$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: AeqP9J+wXVDfUO8vOFw8liBv9n8dsz2izm43Qy+dIEE= Subject key identifier: 5A:7E:99:F2:FB:4E:8A:B5:02:57:3C:81:E3:C3:F6:A7:35:F2:C7:C9 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 0175 Signing time: Sun 19 Oct 2025 06:40:50 +0000 Manifest this update: Sun 19 Oct 2025 06:40:49 +0000 Manifest next update: Sun 26 Oct 2025 06:40:49 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: 10jAlkp/u3CsiZ65RmYq6vgNFtGJKJkUKBe1R2aTZog=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Oct 19 06:40:49 2025 GMT Not After : Oct 26 06:40:49 2025 GMT Subject: CN=68f487f2-faf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:93:95:f3:77:78:07:77:c7:20:9b:35:ed:27: 4a:4b:63:e0:dd:26:82:6b:a1:ca:84:71:2f:61:97: e4:e2:5f:ce:ff:97:30:90:4c:a1:0f:47:c9:fc:7a: b7:0a:36:60:aa:4c:99:cc:40:e4:af:a9:90:c9:dd: f8:1e:72:b9:b3:5d:4f:ae:e6:9c:af:2c:04:6f:f7: 95:72:11:04:08:69:89:18:41:ce:04:dc:92:be:dd: 19:48:cf:5b:46:4d:cf:eb:65:1e:36:27:e4:a3:5f: 93:9c:8d:d6:9f:9b:7d:fe:1e:f2:79:0d:53:e1:ca: 19:bc:b7:42:9e:63:fb:d5:af:d1:e7:2a:48:ca:81: ef:8f:36:5f:74:ab:89:26:4c:d1:da:c6:55:d6:b1: 40:cc:85:3e:6a:f5:0a:c5:32:16:38:2d:5a:8d:e8: 13:8c:a1:d6:6d:81:25:7a:98:00:f3:1c:fe:1d:e6: f9:2a:1d:86:c0:fd:10:91:fb:8b:f2:ac:4c:ef:e3: a9:09:d3:c7:b2:3e:4e:3b:28:9f:fc:ff:9b:28:f1: a7:13:13:11:70:1b:41:e9:e9:42:7c:0d:2c:00:77: 1f:56:1d:18:99:91:2a:aa:35:ae:d6:34:26:12:b6: f5:87:a2:65:bc:c8:44:ff:35:cb:1b:a3:b6:95:b4: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7E:99:F2:FB:4E:8A:B5:02:57:3C:81:E3:C3:F6:A7:35:F2:C7:C9 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:61:0b:b2:0d:16:cc:a6:75:3d:5d:40:cb:30:0f:02:95:25: d6:19:cf:22:dd:20:05:27:ad:b8:83:ce:7c:bc:c5:f4:25:4c: 06:89:d7:a8:5f:24:b8:a2:95:a3:06:7b:b8:d7:2b:37:a2:67: 20:3f:ce:c1:5e:2b:66:21:bf:ce:37:94:cc:8d:25:74:a3:49: 78:74:2d:b0:6c:0d:50:37:f9:49:49:d5:90:ee:a0:83:43:0c: 11:0a:95:0c:0d:01:24:8f:17:22:91:d3:90:10:5d:ca:2f:3a: ff:a9:3d:79:94:10:36:0a:4f:db:7d:2a:40:b6:09:30:04:6a: 41:5b:e5:0b:b4:a8:0e:9e:f9:41:98:21:ea:3d:19:be:b5:28: dd:a1:c3:2a:32:b7:89:72:e1:4f:05:68:0c:ea:98:18:96:7b: d7:ee:e3:3a:6f:89:60:61:a8:0f:0c:a4:3e:e7:e4:4c:5f:07: 6b:9d:a4:15:58:c3:1f:7b:f1:19:68:e8:cf:2b:c1:1a:d2:79: 00:b8:82:d0:d4:90:5a:c6:4d:10:b7:be:c8:2d:70:91:68:33: 9b:86:97:58:d8:d5:05:ff:2b:5d:06:2e:01:74:82:c6:90:b9: fc:7a:35:30:fe:a1:fc:83:8d:fc:f2:af:b3:da:2f:cd:a0:1c: b8:db:17:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUxMDE5MDY0MDQ5WhcNMjUxMDI2MDY0MDQ5WjAYMRYwFAYD VQQDEw02OGY0ODdmMi1mYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZOV83d4B3fHIJs17SdKS2Pg3SaCa6HKhHEvYZfk4l/O/5cwkEyhD0fJ/Hq3 CjZgqkyZzEDkr6mQyd34HnK5s11PruacrywEb/eVchEECGmJGEHOBNySvt0ZSM9b Rk3P62UeNifko1+TnI3Wn5t9/h7yeQ1T4coZvLdCnmP71a/R5ypIyoHvjzZfdKuJ JkzR2sZV1rFAzIU+avUKxTIWOC1ajegTjKHWbYElepgA8xz+Heb5Kh2GwP0QkfuL 8qxM7+OpCdPHsj5OOyif/P+bKPGnExMRcBtB6elCfA0sAHcfVh0YmZEqqjWu1jQm Erb1h6JlvMhE/zXLG6O2lbTZOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp+mfL7 Toq1Alc8gePD9qc18sfJMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMYQuyDRbMpnU9XUDLMA8ClSXWGc8i3SAFJ624g858vMX0JUwGideo XyS4opWjBnu41ys3omcgP87BXitmIb/ON5TMjSV0o0l4dC2wbA1QN/lJSdWQ7qCD QwwRCpUMDQEkjxcikdOQEF3KLzr/qT15lBA2Ck/bfSpAtgkwBGpBW+ULtKgOnvlB mCHqPRm+tSjdocMqMreJcuFPBWgM6pgYlnvX7uM6b4lgYagPDKQ+5+RMXwdrnaQV WMMfe/EZaOjPK8Ea0nkAuILQ1JBaxk0Qt77ILXCRaDObhpdY2NUF/ytdBi4BdILG kLn8ejUw/qH8g4388q+z2i/NoBy42xdr -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:25 2025 by rpki-client