$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: ZvHdBovpxP/4apCjqgvhtFSxz/1PeNqmFEfvfHkxWA8= Subject key identifier: 01:54:A7:B2:DC:3B:F2:9A:B8:98:0A:DD:81:EB:14:2B:50:24:20:BD Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: C5 Signing time: Fri 25 Apr 2025 04:56:38 +0000 Manifest this update: Fri 25 Apr 2025 04:56:37 +0000 Manifest next update: Fri 02 May 2025 04:56:37 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: 0g6f1i8wwnDa69ekO4roFc09FdsIEaMiJpeEokuWfY4=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: VFGpYkVQUYPgthphq1FI7HtfcdckVL6PZeOiO03NNQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Apr 25 04:56:37 2025 GMT Not After : May 2 04:56:37 2025 GMT Subject: CN=680b1606-0b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:ae:17:d7:3e:31:be:84:30:58:ec:34:1e: a2:ca:b1:3c:b8:c8:a1:c3:ae:86:fd:05:ce:ec:c7: dd:99:9d:b1:c3:6b:4d:eb:eb:78:58:ca:ab:40:ea: b2:83:7c:ed:d3:98:4b:c1:a3:42:d1:bd:7a:c1:6f: 86:e3:9e:0d:38:b6:27:c6:b9:4d:1f:1a:bb:20:c0: df:1c:a2:60:3a:f5:9f:4c:86:00:bc:91:36:1a:af: 3f:26:ea:f3:a8:07:71:09:5a:4d:32:2f:e4:1b:96: ff:75:eb:c9:2a:04:a2:1c:00:d5:78:03:b1:8b:29: 28:d6:68:14:a3:6f:b4:b3:e0:9c:48:e1:08:91:9f: 73:2f:5a:17:1e:0d:41:56:57:99:77:e4:30:fe:37: d9:b0:6e:73:1c:ac:4b:f4:56:2d:c4:d4:36:46:04: ff:57:ac:5c:49:1b:de:0a:d7:13:93:18:6e:09:ad: 08:5c:fc:d9:50:44:fc:b3:a5:97:e3:a7:92:ca:e8: ad:59:5a:92:08:97:b8:32:e5:51:cf:79:b4:81:60: e1:3f:a4:72:3b:4c:d8:bc:06:dd:ab:da:ee:d8:68: b2:63:26:5d:75:9f:e6:6a:62:7a:57:fb:62:5e:a3: d2:c2:99:1c:fb:20:8c:7e:23:a2:18:0d:ad:d7:69: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:54:A7:B2:DC:3B:F2:9A:B8:98:0A:DD:81:EB:14:2B:50:24:20:BD X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:02:f2:8a:3e:8c:f4:bc:7f:17:4c:d8:81:ac:87:02:15:3c: f2:ce:7c:8a:e6:48:6e:e2:e7:ef:26:02:84:63:c5:5a:c0:25: 5d:40:ca:bc:c9:c5:e1:5e:db:7a:40:62:f4:1a:90:87:fb:1e: 0c:09:0d:3e:9c:ac:83:16:bd:39:6a:b5:a9:04:ed:a7:58:fa: 33:c2:be:65:93:d4:a1:57:38:33:24:f5:b5:fe:38:b9:15:df: a6:7b:63:ec:60:1d:06:14:90:3a:d6:4a:9d:c8:67:14:fb:ea: 51:32:80:f2:98:98:05:86:19:fa:fa:e4:18:b6:d5:6c:08:bd: 70:c6:bf:76:09:b2:2f:a4:63:cb:f5:cd:99:e6:5c:28:e5:79: 3e:cc:52:e0:25:38:97:05:7e:e9:85:67:2d:03:14:9e:58:2c: 65:55:9d:79:12:2b:b9:75:cc:08:f5:32:ba:64:a8:9f:53:08: 2c:cd:88:b6:68:74:e6:e2:a2:cf:c2:66:e0:60:8d:5d:00:a6: 0c:0b:7c:48:21:aa:83:02:8c:2e:da:ef:55:cb:37:60:fb:9f: f6:65:e5:58:e7:ee:c7:7d:ac:de:62:f5:13:8b:1a:af:dd:00: bb:a1:55:09:94:9d:d8:ae:ea:65:e5:cd:dc:1b:ea:07:bc:93: e9:e1:8f:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUwNDI1MDQ1NjM3WhcNMjUwNTAyMDQ1NjM3WjAYMRYwFAYD VQQDEw02ODBiMTYwNi0wYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKOuF9c+Mb6EMFjsNB6iyrE8uMihw66G/QXO7MfdmZ2xw2tN6+t4WMqrQOqy g3zt05hLwaNC0b16wW+G454NOLYnxrlNHxq7IMDfHKJgOvWfTIYAvJE2Gq8/Jurz qAdxCVpNMi/kG5b/devJKgSiHADVeAOxiyko1mgUo2+0s+CcSOEIkZ9zL1oXHg1B VleZd+Qw/jfZsG5zHKxL9FYtxNQ2RgT/V6xcSRveCtcTkxhuCa0IXPzZUET8s6WX 46eSyuitWVqSCJe4MuVRz3m0gWDhP6RyO0zYvAbdq9ru2GiyYyZddZ/mamJ6V/ti XqPSwpkc+yCMfiOiGA2t12n5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFUp7Lc O/KauJgK3YHrFCtQJCC9MB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNAvKKPoz0vH8XTNiBrIcCFTzyznyK5khu4ufvJgKEY8VawCVdQMq8 ycXhXtt6QGL0GpCH+x4MCQ0+nKyDFr05arWpBO2nWPozwr5lk9ShVzgzJPW1/ji5 Fd+me2PsYB0GFJA61kqdyGcU++pRMoDymJgFhhn6+uQYttVsCL1wxr92CbIvpGPL 9c2Z5lwo5Xk+zFLgJTiXBX7phWctAxSeWCxlVZ15Eiu5dcwI9TK6ZKifUwgszYi2 aHTm4qLPwmbgYI1dAKYMC3xIIaqDAowu2u9Vyzdg+5/2ZeVY5+7HfazeYvUTixqv 3QC7oVUJlJ3Yrupl5c3cG+oHvJPp4Y8p -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:36 2025 by rpki-client