$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: C+MUHd21yUD7morGA+RENSfGio8/M4gk2D1LkaaTntY= Subject key identifier: 57:0D:78:7F:CC:ED:65:1E:84:BB:5A:4B:68:61:64:6C:AF:2F:EA:DE Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: 0120 Signing time: Sun 19 Oct 2025 07:44:25 +0000 Manifest this update: Sun 19 Oct 2025 07:44:24 +0000 Manifest next update: Sun 26 Oct 2025 07:44:24 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: IXcgnHRkG6VkW/xzUGne0mNUrsAVK7yC8+U1elTW3tA=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Oct 19 07:44:24 2025 GMT Not After : Oct 26 07:44:24 2025 GMT Subject: CN=68f496d8-6e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:b1:67:b0:15:f7:fa:bf:03:7e:4d:21:20: d8:9e:e4:98:9e:05:54:e5:3a:df:96:8d:01:2b:9b: f4:22:52:07:e4:30:27:1f:bb:21:a3:fe:3c:5e:9b: 90:15:96:44:fb:1b:06:c6:90:47:19:a0:78:4a:53: 2e:c2:a5:8b:e2:73:e4:79:b9:ef:59:75:12:b8:c9: 95:c1:4f:b2:8e:a1:4e:88:39:38:45:7d:98:9a:09: ac:f7:04:93:67:cf:da:a7:a7:06:db:61:d0:80:08: 33:6f:80:75:a8:66:10:5a:f7:d0:98:e0:ce:8b:fe: bd:a5:3b:da:8c:2b:73:a8:2d:4b:05:e8:0e:c4:49: 33:be:44:9b:1b:f6:db:d8:08:69:43:0d:a3:bb:0e: 28:46:33:bd:6f:a7:0b:16:35:8f:d3:ec:84:73:96: 09:0c:e1:75:d2:44:b0:dd:55:b7:eb:8e:ea:8e:b7: 40:71:22:38:85:cd:58:2e:fd:64:26:54:0f:88:f8: 02:79:6d:2a:10:b5:6a:2e:8c:fc:fb:d1:1b:a5:db: cb:ac:9f:b8:17:08:82:ac:96:74:71:4d:09:47:9c: da:a2:51:bb:e8:55:5c:b1:05:d9:19:0f:bc:f8:e6: 32:ec:5e:36:1d:35:3d:ec:07:bf:7f:56:08:a2:6d: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0D:78:7F:CC:ED:65:1E:84:BB:5A:4B:68:61:64:6C:AF:2F:EA:DE X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f7:60:00:92:aa:a1:a6:28:6e:3c:a3:66:e6:76:df:8d:97: 4d:e0:4d:6b:af:f9:9c:71:e8:7a:8f:f9:ff:68:95:34:3b:91: 4d:12:d4:ae:b7:da:11:56:0f:3c:05:f8:c2:66:a5:6e:67:3c: dc:6d:b0:97:7d:e4:ad:ee:47:6e:a9:ee:25:93:55:45:3c:94: 2f:ae:e0:9b:aa:08:39:e9:02:18:8e:e8:de:3c:4b:8a:76:07: 0d:4b:86:a2:4d:0b:a0:61:3b:74:d1:fa:fd:5e:7d:a4:c6:9f: 54:b8:b8:ca:3c:5f:ec:9c:a7:50:e7:e8:99:6f:d1:09:4f:eb: 22:5a:f5:c5:69:aa:9e:5c:48:37:62:e9:8f:3a:be:f0:75:41: f1:7b:f6:28:ee:ff:ff:1a:2d:df:f7:5b:cc:02:b3:a6:06:34: 6c:c3:9c:5a:fe:94:6a:e7:7b:9e:0f:0c:ba:e9:ec:17:39:bb: 72:07:49:1d:4f:cd:cd:f6:7e:c7:84:4d:8f:f5:93:f9:f3:b1: 9e:8e:aa:cd:62:a7:ad:41:12:ea:33:93:7c:c3:be:d0:31:02: 1c:01:57:68:30:a5:63:3a:52:22:c3:92:76:1d:e8:31:72:24: 30:3b:d7:b8:af:59:9a:03:c9:b7:c2:1e:89:fc:b6:14:fd:80: eb:c0:cb:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUxMDE5MDc0NDI0WhcNMjUxMDI2MDc0NDI0WjAYMRYwFAYD VQQDEw02OGY0OTZkOC02ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7WxZ7AV9/q/A35NISDYnuSYngVU5Trflo0BK5v0IlIH5DAnH7sho/48XpuQ FZZE+xsGxpBHGaB4SlMuwqWL4nPkebnvWXUSuMmVwU+yjqFOiDk4RX2Ymgms9wST Z8/ap6cG22HQgAgzb4B1qGYQWvfQmODOi/69pTvajCtzqC1LBegOxEkzvkSbG/bb 2AhpQw2juw4oRjO9b6cLFjWP0+yEc5YJDOF10kSw3VW3647qjrdAcSI4hc1YLv1k JlQPiPgCeW0qELVqLoz8+9EbpdvLrJ+4FwiCrJZ0cU0JR5zaolG76FVcsQXZGQ+8 +OYy7F42HTU97Ae/f1YIom0ffwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcNeH/M 7WUehLtaS2hhZGyvL+reMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE92AAkqqhpihuPKNm5nbfjZdN4E1rr/mcceh6j/n/aJU0O5FNEtSu t9oRVg88BfjCZqVuZzzcbbCXfeSt7kduqe4lk1VFPJQvruCbqgg56QIYjujePEuK dgcNS4aiTQugYTt00fr9Xn2kxp9UuLjKPF/snKdQ5+iZb9EJT+siWvXFaaqeXEg3 YumPOr7wdUHxe/Yo7v//Gi3f91vMArOmBjRsw5xa/pRq53ueDwy66ewXObtyB0kd T83N9n7HhE2P9ZP587GejqrNYqetQRLqM5N8w77QMQIcAVdoMKVjOlIiw5J2Hegx ciQwO9e4r1maA8m3wh6J/LYU/YDrwMtR -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:29 2025 by rpki-client