$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: x4Y0VkgHwH+4VifLfccpGOAIKEYFlyWf3LggHnAxHe8= Subject key identifier: 8F:DE:3F:7C:69:49:4D:8A:E0:37:F4:BE:EA:FA:55:FA:E3:F4:94:E7 Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: FC Signing time: Sat 09 Aug 2025 05:41:51 +0000 Manifest this update: Sat 09 Aug 2025 05:41:50 +0000 Manifest next update: Sat 16 Aug 2025 05:41:50 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: 6JD/MgQzgFSoP9V0kaGj1DRXYDuGvzVyiqGFLrr2JIc=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Aug 9 05:41:50 2025 GMT Not After : Aug 16 05:41:50 2025 GMT Subject: CN=6896df9e-3fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:91:f5:56:92:3c:a8:c3:e3:42:f7:bb:2a: d5:01:e2:96:44:c1:da:6e:ff:7a:9c:39:b3:7d:a1: d8:f8:65:b0:59:33:5f:b5:33:37:ee:8b:a5:01:07: f0:8f:88:f9:1f:e1:5c:d0:2a:b4:91:83:b6:db:b7: 56:46:b4:cd:0c:66:ce:01:da:cf:38:43:27:2b:e7: 64:5b:db:86:13:31:bb:31:e2:2f:1f:86:be:e3:39: c0:01:d3:eb:4e:67:ee:c4:c0:f3:c9:40:28:00:81: 54:0d:6f:6b:92:36:33:7c:4c:32:28:e1:52:f3:91: cb:2e:56:ce:09:da:57:8b:ff:d9:a6:ea:ea:7b:c0: dd:e7:4d:4c:0f:83:ea:d4:4e:bb:a9:62:77:26:97: 4d:f0:16:d8:72:02:ee:7c:20:04:38:0b:72:c7:c6: 80:eb:05:ae:35:e6:66:8f:f8:6e:dc:21:16:c3:b7: d7:03:f0:8f:e5:2a:3c:82:1e:cf:ea:e9:53:95:4e: 53:1f:c5:91:28:fa:e1:46:d3:72:04:6a:ee:64:46: 77:ee:39:ac:55:d8:a0:ba:4b:eb:ad:92:c9:f2:55: 86:3b:64:3c:fa:13:5c:35:d6:6f:57:ef:6d:fe:a6: 8d:11:3e:64:ae:d9:90:9e:f1:98:37:5a:7c:d1:f7: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DE:3F:7C:69:49:4D:8A:E0:37:F4:BE:EA:FA:55:FA:E3:F4:94:E7 X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b5:ae:d1:2a:38:4d:40:64:95:34:9a:df:84:fb:e2:5c:64: 1e:c6:61:f0:d1:a4:89:00:ff:60:3c:88:ec:e8:4b:d2:29:cc: 83:0d:71:85:4b:df:b8:f6:e9:56:03:70:55:01:97:90:ef:56: 1a:fd:59:bb:20:a3:a0:3b:b4:03:ce:92:15:8b:cf:08:f2:95: ae:d7:24:c2:6d:cb:90:64:87:e4:a5:dc:8d:54:1d:56:aa:b8: 46:33:ea:04:9e:f2:6c:d9:71:c6:36:31:ae:4f:e6:3e:d9:aa: e3:a6:e1:81:70:6b:4b:7e:70:e1:d3:dc:15:b8:57:6b:58:2b: 4e:80:71:5d:55:04:6a:13:a4:c1:6f:ce:5a:75:6c:fc:91:f3: e9:1e:ce:48:e0:0e:c1:76:32:e7:86:01:61:4f:72:a0:22:ec: f6:8f:80:2d:7a:7e:c2:d2:c8:92:83:f4:5d:7d:fd:ad:7d:1f: c5:95:0b:eb:d5:ba:dc:c2:e5:9b:2d:3d:93:b1:dc:00:e4:99: d6:a1:4a:26:7f:36:f2:97:75:e6:29:18:94:77:1d:c2:ad:5a: fe:fd:c9:7c:e0:3a:7e:33:5b:1b:89:5f:7b:c6:87:e4:38:91: 0b:b0:8b:20:93:45:84:34:47:d8:72:5f:6f:38:2d:8d:15:5e: 64:d0:13:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUwODA5MDU0MTUwWhcNMjUwODE2MDU0MTUwWjAYMRYwFAYD VQQDEw02ODk2ZGY5ZS0zZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv2R9VaSPKjD40L3uyrVAeKWRMHabv96nDmzfaHY+GWwWTNftTM37oulAQfw j4j5H+Fc0Cq0kYO227dWRrTNDGbOAdrPOEMnK+dkW9uGEzG7MeIvH4a+4znAAdPr TmfuxMDzyUAoAIFUDW9rkjYzfEwyKOFS85HLLlbOCdpXi//Zpurqe8Dd501MD4Pq 1E67qWJ3JpdN8BbYcgLufCAEOAtyx8aA6wWuNeZmj/hu3CEWw7fXA/CP5So8gh7P 6ulTlU5TH8WRKPrhRtNyBGruZEZ37jmsVdigukvrrZLJ8lWGO2Q8+hNcNdZvV+9t /qaNET5krtmQnvGYN1p80fc8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/eP3xp SU2K4Df0vur6Vfrj9JTnMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3ta7RKjhNQGSVNJrfhPviXGQexmHw0aSJAP9gPIjs6EvSKcyDDXGF S9+49ulWA3BVAZeQ71Ya/Vm7IKOgO7QDzpIVi88I8pWu1yTCbcuQZIfkpdyNVB1W qrhGM+oEnvJs2XHGNjGuT+Y+2arjpuGBcGtLfnDh09wVuFdrWCtOgHFdVQRqE6TB b85adWz8kfPpHs5I4A7BdjLnhgFhT3KgIuz2j4Aten7C0siSg/Rdff2tfR/FlQvr 1brcwuWbLT2TsdwA5JnWoUomfzbyl3XmKRiUdx3CrVr+/cl84Dp+M1sbiV97xofk OJELsIsgk0WENEfYcl9vOC2NFV5k0BN8 -----END CERTIFICATE-----Generated at Sun Aug 10 05:00:00 2025 by rpki-client