$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: mWRQ/wMem/gdT4vhFVaB3p1GlXeMnly6ZNHnGWHtPvw= Subject key identifier: 38:18:A5:01:93:A1:56:47:89:40:71:32:C9:D0:FE:7C:FA:7E:43:D9 Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: CE Signing time: Tue 13 May 2025 05:00:19 +0000 Manifest this update: Tue 13 May 2025 05:00:19 +0000 Manifest next update: Tue 20 May 2025 05:00:19 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: fLsUK1iVxvI3oUSYdo+Tyx4SWP8DZItZqrDDT2PaRVA=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: VFGpYkVQUYPgthphq1FI7HtfcdckVL6PZeOiO03NNQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: May 13 05:00:19 2025 GMT Not After : May 20 05:00:19 2025 GMT Subject: CN=6822d1e3-b205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:f3:cc:cf:9b:0c:24:f4:89:55:80:a1:8d: 62:ca:21:8e:73:b7:4f:bb:e4:cb:8d:ee:ea:1f:a8: 33:ae:2c:4e:0a:21:c7:6a:be:99:ab:6a:ec:65:01: 06:10:4f:c0:98:d6:9e:42:f8:c2:bc:f8:cb:7d:83: ab:f0:65:55:1a:4f:6b:c4:5d:63:0b:26:1e:48:da: d2:44:79:5f:d2:3a:42:6b:53:c4:f0:19:f8:7e:24: 1c:ab:71:e0:7e:2a:99:37:aa:56:05:79:cd:3f:b2: 31:b5:64:2c:10:02:ab:89:b0:6b:88:54:dc:40:e9: 3e:0f:4a:a2:a3:35:77:95:0a:0d:26:48:d5:de:c1: 4c:b1:2e:0f:38:cd:9f:a0:49:db:5b:e4:a8:c6:96: b7:8c:1d:9b:1f:93:43:dc:bd:ab:a7:e5:1c:42:26: 0f:d4:57:9a:39:53:ab:90:8c:84:a8:63:0a:6d:c0: bb:51:60:c2:9f:14:b0:1a:e8:97:54:32:29:60:89: 4a:84:18:4c:97:b6:97:66:d0:7d:50:84:75:a7:ec: a9:22:59:bc:ec:54:18:cd:a6:4f:e9:b3:cd:fd:8a: 84:8a:f3:89:73:cb:81:48:bb:d1:53:71:e2:6e:16: 56:d9:9c:ec:50:e1:ea:c3:d4:19:d5:07:ee:10:69: 7c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:A5:01:93:A1:56:47:89:40:71:32:C9:D0:FE:7C:FA:7E:43:D9 X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0d:61:8e:54:c8:4e:48:4d:3a:63:0f:6b:6d:f6:b9:a1:36: 08:55:40:3a:31:ee:83:a7:42:85:f8:bf:f8:2b:ca:0f:b7:d6: cb:22:9a:91:9a:5b:02:af:a7:de:3e:7d:bb:1e:ec:7b:48:f3: 21:b9:05:1b:ad:6f:01:8c:72:74:3d:fc:cb:df:65:4f:17:2d: f1:81:25:49:2e:74:93:d6:f3:68:64:07:88:b2:d4:13:2c:ee: af:5f:ae:18:ee:e8:87:37:af:4b:bc:65:00:06:c9:12:aa:12: 4b:31:f8:7a:94:15:e0:f1:d7:58:dc:73:e4:79:79:7c:7f:f1: 55:d6:df:46:24:f1:97:01:85:79:51:8f:7a:64:e6:9a:77:44: c0:fc:1e:5a:9a:2a:7c:15:fa:b3:cd:2a:f7:e7:2d:d3:f7:aa: 29:50:b7:ad:40:12:61:57:ef:ad:5c:b7:6a:3c:0a:4f:83:4d: 6b:c5:6e:30:d2:9c:35:88:95:dd:a8:40:1e:aa:c4:24:38:cb: d4:8a:10:79:b9:23:12:f8:83:c2:b3:db:65:3b:cb:e9:99:1d: 8f:33:4e:2f:1e:c5:a3:52:f1:b9:34:f0:16:9d:eb:55:c0:25: d1:3d:0e:73:4a:21:5f:61:54:d5:b7:c1:b6:53:68:fa:7a:8b: 41:de:a2:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUwNTEzMDUwMDE5WhcNMjUwNTIwMDUwMDE5WjAYMRYwFAYD VQQDEw02ODIyZDFlMy1iMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJTzzM+bDCT0iVWAoY1iyiGOc7dPu+TLje7qH6gzrixOCiHHar6Zq2rsZQEG EE/AmNaeQvjCvPjLfYOr8GVVGk9rxF1jCyYeSNrSRHlf0jpCa1PE8Bn4fiQcq3Hg fiqZN6pWBXnNP7IxtWQsEAKribBriFTcQOk+D0qiozV3lQoNJkjV3sFMsS4POM2f oEnbW+Soxpa3jB2bH5ND3L2rp+UcQiYP1FeaOVOrkIyEqGMKbcC7UWDCnxSwGuiX VDIpYIlKhBhMl7aXZtB9UIR1p+ypIlm87FQYzaZP6bPN/YqEivOJc8uBSLvRU3Hi bhZW2ZzsUOHqw9QZ1QfuEGl8NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgYpQGT oVZHiUBxMsnQ/nz6fkPZMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLDWGOVMhOSE06Yw9rbfa5oTYIVUA6Me6Dp0KF+L/4K8oPt9bLIpqR mlsCr6fePn27Hux7SPMhuQUbrW8BjHJ0PfzL32VPFy3xgSVJLnST1vNoZAeIstQT LO6vX64Y7uiHN69LvGUABskSqhJLMfh6lBXg8ddY3HPkeXl8f/FV1t9GJPGXAYV5 UY96ZOaad0TA/B5amip8FfqzzSr35y3T96opULetQBJhV++tXLdqPApPg01rxW4w 0pw1iJXdqEAeqsQkOMvUihB5uSMS+IPCs9tlO8vpmR2PM04vHsWjUvG5NPAWnetV wCXRPQ5zSiFfYVTVt8G2U2j6eotB3qKF -----END CERTIFICATE-----Generated at Wed May 14 19:38:05 2025 by rpki-client