58:79: b1:37:43:1e:55:50:8f:76:72:b3:30:59:8e:c1:dd:e6:aa:34: b2:3f:5e:fe:6e:5d:e5:22:01:50:3c:ae:10:50:88:f5:da:6c: 08:f3:dd:4e:0f:87:96:19:db:44:1b:66:66:06:83:bc:b4:14: 4d:d0:6e:a5:c5:4d:16:47:19:f6:be:5e:cb:e1:e6:bc:8f:d9: 0b:74:c6:e3:7b:13:73:6d:52:b0:74:ea:91:ed:30:ec:83:d8: 6d:af:fe:f1:97:fc:94:c6:b2:ec:93:0b:5c:72:ff:5e:a6:52: d9:d0:fb:e6:05:80:03:ec:1f:34:7e:5a:b7:54:91:75:33:28: 4c:9d:e0:80:b2:5a:d8:80:8f:69:2c:3f:68:52:09:7b:62:96: 8b:09:58:69:91:95:43:2f:c3:e9:1a:96:f8:6d:73:1f:cc:d9: db:31:3e:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZENTUxMTAvBgNVBAUTKEFDREVCQkRDOEFFQTdBNjExMzY5MzE4MzM4NjNCMUUz OUUwMTdFMjcwHhcNMjUwNjE0MTkxMjI3WhcNMjUwNjIxMTkxMjI3WjAYMRYwFAYD VQQDEw02ODRkYzk5Yy1iMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tmqrWnbcKlPwR+kwCZmgfTwqnf7YgGvpFnigvKexXK3Y/K5BEMkanlGcuK8 FUGhAy1zARV+mMqjq4YIjUz9LRZ2Xbjq9BV3oEOiYnDSnXmhLmCxvKCSfB2zTg/Q 6Su+n5XMztH9c5Jbot1JLBBX7ZhMZxeBwhutWlnICNQhtxW4S1WX6Jd8Mo3btyV3 2DSPTYZwD/CdMU7oX277nw1m403qbhpp6b6Z5EgHu5ti2d/JP9N1UYiVY35NE141 YJNg2DhOktMIcARPT10alKJfld08pG7Qwn2/o20A/E0ompxAKkDaDlVMScIEmoCD BrAWN98KsPrHYDwLSYCZrDQUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/ETtt3 9qW7GGzPiKG1HE4CGIS8MB8GA1UdIwQYMBaAFKzeu9yK6nphE2kxgzhjseOeAX4n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkQ1NS9FNzhGRDJBQTQ3 MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVtRVRhVEdET0dPeDQ1NEJm aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JONjczSXJxZW1FVGFUR0RPR094NDU0QmZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkQ1NS9FNzhGRDJBQTQ3MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVt RVRhVEdET0dPeDQ1NEJmaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFLt5DgwPODx6nAiuRo7Dq+7R+paJDjewfDwsofjuk9+QwwOisrLwh kYhy63onT0uyI+83mlgmgIg5Oc8HJsI6OWUmQWRPxlwbfwoh5xUiqFK+Tq4kycfx WHmxN0MeVVCPdnKzMFmOwd3mqjSyP17+bl3lIgFQPK4QUIj12mwI891OD4eWGdtE G2ZmBoO8tBRN0G6lxU0WRxn2vl7L4ea8j9kLdMbjexNzbVKwdOqR7TDsg9htr/7x l/yUxrLskwtccv9eplLZ0PvmBYAD7B80flq3VJF1MyhMneCAslrYgI9pLD9oUgl7 YpaLCVhpkZVDL8PpGpb4bXMfzNnbMT4g -----END CERTIFICATE-----Generated at Mon Jun 16 14:43:08 2025 by rpki-client