$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft File: rN673IrqemETaTGDOGOx454Bfic.mft (raw, json) Hash identifier: jZtgUWULD68uazDZN4CUf7FG0bR8y2jVHz64Kk1+XEY= Subject key identifier: E2:74:1D:2F:B1:9C:71:4B:30:EE:BD:65:F9:2C:D3:05:7A:BD:7C:BB Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Certificate serial: 0A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft Manifest number: 0A3A Signing time: Sat 18 May 2024 20:32:29 +0000 Manifest this update: Sat 18 May 2024 20:32:28 +0000 Manifest next update: Sat 25 May 2024 20:32:28 +0000 Files and hashes: 1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: MRAQpvTxrwua06JJOQB9aQY+LPLnhn4an5adJ3MBU1Q=) 2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: 5hKzhaDFOBK/bKHGygD6Z7X2GwNayOTTgkw7FSxDEGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Validity Not Before: May 18 20:32:28 2024 GMT Not After : May 25 20:32:28 2024 GMT Subject: CN=6649105d-f66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:7a:d7:5b:fc:48:c0:86:75:69:9a:9b:58: 3e:57:cf:e0:69:3b:e0:32:88:8a:ef:ce:84:b5:50: 09:35:75:58:b2:41:c6:ba:8e:8f:7c:98:e5:a7:73: 4d:42:b2:62:b1:f4:e8:31:8b:58:9d:70:63:47:84: ae:fd:11:d0:ae:09:75:a2:1d:dd:e1:28:aa:81:23: 9c:f3:c0:04:e5:8e:7b:0e:34:90:73:3b:23:84:74: 91:8f:81:97:4d:7e:9a:4e:ae:83:fe:1f:44:9c:95: c4:46:d7:a3:9e:c5:ff:1f:53:ce:19:15:28:1c:0c: 2c:9a:b5:2b:8e:ed:00:53:9d:84:10:f0:58:02:41: e7:11:20:fd:57:2a:aa:1c:f0:d9:7d:55:f8:97:33: 1c:b0:3d:9f:11:63:b1:a0:6f:63:3f:d5:25:cd:35: 01:c5:5f:5b:6c:8a:b6:6f:a0:1e:35:9b:6a:77:33: e7:46:cc:1c:f4:a3:42:cf:d9:ca:78:13:7f:2c:13: e3:51:48:e5:70:2c:1c:69:b5:2a:7e:d2:1e:50:27: a2:8b:88:94:90:c4:24:7d:c9:02:29:6a:66:ab:fd: 57:37:6b:f9:17:9b:73:8b:e1:09:03:31:0c:37:0c: b3:2a:1b:22:5c:d7:48:c1:cf:32:4c:60:60:df:64: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:74:1D:2F:B1:9C:71:4B:30:EE:BD:65:F9:2C:D3:05:7A:BD:7C:BB X509v3 Authority Key Identifier: keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:63:87:bf:d7:3d:a9:fa:0c:37:f4:ec:5d:d1:3e:17:dc:a4: e8:fb:da:82:27:01:f9:f7:22:86:d9:a6:f2:55:16:d6:91:22: 52:02:59:d1:b8:77:16:1b:74:77:e6:f7:14:33:4d:86:66:ff: 2e:99:19:d6:06:e5:4e:bb:98:16:e0:78:a5:4c:07:c6:99:a2: 10:99:99:56:9b:41:d2:58:40:0f:7f:03:36:bf:f7:f4:6e:30: 9d:0c:a6:7e:9c:d0:5c:48:96:de:43:9c:8b:58:46:dd:e8:38: a3:e8:0b:e8:e3:61:50:e2:5b:36:2a:75:64:b5:5c:0b:b2:31: cd:4c:5b:5d:1c:b3:3f:7c:74:34:06:95:68:8d:a9:f8:e6:f4: 1d:08:c8:92:66:91:14:02:c9:ed:e1:c2:6b:74:f9:2c:f1:ff: b6:f3:a3:77:22:ae:ea:39:33:31:26:37:5d:a0:95:bb:e6:62: cf:7a:06:9b:ac:1c:20:1f:e7:19:94:92:e4:3e:33:2f:3b:6c: b8:23:3b:cf:9b:53:b6:88:bb:91:d5:9d:98:5e:a3:a0:a5:0d: fb:9a:34:ad:95:6d:a1:ac:18:4c:f9:9c:2a:65:9b:e3:2b:52: fc:47:e1:31:51:6a:23:57:d9:80:82:c2:48:c4:25:d5:55:e6: 6a:38:a0:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZENTUxMTAvBgNVBAUTKEFDREVCQkRDOEFFQTdBNjExMzY5MzE4MzM4NjNCMUUz OUUwMTdFMjcwHhcNMjQwNTE4MjAzMjI4WhcNMjQwNTI1MjAzMjI4WjAYMRYwFAYD VQQDEw02NjQ5MTA1ZC1mNjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys9611v8SMCGdWmam1g+V8/gaTvgMoiK786EtVAJNXVYskHGuo6PfJjlp3NN QrJisfToMYtYnXBjR4Su/RHQrgl1oh3d4SiqgSOc88AE5Y57DjSQczsjhHSRj4GX TX6aTq6D/h9EnJXERtejnsX/H1POGRUoHAwsmrUrju0AU52EEPBYAkHnESD9Vyqq HPDZfVX4lzMcsD2fEWOxoG9jP9UlzTUBxV9bbIq2b6AeNZtqdzPnRswc9KNCz9nK eBN/LBPjUUjlcCwcabUqftIeUCeii4iUkMQkfckCKWpmq/1XN2v5F5tzi+EJAzEM NwyzKhsiXNdIwc8yTGBg32T84wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJ0HS+x nHFLMO69Zfks0wV6vXy7MB8GA1UdIwQYMBaAFKzeu9yK6nphE2kxgzhjseOeAX4n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkQ1NS9FNzhGRDJBQTQ3 MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVtRVRhVEdET0dPeDQ1NEJm aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JONjczSXJxZW1FVGFUR0RPR094NDU0QmZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkQ1NS9FNzhGRDJBQTQ3MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVt RVRhVEdET0dPeDQ1NEJmaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcY4e/1z2p+gw39Oxd0T4X3KTo+9qCJwH59yKG2abyVRbWkSJSAlnR uHcWG3R35vcUM02GZv8umRnWBuVOu5gW4HilTAfGmaIQmZlWm0HSWEAPfwM2v/f0 bjCdDKZ+nNBcSJbeQ5yLWEbd6Dij6Avo42FQ4ls2KnVktVwLsjHNTFtdHLM/fHQ0 BpVojan45vQdCMiSZpEUAsnt4cJrdPks8f+286N3Iq7qOTMxJjddoJW75mLPegab rBwgH+cZlJLkPjMvO2y4IzvPm1O2iLuR1Z2YXqOgpQ37mjStlW2hrBhM+ZwqZZvj K1L8R+ExUWojV9mAgsJIxCXVVeZqOKBJ -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org