$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: Z8Fguta5T/oFksy2YmYw5qBZQeNQxJ1n031Q29YCQfQ= Subject key identifier: 39:22:C3:12:E7:4A:83:58:79:8D:37:DF:90:18:20:41:39:48:D3:E1 Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: A6 Signing time: Sun 19 Oct 2025 09:28:18 +0000 Manifest this update: Sun 19 Oct 2025 09:28:18 +0000 Manifest next update: Sun 26 Oct 2025 09:28:18 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: BMsxLSUk7BhLBbSiL4kHXPINo1OUKYHbyyACc9cNNu0=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Oct 19 09:28:18 2025 GMT Not After : Oct 26 09:28:18 2025 GMT Subject: CN=68f4af32-e7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5d:62:dd:3b:ad:0f:b7:12:16:50:45:d5:fb: 00:65:18:79:3c:4e:e1:fc:74:ae:30:26:d6:30:9c: 83:21:fc:71:fa:0d:08:3f:64:72:42:d7:94:93:d7: 7d:5f:50:8b:3b:f8:c0:f8:2e:e9:e2:4e:36:e3:c9: 47:8a:9f:29:c2:70:67:5a:69:7c:e9:8c:4d:d6:02: 75:4f:b0:6d:b9:7f:84:3f:68:54:53:28:8f:0c:0b: 7b:21:34:e1:cd:7f:78:76:c4:7b:db:f4:07:1f:eb: f9:1c:9c:5c:2b:93:1b:61:fc:59:20:24:45:1d:3c: ac:a3:73:f3:cf:58:13:d3:0e:08:fa:f3:ec:10:46: d9:78:4c:3d:48:46:90:66:b6:57:36:42:d3:8e:db: da:f5:28:97:95:d7:88:cf:fc:60:12:f7:a2:41:9f: 9e:14:e3:46:33:2f:ea:03:50:97:53:be:b7:d3:e5: 67:94:0e:35:53:5c:18:44:8c:ae:27:c6:15:10:a9: 79:d2:81:1e:5a:63:d8:26:e6:31:fc:16:2d:c2:61: f2:3d:04:95:9c:7d:6f:c2:64:2f:ca:20:a5:18:ff: 2f:6d:6d:09:76:3a:7a:54:83:98:e7:9f:27:bc:2a: ab:fb:d2:f5:cc:4f:d2:bc:7c:b6:b4:0d:31:aa:8b: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:22:C3:12:E7:4A:83:58:79:8D:37:DF:90:18:20:41:39:48:D3:E1 X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:7a:36:21:8b:51:d8:9f:2c:cc:aa:14:e2:73:cd:02:20:be: 50:2f:0f:66:06:04:eb:03:74:c2:92:41:22:b0:58:c7:ad:78: 6a:e8:5c:14:40:8e:65:47:bf:57:55:27:94:0f:a6:ee:d8:23: e0:c4:14:e7:fc:cb:f8:7f:84:16:ed:b5:d5:1f:d6:3f:91:1b: 5c:33:71:5c:26:2e:06:0c:50:d0:07:d3:74:31:97:3e:fd:e7: 56:60:99:9f:0e:c3:e6:50:41:d4:30:d8:94:96:19:68:a0:9e: 91:70:78:1e:0e:5d:6d:b2:69:9f:07:e0:23:ef:9b:75:ba:7e: 0c:6c:fe:8b:2f:2e:ff:11:92:a3:02:97:b6:47:ff:a7:c3:5d: 32:1a:8d:02:bb:02:64:ba:ca:41:88:ff:be:fb:b9:58:82:bf: e9:98:96:11:05:ea:71:8f:d0:d3:87:45:8a:b8:cb:70:63:2c: de:d7:c1:a3:68:b6:a9:d0:8a:a7:d9:b9:c6:58:00:86:05:55: 94:86:c4:16:75:cb:ea:32:4d:e9:89:e5:5d:c2:6c:25:8d:ba: 40:1f:de:eb:58:6b:15:02:6a:38:5b:6f:3d:6a:2b:bb:7b:a4: 31:cc:d4:13:41:90:0e:ae:b1:83:95:57:3f:44:9f:ef:50:6c: 69:c1:ab:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky NkY5MkUzNzQwHhcNMjUxMDE5MDkyODE4WhcNMjUxMDI2MDkyODE4WjAYMRYwFAYD VQQDEw02OGY0YWYzMi1lN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5l1i3TutD7cSFlBF1fsAZRh5PE7h/HSuMCbWMJyDIfxx+g0IP2RyQteUk9d9 X1CLO/jA+C7p4k4248lHip8pwnBnWml86YxN1gJ1T7BtuX+EP2hUUyiPDAt7ITTh zX94dsR72/QHH+v5HJxcK5MbYfxZICRFHTyso3Pzz1gT0w4I+vPsEEbZeEw9SEaQ ZrZXNkLTjtva9SiXldeIz/xgEveiQZ+eFONGMy/qA1CXU7630+VnlA41U1wYRIyu J8YVEKl50oEeWmPYJuYx/BYtwmHyPQSVnH1vwmQvyiClGP8vbW0Jdjp6VIOY558n vCqr+9L1zE/SvHy2tA0xqospQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkiwxLn SoNYeY0335AYIEE5SNPhMB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo aHE2dlVEUzZDMGttLVM0M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ejYhi1HYnyzMqhTic80CIL5QLw9mBgTrA3TCkkEisFjHrXhq6FwU QI5lR79XVSeUD6bu2CPgxBTn/Mv4f4QW7bXVH9Y/kRtcM3FcJi4GDFDQB9N0MZc+ /edWYJmfDsPmUEHUMNiUlhlooJ6RcHgeDl1tsmmfB+Aj75t1un4MbP6LLy7/EZKj Ape2R/+nw10yGo0CuwJkuspBiP+++7lYgr/pmJYRBepxj9DTh0WKuMtwYyze18Gj aLap0Iqn2bnGWACGBVWUhsQWdcvqMk3pieVdwmwljbpAH97rWGsVAmo4W289aiu7 e6QxzNQTQZAOrrGDlVc/RJ/vUGxpwaua -----END CERTIFICATE-----Generated at Tue Oct 21 08:07:04 2025 by rpki-client