$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: uh0dplQSNsHIqbtV/C57N6I7SQJpzY+NcxSdkYc75ZY= Subject key identifier: C9:0D:0E:5E:99:6C:5A:AB:6A:7D:DC:8F:98:81:81:6E:5E:9F:23:69 Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: E9 Signing time: Thu 03 Jul 2025 05:41:12 +0000 Manifest this update: Thu 03 Jul 2025 05:41:11 +0000 Manifest next update: Thu 10 Jul 2025 05:41:11 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: 5QHWCFsNgeJAEXItCCM5CLl2Bdmhcgix1WxOGkNXmT8=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Jul 3 05:41:11 2025 GMT Not After : Jul 10 05:41:11 2025 GMT Subject: CN=686617f7-fcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5f:b9:e2:59:1e:dc:fb:e0:16:17:8a:94:a0: 3f:b3:fe:9e:85:ba:01:ff:79:79:4f:b2:ef:38:df: 41:d5:48:18:bb:52:16:9a:02:fb:e7:aa:14:4f:92: b8:71:0d:01:5c:82:af:ab:46:63:bf:f4:bf:16:cf: ea:79:11:76:cc:39:b5:8a:23:3d:59:0d:75:f8:39: ae:61:40:e7:04:2f:f6:aa:57:97:c5:0e:2e:27:be: ed:62:31:ff:ee:d4:c7:68:a7:36:71:ff:30:e1:db: b2:32:15:87:33:73:4d:30:65:b5:56:45:7d:ee:24: 9f:7f:ca:fb:2a:9d:f3:21:d2:aa:4c:62:db:a0:4b: c6:78:1c:9e:7d:cb:da:ae:be:84:a2:a0:63:f5:98: 1e:f6:5d:2f:e4:9a:c1:25:5d:72:0e:89:c1:16:cb: c3:2f:bf:4d:51:8e:bd:d7:53:54:38:76:61:df:9f: 6d:1b:ba:a8:a2:54:ee:98:b0:60:15:32:ca:28:35: f9:2b:3a:34:26:4f:c1:6e:03:6d:4e:00:2f:7e:e9: 60:7a:e5:f0:f3:85:ff:f8:01:38:bd:f1:fe:fa:97: db:ba:ab:d2:33:dc:2d:e9:cc:7a:69:75:b4:06:03: 79:76:a5:e7:77:a6:f6:c9:b2:d7:1a:c8:ed:e6:1a: 1b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0D:0E:5E:99:6C:5A:AB:6A:7D:DC:8F:98:81:81:6E:5E:9F:23:69 X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c8:44:e0:3b:3f:02:24:0a:b0:95:82:6d:03:e1:87:69:39: 5b:40:ee:b9:80:3a:d5:c8:0d:f9:48:3d:a7:a8:29:90:94:97: e7:cd:0c:3a:7f:99:78:b9:18:a7:f3:af:31:02:7a:dc:97:50: 90:ac:9d:23:e9:00:cc:41:91:bf:b2:fe:9b:d4:18:8c:f1:d2: 1e:db:76:e7:17:3a:bb:42:db:2b:d4:7e:fa:2b:06:57:a6:b7: af:38:81:fb:73:24:5d:b1:0c:01:92:5f:5e:c2:1a:f3:26:0c: 7c:76:83:41:78:d3:84:5d:6a:0f:b7:eb:a7:ca:6d:ec:36:c3: bc:ed:f1:34:59:8c:1f:ec:58:63:6d:58:23:eb:fb:72:3f:ac: ad:61:af:89:74:38:d2:f3:58:cc:83:bb:5c:c8:1f:11:3a:8b: 7f:42:de:43:07:39:95:3e:a9:60:ff:fb:dd:67:38:ec:41:f0: 8b:d9:bd:7d:58:30:10:d2:bd:f6:13:14:c2:62:58:e9:28:15: b3:dc:9c:42:17:02:6c:7e:6d:04:f7:3b:52:c0:69:dd:5e:99: 99:c7:81:12:2b:0d:46:16:e9:2f:07:ed:cb:ee:5a:18:61:35: bd:d4:f1:b2:50:5f:78:08:a1:75:f2:8a:ba:55:09:61:b4:a9: 25:34:01:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUwNzAzMDU0MTExWhcNMjUwNzEwMDU0MTExWjAYMRYwFAYD VQQDEw02ODY2MTdmNy1mY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l+54lke3PvgFheKlKA/s/6ehboB/3l5T7LvON9B1UgYu1IWmgL756oUT5K4 cQ0BXIKvq0Zjv/S/Fs/qeRF2zDm1iiM9WQ11+DmuYUDnBC/2qleXxQ4uJ77tYjH/ 7tTHaKc2cf8w4duyMhWHM3NNMGW1VkV97iSff8r7Kp3zIdKqTGLboEvGeByefcva rr6EoqBj9Zge9l0v5JrBJV1yDonBFsvDL79NUY6911NUOHZh359tG7qoolTumLBg FTLKKDX5Kzo0Jk/BbgNtTgAvfulgeuXw84X/+AE4vfH++pfbuqvSM9wt6cx6aXW0 BgN5dqXnd6b2ybLXGsjt5hobewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkNDl6Z bFqran3cj5iBgW5enyNpMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgyETgOz8CJAqwlYJtA+GHaTlbQO65gDrVyA35SD2nqCmQlJfnzQw6 f5l4uRin868xAnrcl1CQrJ0j6QDMQZG/sv6b1BiM8dIe23bnFzq7Qtsr1H76KwZX prevOIH7cyRdsQwBkl9ewhrzJgx8doNBeNOEXWoPt+unym3sNsO87fE0WYwf7Fhj bVgj6/tyP6ytYa+JdDjS81jMg7tcyB8ROot/Qt5DBzmVPqlg//vdZzjsQfCL2b19 WDAQ0r32ExTCYljpKBWz3JxCFwJsfm0E9ztSwGndXpmZx4ESKw1GFukvB+3L7loY YTW91PGyUF94CKF18oq6VQlhtKklNAFb -----END CERTIFICATE-----Generated at Sat Jul 5 01:59:56 2025 by rpki-client