$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: aGJ8ILX0ySDx4r43O18Ss/8LkhpHxODs16R42mFNIiM= Subject key identifier: A5:3C:EE:48:EB:CA:0E:B1:CE:BD:2F:88:AF:8D:A4:9E:80:FC:A9:CB Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: 0103 Signing time: Sat 23 Aug 2025 05:21:14 +0000 Manifest this update: Sat 23 Aug 2025 05:21:13 +0000 Manifest next update: Sat 30 Aug 2025 05:21:13 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: B9txEn08iJSnQAkMpUuWPTNlCq589gBsikDaKQkuYQg=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Aug 23 05:21:13 2025 GMT Not After : Aug 30 05:21:13 2025 GMT Subject: CN=68a94fc9-4974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:46:25:2a:2e:93:57:2f:8b:5f:0e:e4:2c: 63:64:62:98:4d:b0:2e:19:66:ee:d7:b4:1c:f7:bb: 05:30:a1:d5:50:43:dd:de:c7:63:52:94:34:5e:09: 2d:e4:d6:1d:c2:cc:76:e8:c2:44:82:bf:bb:61:4b: c3:18:2e:f6:67:2e:99:7f:27:dd:af:7a:74:d2:5a: c6:66:b1:6a:c1:69:ee:c6:0d:e4:ea:0e:58:ed:78: 6a:41:73:7f:3c:3d:c8:a4:98:58:c9:cd:72:c2:d6: a3:e9:9c:90:03:c3:7e:19:36:f4:87:ec:56:06:4f: ba:63:f0:5d:82:4a:62:67:c4:bc:e2:97:22:ed:1a: 90:2d:f0:ae:0c:9c:c0:28:83:2d:2d:fd:16:e0:48: ab:7d:75:dd:18:37:8a:0c:d1:8d:3f:66:6a:a4:50: 10:52:da:8a:62:5f:e3:22:55:e9:c5:b1:c6:69:32: a3:69:d9:78:e7:a8:9a:e3:d3:6f:5a:a3:80:79:4d: 73:e6:ab:61:7d:b4:6d:2f:5f:b3:f1:61:d6:4d:f6: a7:b5:da:37:f1:80:81:31:ea:25:2b:92:81:d4:1d: f9:b1:db:24:2f:26:68:f1:34:5f:d8:57:a4:fa:6e: 20:93:4b:ac:63:5a:5c:ed:63:56:50:ec:92:bb:ce: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3C:EE:48:EB:CA:0E:B1:CE:BD:2F:88:AF:8D:A4:9E:80:FC:A9:CB X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:aa:59:e4:b2:f3:d9:2a:4e:b9:c6:4d:b9:f4:e5:59:f2:58: b2:aa:4d:ef:d7:33:50:f0:6e:aa:12:49:e5:54:18:8d:cc:34: 5e:7f:09:d2:84:67:a8:e0:0a:83:cd:95:f8:08:01:4f:d0:5d: 72:04:a2:82:fe:9d:6b:31:14:5b:d4:08:c1:42:c2:bf:83:40: 82:b1:ec:02:3b:70:7f:37:b1:a5:5f:ce:81:00:50:dc:41:ea: ee:1d:c0:6b:4d:d9:0c:50:19:34:4d:22:83:56:73:30:81:36: 74:b7:cb:98:b1:63:cf:3b:84:ee:08:74:0a:bc:32:83:cd:81: 43:c7:30:d5:c1:26:6c:17:80:aa:6d:34:0c:dc:e8:59:ec:67: 03:1d:87:df:ba:da:06:98:76:5c:f6:2f:e5:65:75:b5:55:22: 08:b2:f1:e5:6d:e3:21:5d:00:ff:b2:e0:27:b8:c7:29:4e:fd: b2:ed:c8:e7:eb:a8:a6:1f:bb:d0:20:a5:c5:2a:92:63:a8:93: 96:47:96:2d:df:b8:81:e5:1f:d9:50:02:1f:6b:9f:df:82:3f: 10:53:79:98:0e:b0:80:7e:22:04:e2:36:7b:90:7e:ee:04:82: 9d:04:13:cc:f1:03:a7:a4:7a:a7:5a:87:3f:27:66:9e:b9:63: 76:58:43:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUwODIzMDUyMTEzWhcNMjUwODMwMDUyMTEzWjAYMRYwFAYD VQQDEw02OGE5NGZjOS00OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12xGJSouk1cvi18O5CxjZGKYTbAuGWbu17Qc97sFMKHVUEPd3sdjUpQ0Xgkt 5NYdwsx26MJEgr+7YUvDGC72Zy6Zfyfdr3p00lrGZrFqwWnuxg3k6g5Y7XhqQXN/ PD3IpJhYyc1ywtaj6ZyQA8N+GTb0h+xWBk+6Y/BdgkpiZ8S84pci7RqQLfCuDJzA KIMtLf0W4EirfXXdGDeKDNGNP2ZqpFAQUtqKYl/jIlXpxbHGaTKjadl456ia49Nv WqOAeU1z5qthfbRtL1+z8WHWTfantdo38YCBMeolK5KB1B35sdskLyZo8TRf2Fek +m4gk0usY1pc7WNWUOySu85/BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU87kjr yg6xzr0viK+NpJ6A/KnLMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACqlnksvPZKk65xk259OVZ8liyqk3v1zNQ8G6qEknlVBiNzDRefwnS hGeo4AqDzZX4CAFP0F1yBKKC/p1rMRRb1AjBQsK/g0CCsewCO3B/N7GlX86BAFDc QeruHcBrTdkMUBk0TSKDVnMwgTZ0t8uYsWPPO4TuCHQKvDKDzYFDxzDVwSZsF4Cq bTQM3OhZ7GcDHYffutoGmHZc9i/lZXW1VSIIsvHlbeMhXQD/suAnuMcpTv2y7cjn 66imH7vQIKXFKpJjqJOWR5Yt37iB5R/ZUAIfa5/fgj8QU3mYDrCAfiIE4jZ7kH7u BIKdBBPM8QOnpHqnWoc/J2aeuWN2WEPy -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:52 2025 by rpki-client