$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: KLbvWflmANZT2erdkn/W8quB2O9D+Bv+K48Vq7F9yik= Subject key identifier: 7D:6F:0D:03:A5:F9:4A:FE:B3:C8:80:8D:2A:65:89:42:32:DA:6E:73 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 0158 Signing time: Sat 23 Aug 2025 04:26:59 +0000 Manifest this update: Sat 23 Aug 2025 04:26:59 +0000 Manifest next update: Sat 30 Aug 2025 04:26:59 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: t957y+CHcXuyNdhNVUXlHeBhTX+dDsO0ob1pgtRelvM=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Aug 23 04:26:59 2025 GMT Not After : Aug 30 04:26:59 2025 GMT Subject: CN=68a94313-80b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:16:6f:92:68:1e:42:65:03:d8:4f:bb:f8: 74:b7:58:c6:81:48:9c:1b:ea:ec:17:48:a4:18:47: a2:c0:f4:6b:17:0e:60:fb:30:fa:10:7d:87:e3:c0: 82:40:35:bb:05:8d:7c:a5:7f:b8:69:94:fa:1e:3b: e2:eb:ad:c3:bf:85:33:9b:29:c0:ce:ba:1e:8e:e4: 00:fe:28:8f:01:26:30:8b:04:b1:97:f2:9e:ed:b0: ec:87:b4:76:bf:fc:b6:91:7a:12:58:be:4e:d1:cc: 94:bc:26:50:72:b2:d9:17:1a:31:ee:57:5c:53:5b: b6:92:47:68:42:88:4b:69:1c:de:e8:9f:ca:00:ff: 3c:d8:4e:39:33:c1:c3:65:4f:5e:9d:35:ca:8e:d0: e9:e8:56:5e:04:bb:20:52:47:a4:8b:95:df:dd:e9: e4:57:56:e1:6a:9d:fb:c1:ad:19:b8:27:15:23:9a: ac:59:f2:d0:ec:d9:43:d7:20:f0:1e:ba:aa:a6:06: 8c:56:3f:0a:f8:b8:7c:cd:71:a2:51:bd:df:79:50: c2:a9:9e:a0:a7:94:c5:b3:d6:66:10:c3:ec:c2:3d: 74:97:50:51:b9:29:26:1a:af:27:7e:25:3e:08:53: c7:b1:9b:82:18:cb:d1:1d:ab:20:83:f1:4e:f2:ec: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6F:0D:03:A5:F9:4A:FE:B3:C8:80:8D:2A:65:89:42:32:DA:6E:73 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7e:ed:5e:6e:17:25:80:e3:1e:c2:45:21:e6:cb:88:c8:31: 2f:65:b7:3a:59:f4:be:7d:86:86:f8:70:3d:f3:16:eb:46:96: e3:87:f9:60:21:8a:1f:0d:b8:26:52:6d:2d:f9:c2:15:11:50: ba:8c:78:82:60:25:5c:1a:71:8a:5d:cd:2f:50:ac:8c:2c:43: 47:8d:54:53:49:3d:28:50:7c:87:bc:99:ee:00:f9:2a:3e:6a: d3:3f:c2:9a:20:72:95:fc:93:65:e2:3f:b2:6c:f5:3f:9e:34: 8a:a5:d2:5c:83:9d:59:31:67:3f:4e:fe:74:1d:70:4b:57:44: 90:19:2a:a7:86:49:1b:62:ad:15:91:ce:44:ed:8c:b8:3d:0f: f6:bc:4a:9a:51:fd:f0:24:49:b1:6a:d8:90:99:39:0f:39:30: 6e:d3:2a:e6:ac:e2:ec:99:13:23:7d:4b:d2:cf:f0:4e:4c:be: ff:71:18:76:1f:bd:d8:05:36:19:bc:78:b2:04:3d:89:d0:bd: 7f:4f:3c:a8:1c:61:0f:52:af:33:c5:63:31:91:50:ae:ef:7b: e1:0e:7a:40:08:52:36:cc:82:8d:3f:7c:03:18:5a:fc:2a:e2: 01:da:99:19:7a:a3:c3:3b:ad:f6:c1:d3:ff:e5:c6:15:d5:ee: 42:e6:18:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUwODIzMDQyNjU5WhcNMjUwODMwMDQyNjU5WjAYMRYwFAYD VQQDEw02OGE5NDMxMy04MGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEEWb5JoHkJlA9hPu/h0t1jGgUicG+rsF0ikGEeiwPRrFw5g+zD6EH2H48CC QDW7BY18pX+4aZT6Hjvi663Dv4UzmynAzroejuQA/iiPASYwiwSxl/Ke7bDsh7R2 v/y2kXoSWL5O0cyUvCZQcrLZFxox7ldcU1u2kkdoQohLaRze6J/KAP882E45M8HD ZU9enTXKjtDp6FZeBLsgUkeki5Xf3enkV1bhap37wa0ZuCcVI5qsWfLQ7NlD1yDw HrqqpgaMVj8K+Lh8zXGiUb3feVDCqZ6gp5TFs9ZmEMPswj10l1BRuSkmGq8nfiU+ CFPHsZuCGMvRHasgg/FO8uwL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1vDQOl +Ur+s8iAjSpliUIy2m5zMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACfu1ebhclgOMewkUh5suIyDEvZbc6WfS+fYaG+HA98xbrRpbjh/lg IYofDbgmUm0t+cIVEVC6jHiCYCVcGnGKXc0vUKyMLENHjVRTST0oUHyHvJnuAPkq PmrTP8KaIHKV/JNl4j+ybPU/njSKpdJcg51ZMWc/Tv50HXBLV0SQGSqnhkkbYq0V kc5E7Yy4PQ/2vEqaUf3wJEmxatiQmTkPOTBu0yrmrOLsmRMjfUvSz/BOTL7/cRh2 H73YBTYZvHiyBD2J0L1/TzyoHGEPUq8zxWMxkVCu73vhDnpACFI2zIKNP3wDGFr8 KuIB2pkZeqPDO632wdP/5cYV1e5C5hi0 -----END CERTIFICATE-----Generated at Sat Aug 23 22:40:19 2025 by rpki-client