$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: bzUhR/+IOdsp5fT+yoXbJd8hoYT93UbRT0AtsOC0rpY= Subject key identifier: 9B:1F:98:6C:3C:28:77:B0:B2:A4:18:21:24:CB:C0:F0:CF:F2:A9:5C Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: D8 Signing time: Sat 31 May 2025 05:18:21 +0000 Manifest this update: Sat 31 May 2025 05:18:21 +0000 Manifest next update: Sat 07 Jun 2025 05:18:21 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: rvm/1CObXnjQYJ4+mEkFZtelQ5RUtKJiKUj3Ai3IBHs=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: May 31 05:18:21 2025 GMT Not After : Jun 7 05:18:21 2025 GMT Subject: CN=683a911d-3457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d1:55:bb:ab:b3:46:49:47:75:ce:06:82:1f: d1:6f:2b:8e:0b:35:ba:fa:59:03:c6:48:b5:7b:af: f7:98:c0:f8:77:dc:29:c3:ff:a7:0e:68:8c:69:c4: d3:60:1e:1c:83:c4:c4:a2:5b:8d:56:8a:b2:39:b1: ef:3f:79:e5:e8:e9:8e:59:da:7a:83:a3:d7:1d:0a: 2b:d2:1f:54:1b:02:70:9e:41:92:ab:ba:2f:ef:73: a5:94:5a:d3:55:56:22:82:17:1b:15:7b:b8:19:d3: 95:c4:17:7e:c8:09:f1:d6:8d:d6:e7:d4:0d:b6:fb: 40:44:a0:60:c5:30:83:73:95:c1:60:bd:25:e3:9c: 9b:cb:d8:66:db:a7:3f:f0:e4:7d:0c:4c:49:7d:67: 8e:2c:65:a8:54:02:27:26:ab:3d:54:1e:eb:32:e7: a9:1d:8f:f7:31:ad:57:61:53:97:ef:6c:f7:44:70: 29:de:17:d4:30:3e:ab:3e:2d:78:2b:ed:33:f9:4e: ba:88:5d:df:77:ab:65:94:bc:f7:24:71:c0:ed:87: c4:f2:4f:7a:40:ad:2d:63:80:99:74:13:17:41:4d: d9:44:37:e4:bc:3d:38:3b:79:df:1f:0d:d2:98:c6: 9c:ae:53:03:82:3a:18:22:e2:ed:cc:e9:ab:20:28: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1F:98:6C:3C:28:77:B0:B2:A4:18:21:24:CB:C0:F0:CF:F2:A9:5C X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:37:7f:1e:d8:5b:93:98:cd:83:c2:f9:74:55:3d:11:5d:30: 98:fe:3b:b7:4d:5e:ef:61:ff:3f:2e:ee:32:ca:9a:5f:77:7f: eb:04:be:3b:8a:12:cf:7b:41:0b:60:6b:57:ee:ff:da:4c:74: 2f:7b:71:c0:c3:0f:44:29:8d:76:d6:83:3b:8e:12:26:c2:76: 9b:4f:16:9d:cf:5d:f0:5c:4c:df:ce:80:3a:69:ec:22:20:b4: a0:dd:71:cd:92:a5:20:43:4f:1e:8d:3a:08:9c:0a:7b:7a:29: ae:d3:eb:15:2b:74:35:ad:a6:64:be:ba:33:a0:23:3a:10:83: bf:35:d0:fb:95:c3:44:6e:c8:8d:e3:e0:d8:31:d5:61:8e:96: 69:16:77:8d:52:9a:f8:61:9e:9b:57:c6:af:8a:13:ad:f5:99: be:86:03:40:27:bb:d4:e3:0a:d3:a2:21:ce:97:df:0a:c9:87: 6d:ea:be:9c:5c:7d:51:f8:3c:d3:8d:eb:a2:67:79:74:bc:a1: ac:84:9c:be:96:cf:76:90:dc:f1:b2:8f:37:e6:f8:c2:2e:7f: ed:29:52:6d:df:31:c2:a0:9f:fc:21:ba:e0:6b:8a:45:06:26: ee:fe:66:6c:72:e2:b2:0a:7d:8c:b1:96:32:08:51:1e:fb:7d: 42:33:3f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUwNTMxMDUxODIxWhcNMjUwNjA3MDUxODIxWjAYMRYwFAYD VQQDEw02ODNhOTExZC0zNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79FVu6uzRklHdc4Ggh/RbyuOCzW6+lkDxki1e6/3mMD4d9wpw/+nDmiMacTT YB4cg8TEoluNVoqyObHvP3nl6OmOWdp6g6PXHQor0h9UGwJwnkGSq7ov73OllFrT VVYighcbFXu4GdOVxBd+yAnx1o3W59QNtvtARKBgxTCDc5XBYL0l45yby9hm26c/ 8OR9DExJfWeOLGWoVAInJqs9VB7rMuepHY/3Ma1XYVOX72z3RHAp3hfUMD6rPi14 K+0z+U66iF3fd6tllLz3JHHA7YfE8k96QK0tY4CZdBMXQU3ZRDfkvD04O3nfHw3S mMacrlMDgjoYIuLtzOmrICgqvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsfmGw8 KHewsqQYISTLwPDP8qlcMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiN38e2FuTmM2Dwvl0VT0RXTCY/ju3TV7vYf8/Lu4yyppfd3/rBL47 ihLPe0ELYGtX7v/aTHQve3HAww9EKY121oM7jhImwnabTxadz13wXEzfzoA6aewi ILSg3XHNkqUgQ08ejToInAp7eimu0+sVK3Q1raZkvrozoCM6EIO/NdD7lcNEbsiN 4+DYMdVhjpZpFneNUpr4YZ6bV8avihOt9Zm+hgNAJ7vU4wrToiHOl98KyYdt6r6c XH1R+DzTjeuiZ3l0vKGshJy+ls92kNzxso835vjCLn/tKVJt3zHCoJ/8Ibrga4pF Bibu/mZscuKyCn2MsZYyCFEe+31CMz+X -----END CERTIFICATE-----Generated at Sat May 31 17:23:40 2025 by rpki-client