$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: /9GJJIioeVe932RCsE6qNtv9CZNstauzyGgrnw7DFqM= Subject key identifier: 4A:1E:AA:52:CA:4C:AF:13:87:57:96:13:7E:24:0A:65:EC:9B:61:5B Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 013E Signing time: Thu 03 Jul 2025 04:42:34 +0000 Manifest this update: Thu 03 Jul 2025 04:42:33 +0000 Manifest next update: Thu 10 Jul 2025 04:42:33 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: E9RVylQhPoUCMYSNadhgGk8xDC4hNzEHbwTe2ui80Ug=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Jul 3 04:42:33 2025 GMT Not After : Jul 10 04:42:33 2025 GMT Subject: CN=68660a39-6bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:64:34:43:92:70:56:8c:43:d6:22:94:09:7b: e2:15:39:fb:aa:61:90:be:60:34:30:c1:32:b1:06: ba:9f:9a:a9:80:91:a5:63:05:c7:51:72:32:d0:44: cf:40:5d:8d:bb:01:c1:6d:b1:20:f4:b7:1c:5d:26: 88:5e:eb:06:04:9a:85:bc:a2:0f:49:7e:63:c8:7c: a7:65:94:0c:de:6b:56:6e:2f:b5:03:66:b5:a6:2a: 63:c3:0c:6b:f5:64:f2:0e:af:f2:76:a2:fc:11:20: b4:13:5d:bf:55:28:1b:4d:70:c7:dd:a5:6a:16:67: ae:48:ba:04:bd:41:d9:ea:a2:ff:17:04:44:f1:8d: 20:56:39:25:cc:ae:8e:8a:9f:8b:ba:46:24:73:53: eb:61:a2:f7:a2:1c:82:0c:d6:18:dd:93:48:e8:95: 87:ab:2d:20:d5:75:c9:3e:7f:cf:46:24:c2:e5:de: da:af:77:e3:92:b8:4d:69:95:bf:0e:d3:90:17:03: 84:58:3f:f9:d4:b2:b4:44:00:6a:f0:7b:42:7c:e6: 31:8c:1c:1f:18:66:a5:55:57:fb:7a:70:49:ed:b4: dd:cf:ab:03:7e:75:37:3d:50:a8:f4:ef:d2:5d:14: 41:4f:ab:1e:a3:be:b6:73:2c:89:38:d7:1c:cb:8f: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1E:AA:52:CA:4C:AF:13:87:57:96:13:7E:24:0A:65:EC:9B:61:5B X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:25:d2:f9:d0:d6:45:1a:41:42:75:d0:58:33:6b:55:d5:15: eb:34:c9:5f:1d:ea:0c:cc:6f:1f:1a:fe:81:3c:85:2e:1c:37: b7:cd:f6:bf:f6:2b:41:8c:48:e2:63:ef:82:5c:22:35:47:91: eb:71:fc:c3:9a:89:e2:d2:51:8e:ba:72:e6:f8:3a:eb:34:d1: 38:8c:94:f9:33:e8:62:bd:0b:a2:a0:18:60:ea:68:14:2b:bd: 7e:b3:ff:a8:5c:72:a6:3f:5a:92:94:ea:63:61:d9:86:bb:b8: 3e:a2:0a:51:f1:17:85:ea:18:e7:11:5f:8d:0c:d1:26:77:5a: df:77:25:8e:4d:79:e2:27:7d:a6:a5:9c:77:f9:57:c7:c5:b5: d1:5f:f3:12:e3:65:ae:b2:f3:d9:d5:ab:c8:ad:aa:d6:46:e2: bf:58:78:dd:67:e8:4f:4d:8f:77:5f:bb:e8:b0:39:6c:46:ad: 7b:0d:71:09:3d:54:4a:73:ca:17:b4:ae:16:0a:b3:a0:34:dc: 10:71:78:ea:1c:06:f5:23:35:c2:fb:aa:40:ac:64:a0:c5:65: 92:34:95:90:0f:e7:39:fe:a9:29:7c:87:d8:dd:39:06:29:58: 79:bf:cc:3b:ed:e4:55:54:87:b3:c4:4d:14:e0:96:a9:6b:57: 1d:34:94:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUwNzAzMDQ0MjMzWhcNMjUwNzEwMDQ0MjMzWjAYMRYwFAYD VQQDEw02ODY2MGEzOS02YmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WQ0Q5JwVoxD1iKUCXviFTn7qmGQvmA0MMEysQa6n5qpgJGlYwXHUXIy0ETP QF2NuwHBbbEg9LccXSaIXusGBJqFvKIPSX5jyHynZZQM3mtWbi+1A2a1pipjwwxr 9WTyDq/ydqL8ESC0E12/VSgbTXDH3aVqFmeuSLoEvUHZ6qL/FwRE8Y0gVjklzK6O ip+LukYkc1PrYaL3ohyCDNYY3ZNI6JWHqy0g1XXJPn/PRiTC5d7ar3fjkrhNaZW/ DtOQFwOEWD/51LK0RABq8HtCfOYxjBwfGGalVVf7enBJ7bTdz6sDfnU3PVCo9O/S XRRBT6seo762cyyJONccy49c8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoeqlLK TK8Th1eWE34kCmXsm2FbMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7JdL50NZFGkFCddBYM2tV1RXrNMlfHeoMzG8fGv6BPIUuHDe3zfa/ 9itBjEjiY++CXCI1R5HrcfzDmoni0lGOunLm+DrrNNE4jJT5M+hivQuioBhg6mgU K71+s/+oXHKmP1qSlOpjYdmGu7g+ogpR8ReF6hjnEV+NDNEmd1rfdyWOTXniJ32m pZx3+VfHxbXRX/MS42WusvPZ1avIrarWRuK/WHjdZ+hPTY93X7vosDlsRq17DXEJ PVRKc8oXtK4WCrOgNNwQcXjqHAb1IzXC+6pArGSgxWWSNJWQD+c5/qkpfIfY3TkG KVh5v8w77eRVVIezxE0U4Japa1cdNJTV -----END CERTIFICATE-----Generated at Fri Jul 4 14:55:33 2025 by rpki-client