$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: /rwIF/euxNGeCZkMQkcCyCNgJZ1Bvj7Erx87m5nK4pc= Subject key identifier: 87:ED:E7:D8:2F:CD:72:1E:D7:96:3E:15:9E:14:84:0B:1C:3C:9F:52 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0C76 Signing time: Mon 20 Oct 2025 19:03:21 +0000 Manifest this update: Mon 20 Oct 2025 19:03:20 +0000 Manifest next update: Mon 27 Oct 2025 19:03:20 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: OaoNwvz7TeR/608tRt0sChN/On3G323GfmvrzuqT9GI=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: jTKb6UqoxVKwoNueFvf3BZWhxggm3hq3OfDJsuiV3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Oct 20 19:03:20 2025 GMT Not After : Oct 27 19:03:20 2025 GMT Subject: CN=68f68779-2cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:f3:3b:61:bd:2c:f7:eb:45:dd:28:98:6e: 9c:0b:6d:7f:5e:a6:c5:8b:b1:05:e3:d0:8f:dc:d2: ab:be:e4:66:e2:db:3f:81:a9:9b:b4:e7:65:77:f1: 42:21:70:32:40:85:26:28:24:06:bf:a2:50:1a:d0: 46:cf:5c:18:6d:95:2a:03:e9:2c:69:db:b2:0d:a6: 0a:6a:38:38:6d:a6:c6:73:f9:65:69:82:71:6d:6c: fa:8b:2a:a7:3b:6d:b0:7b:26:d1:68:f3:c3:a0:80: 47:97:72:e8:a0:e4:e9:b1:8a:79:a1:9f:b4:11:6c: 63:ac:41:9b:b4:fd:89:81:22:d6:af:ab:54:84:7a: 87:d3:77:26:95:95:ec:6d:7e:3b:88:da:a1:8c:0c: 91:5e:59:8f:03:c0:7c:fb:64:78:8f:15:57:09:f7: 68:5b:52:b3:f5:38:c7:bf:74:a1:8f:b8:61:19:3b: 1f:4b:3e:02:95:58:e5:a9:ce:54:99:22:82:a5:1f: 48:4a:c7:74:2f:b7:be:49:a5:73:0e:27:ee:ad:30: af:7d:62:df:96:6e:73:fc:06:a4:7e:a4:8e:d4:90: f3:84:4b:eb:a4:3b:ac:2d:4f:10:01:b3:8c:20:c0: 97:21:0c:e8:11:e6:54:a4:21:87:ba:f9:96:4c:eb: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:ED:E7:D8:2F:CD:72:1E:D7:96:3E:15:9E:14:84:0B:1C:3C:9F:52 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:7e:25:b7:22:de:ab:fb:22:7d:25:57:62:39:8d:8c:95:b5: ca:90:89:46:42:3f:a4:d4:8d:51:48:ba:f4:ca:a8:c2:7a:b6: 54:23:9f:38:c6:92:37:9c:3b:b2:c5:8b:06:a5:5c:aa:db:7a: d9:3c:d4:88:96:07:93:3d:5e:b3:49:6b:fc:7a:a2:4f:3b:60: a0:06:76:38:27:0a:f9:67:88:9b:0a:1e:88:fb:d8:43:cc:a6: c4:ad:80:23:25:ff:03:cc:75:1d:ca:81:5a:d5:fe:fa:17:a5: 02:f2:54:f2:42:73:b3:8b:6a:07:b0:56:b5:92:eb:28:fd:8e: b4:12:3c:71:32:44:d5:b8:c7:fa:87:5e:08:d4:35:df:9b:7e: 75:61:84:9d:61:6a:fa:67:a0:f5:de:4b:7a:79:ee:83:d3:ef: 68:6f:55:b8:08:3f:01:4f:6a:e3:9b:1a:4a:2a:a9:4d:b9:19: bc:9a:73:cb:c5:1a:75:05:93:22:b5:68:11:7a:9d:72:05:df: ee:40:2c:58:62:1b:1e:a8:f8:e8:a7:55:36:2c:03:d5:7f:d1: 0a:00:46:d1:33:50:28:d7:0f:6c:31:46:11:ae:23:28:73:a3: 52:81:1f:88:d2:d5:14:8d:e3:60:97:25:b8:4f:08:11:59:a2: 50:64:1b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjUxMDIwMTkwMzIwWhcNMjUxMDI3MTkwMzIwWjAYMRYwFAYD VQQDEw02OGY2ODc3OS0yY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZzzO2G9LPfrRd0omG6cC21/XqbFi7EF49CP3NKrvuRm4ts/gambtOdld/FC IXAyQIUmKCQGv6JQGtBGz1wYbZUqA+ksaduyDaYKajg4babGc/llaYJxbWz6iyqn O22weybRaPPDoIBHl3LooOTpsYp5oZ+0EWxjrEGbtP2JgSLWr6tUhHqH03cmlZXs bX47iNqhjAyRXlmPA8B8+2R4jxVXCfdoW1Kz9TjHv3Shj7hhGTsfSz4ClVjlqc5U mSKCpR9ISsd0L7e+SaVzDifurTCvfWLflm5z/AakfqSO1JDzhEvrpDusLU8QAbOM IMCXIQzoEeZUpCGHuvmWTOtDjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIft59gv zXIe15Y+FZ4UhAscPJ9SMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5fiW3It6r+yJ9JVdiOY2MlbXKkIlGQj+k1I1RSLr0yqjCerZUI584 xpI3nDuyxYsGpVyq23rZPNSIlgeTPV6zSWv8eqJPO2CgBnY4Jwr5Z4ibCh6I+9hD zKbErYAjJf8DzHUdyoFa1f76F6UC8lTyQnOzi2oHsFa1kuso/Y60EjxxMkTVuMf6 h14I1DXfm351YYSdYWr6Z6D13kt6ee6D0+9ob1W4CD8BT2rjmxpKKqlNuRm8mnPL xRp1BZMitWgRep1yBd/uQCxYYhseqPjop1U2LAPVf9EKAEbRM1Ao1w9sMUYRriMo c6NSgR+I0tUUjeNglyW4TwgRWaJQZBsF -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:31 2025 by rpki-client