$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: QnGZEJ8kG9+W3uyz+NwSxgM+n0UMYFdwVQw5KiY+/0E= Subject key identifier: ED:9A:11:2F:DC:5E:C6:5D:07:29:FD:D0:D9:62:E8:34:8B:51:BB:A8 Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: DA Signing time: Sun 19 Oct 2025 08:37:02 +0000 Manifest this update: Sun 19 Oct 2025 08:37:01 +0000 Manifest next update: Sun 26 Oct 2025 08:37:01 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: 8rhZvjYMAv+JNOcZXMs8dTUoIlgwJ17Hy75rQocPxQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Oct 19 08:37:01 2025 GMT Not After : Oct 26 08:37:01 2025 GMT Subject: CN=68f4a32e-b687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:d9:25:d5:c5:5a:02:64:79:67:10:0d:b3: 9d:c6:d0:bc:a3:23:0a:28:cd:4b:ea:9d:0a:9b:9c: c3:18:b2:1c:f8:1c:2d:91:1c:88:68:c1:70:2a:f5: e8:eb:76:d8:2c:4f:88:98:f1:0c:5d:71:70:19:4d: cf:7e:83:91:2e:30:44:e9:db:f5:0f:de:e8:01:11: 0f:93:1b:f8:14:5d:cb:15:dd:a5:17:72:ef:7f:02: df:1f:d5:5d:b9:46:c4:2b:ee:09:e6:f7:25:4a:a6: 6c:70:01:83:1c:dd:22:aa:69:eb:6b:cb:95:d8:ab: 43:0d:43:c2:c5:2d:3c:ef:43:57:72:e9:75:a6:35: 1c:a4:b3:a2:63:5e:c3:b7:01:a3:5a:ac:1a:3b:90: 58:d9:5e:33:71:e8:18:09:53:30:5b:28:e4:c0:af: d1:ca:ae:b2:c5:ba:bb:0b:d9:24:7c:ee:d2:4c:f1: f3:dd:cd:1a:e8:ce:c0:8a:cb:10:92:15:0d:41:8f: 21:ec:3d:22:e4:a0:b2:62:84:13:fa:5a:3a:19:a1: ef:d7:f0:01:16:44:30:20:7a:67:16:59:56:32:40: 7e:32:0a:cf:0c:60:52:ac:b4:90:d4:4d:2b:be:0f: ec:21:fc:de:9d:29:93:31:6f:e8:60:46:c7:ee:14: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:11:2F:DC:5E:C6:5D:07:29:FD:D0:D9:62:E8:34:8B:51:BB:A8 X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9e:7f:4f:28:34:7c:d1:03:3c:09:98:03:2e:d4:ea:ca:06: 65:02:34:17:41:4e:40:ac:01:40:72:e7:8a:b0:58:44:30:11: 9f:ad:48:53:f2:9f:63:19:e8:59:ff:49:1f:43:c9:41:d0:03: ce:f1:e2:0b:5f:ca:b5:5b:78:0a:d1:54:d5:35:6a:1c:87:9b: 83:9e:b1:b9:18:d2:cf:ba:f2:0e:98:2f:dc:75:4a:25:2e:d5: c0:c2:ec:cf:3d:2b:25:1d:6c:d2:38:21:b2:8c:5e:06:86:58: 7e:33:2f:05:c9:bb:de:f9:7b:43:be:f1:0c:79:de:be:56:3a: a2:d3:8f:15:77:b9:f3:e4:ec:26:ff:f5:3e:4d:18:b0:ac:71: 4d:a2:f4:d8:78:04:56:d3:0a:4f:ab:0c:67:15:ac:12:82:42: e8:1c:d7:29:d6:e5:3a:f5:45:84:85:f0:6a:9d:d7:31:e9:14: 66:49:8c:04:e7:53:92:68:c5:84:13:32:46:bf:05:67:22:2a: b5:13:4c:21:c0:ba:dd:8c:62:9e:25:91:9d:ee:77:f8:75:2d: 53:7e:d9:d7:29:c7:4d:3b:77:0f:08:b6:da:25:20:d7:fc:10: 3b:ec:db:c0:69:3b:b7:c3:b4:49:3f:df:a3:47:c1:9d:15:16: 09:36:a8:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjUxMDE5MDgzNzAxWhcNMjUxMDI2MDgzNzAxWjAYMRYwFAYD VQQDEw02OGY0YTMyZS1iNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1znZJdXFWgJkeWcQDbOdxtC8oyMKKM1L6p0Km5zDGLIc+BwtkRyIaMFwKvXo 63bYLE+ImPEMXXFwGU3PfoORLjBE6dv1D97oAREPkxv4FF3LFd2lF3LvfwLfH9Vd uUbEK+4J5vclSqZscAGDHN0iqmnra8uV2KtDDUPCxS0870NXcul1pjUcpLOiY17D twGjWqwaO5BY2V4zcegYCVMwWyjkwK/Ryq6yxbq7C9kkfO7STPHz3c0a6M7AissQ khUNQY8h7D0i5KCyYoQT+lo6GaHv1/ABFkQwIHpnFllWMkB+MgrPDGBSrLSQ1E0r vg/sIfzenSmTMW/oYEbH7hRDRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2aES/c XsZdByn90Nli6DSLUbuoMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbnn9PKDR80QM8CZgDLtTqygZlAjQXQU5ArAFAcueKsFhEMBGfrUhT 8p9jGehZ/0kfQ8lB0APO8eILX8q1W3gK0VTVNWoch5uDnrG5GNLPuvIOmC/cdUol LtXAwuzPPSslHWzSOCGyjF4Ghlh+My8Fybve+XtDvvEMed6+Vjqi048Vd7nz5Owm //U+TRiwrHFNovTYeARW0wpPqwxnFawSgkLoHNcp1uU69UWEhfBqndcx6RRmSYwE 51OSaMWEEzJGvwVnIiq1E0whwLrdjGKeJZGd7nf4dS1TftnXKcdNO3cPCLbaJSDX /BA77NvAaTu3w7RJP9+jR8GdFRYJNqjn -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:42 2025 by rpki-client