$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: CiBgveZ88mgtZ1hfAYHqxXQrvyiUMGAuoUQbPrzw9cY= Subject key identifier: 4E:B5:CC:BA:D7:60:91:EE:72:59:65:81:71:5F:4E:66:8B:4E:A1:BA Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0C3E Signing time: Wed 02 Jul 2025 18:45:10 +0000 Manifest this update: Wed 02 Jul 2025 18:45:10 +0000 Manifest next update: Wed 09 Jul 2025 18:45:10 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: G6bZUWMN9JgdngkYooViJV1kFU/PlG3LR6DGltnuG4c=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: jTKb6UqoxVKwoNueFvf3BZWhxggm3hq3OfDJsuiV3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Jul 2 18:45:10 2025 GMT Not After : Jul 9 18:45:10 2025 GMT Subject: CN=68657e36-4596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:ec:27:18:92:e7:5d:27:19:8b:c4:8f:ad: f4:d4:0c:35:9e:0b:a7:0a:c6:17:6b:33:83:8e:63: e9:5d:9c:19:e2:9b:ff:87:68:e4:ca:c8:90:32:89: 36:ca:fd:06:e1:fc:03:2b:a4:aa:d8:19:cd:be:6a: 10:15:b6:4e:56:0d:e2:36:cd:28:f1:a5:16:0f:7e: bc:01:3d:2d:4b:bd:1e:92:9e:42:6c:56:22:3c:a7: bc:59:eb:7e:9c:da:33:1c:29:00:4d:8b:3c:ff:fe: 92:61:7a:06:e1:5f:6e:8b:44:36:aa:a8:a3:9b:fa: f7:da:3b:bc:1f:12:5c:d9:73:c5:76:e7:a1:38:5b: 49:17:47:51:a9:16:9b:1f:4b:5f:a2:54:02:b6:01: bf:db:2b:bd:81:e5:ec:90:b4:77:75:87:8c:71:87: 0f:84:3c:b3:97:cd:8a:c1:ea:04:fe:d8:f1:37:bc: 2f:a0:5e:fb:dc:53:51:b7:1d:f5:38:04:e3:d0:ee: 66:8d:8c:6f:69:db:11:5a:70:25:7c:d8:de:0e:f1: 21:a0:38:09:bd:36:24:f1:dd:01:59:fe:ae:71:b9: d9:82:8f:82:42:ab:39:b9:7d:72:23:dc:8b:8c:c1: 94:26:2d:dc:0a:0b:f5:88:24:20:0a:89:19:59:1d: f9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B5:CC:BA:D7:60:91:EE:72:59:65:81:71:5F:4E:66:8B:4E:A1:BA X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:20:85:05:4c:1d:d1:86:bb:81:a6:bc:37:35:d0:19:0d:cc: 99:72:37:e7:b1:3f:b9:8a:6b:05:ad:eb:e3:b0:be:e7:8f:34: 01:2d:ce:c1:07:9a:14:4f:5d:27:65:69:64:a4:21:3b:ba:31: 12:d7:4a:24:3d:c4:52:c4:c5:8a:39:a5:84:7c:9c:ba:29:bb: 41:f2:0e:0a:cc:f8:4e:5a:32:6a:55:13:20:05:f8:77:0e:50: b7:12:99:83:0d:72:ab:30:45:bc:f2:fa:41:e2:88:55:80:2d: 9c:34:c1:97:e7:2a:a4:91:bd:01:96:07:fa:c9:25:a8:ac:7b: 21:0f:a9:74:26:fa:ab:4d:5a:24:2c:3a:65:ad:6f:62:27:fd: 24:18:2d:7f:1d:9f:2a:d6:b6:1a:5a:43:82:bc:f0:e3:9a:84: a2:57:f5:be:0c:6b:f6:90:29:30:dd:e5:db:c7:62:7b:8a:87: 29:c4:48:8c:05:09:10:cd:09:8d:8a:da:14:33:00:4b:c6:e4: f4:71:ce:85:6f:55:f5:8c:d0:68:ce:ee:58:05:76:cc:94:12: c2:e1:4f:13:26:6e:b7:14:39:e6:56:b8:0f:3d:d4:f1:6f:27: 35:d0:60:57:44:46:ac:cd:69:92:bb:f9:5a:bc:7c:f6:c7:83: 32:62:35:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjUwNzAyMTg0NTEwWhcNMjUwNzA5MTg0NTEwWjAYMRYwFAYD VQQDEw02ODY1N2UzNi00NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21bsJxiS510nGYvEj6301Aw1ngunCsYXazODjmPpXZwZ4pv/h2jkysiQMok2 yv0G4fwDK6Sq2BnNvmoQFbZOVg3iNs0o8aUWD368AT0tS70ekp5CbFYiPKe8Wet+ nNozHCkATYs8//6SYXoG4V9ui0Q2qqijm/r32ju8HxJc2XPFduehOFtJF0dRqRab H0tfolQCtgG/2yu9geXskLR3dYeMcYcPhDyzl82KweoE/tjxN7wvoF773FNRtx31 OATj0O5mjYxvadsRWnAlfNjeDvEhoDgJvTYk8d0BWf6ucbnZgo+CQqs5uX1yI9yL jMGUJi3cCgv1iCQgCokZWR35HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE61zLrX YJHuclllgXFfTmaLTqG6MB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvIIUFTB3RhruBprw3NdAZDcyZcjfnsT+5imsFrevjsL7njzQBLc7B B5oUT10nZWlkpCE7ujES10okPcRSxMWKOaWEfJy6KbtB8g4KzPhOWjJqVRMgBfh3 DlC3EpmDDXKrMEW88vpB4ohVgC2cNMGX5yqkkb0Blgf6ySWorHshD6l0JvqrTVok LDplrW9iJ/0kGC1/HZ8q1rYaWkOCvPDjmoSiV/W+DGv2kCkw3eXbx2J7iocpxEiM BQkQzQmNitoUMwBLxuT0cc6Fb1X1jNBozu5YBXbMlBLC4U8TJm63FDnmVrgPPdTx byc10GBXREaszWmSu/lavHz2x4MyYjVi -----END CERTIFICATE-----Generated at Fri Jul 4 10:54:57 2025 by rpki-client