$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft File: ItyTZY3G6XAwereu8eJV3j1D9bc.mft (raw, json) Hash identifier: vu4xfOSLFCHWH8+adc/JRs5vGZFAjZZVAip3ARGwxwc= Subject key identifier: 68:E8:46:6E:3D:29:CD:B5:FD:46:71:28:34:83:BF:38:8C:69:0F:92 Authority key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7 Certificate issuer: /CN=A91F0C45/serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft Manifest number: 19 Signing time: Sun 19 Oct 2025 11:24:56 +0000 Manifest this update: Sun 19 Oct 2025 11:24:55 +0000 Manifest next update: Sun 26 Oct 2025 11:24:55 +0000 Files and hashes: 1: ItyTZY3G6XAwereu8eJV3j1D9bc.crl (hash: 8PcNt7RWNHISvpntguqaR9hGr1nfIDthjOlgw2GEa5M=) 2: 96AF1D609A0F11F09F475111C4F9AE02.roa (hash: tFfEWYriExxsv1Kbj1C8BLmYz3OJt9i3cLz0eyOnVkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7 Validity Not Before: Oct 19 11:24:55 2025 GMT Not After : Oct 26 11:24:55 2025 GMT Subject: CN=68f4ca88-260c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:d5:79:b3:1d:c9:7d:03:cf:2d:77:1e:65: e5:7b:96:3a:dd:12:a2:3f:3d:da:8a:f1:af:c0:88: dc:08:94:22:de:d4:a6:50:7d:63:49:0e:52:ac:c4: 42:1f:98:57:d5:53:93:c3:08:f6:9f:35:99:09:4a: 7c:fe:7d:bd:7f:2d:e1:9b:95:39:56:6c:8d:9a:03: 06:c4:14:5a:c0:4f:05:66:64:12:6c:d7:a6:9b:df: 71:29:dd:ed:04:c1:a5:77:c3:cf:e5:31:89:25:06: f4:ba:fa:eb:47:21:55:03:fa:35:0f:79:b3:12:58: a5:7e:0e:72:9a:e8:e4:4f:40:14:60:51:47:f1:1c: 77:56:a2:df:22:4d:7b:33:97:17:69:94:9e:e6:94: 30:5b:12:7f:2c:4a:d3:04:a4:35:58:15:a2:1c:66: 9e:c2:dc:58:93:c1:3f:5b:25:b9:1e:26:74:fc:26: 53:02:76:88:bb:61:a5:ca:7f:00:e4:72:d7:80:33: e2:2e:c4:2b:ae:3b:9b:3d:7c:9c:6c:19:bf:8a:b6: 0c:0b:41:2c:fb:e8:6f:13:65:0f:a0:7e:9c:73:64: 7d:3a:1a:de:c8:65:e3:6e:bd:af:1d:65:a0:98:e6: 17:5e:e9:09:24:38:d0:55:55:db:1a:31:09:f2:da: 46:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E8:46:6E:3D:29:CD:B5:FD:46:71:28:34:83:BF:38:8C:69:0F:92 X509v3 Authority Key Identifier: keyid:22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:81:90:78:f7:7b:7b:37:f4:e2:d1:1a:51:78:da:bd:2b:be: 6a:cf:3a:b4:61:f2:8e:87:68:7e:80:5a:86:f5:67:99:92:87: 6f:33:b1:05:be:00:76:dd:0e:b2:4c:a5:7a:9c:e6:04:1d:d2: 85:6c:19:06:1b:a9:31:41:2d:ce:9a:bc:c0:e4:75:f3:6a:83: e5:3d:70:8c:ae:bd:89:49:7d:ce:6f:5e:cb:03:5e:2e:62:31: 71:2c:db:ef:9d:95:ac:f9:77:9b:8e:17:35:8f:13:36:c7:9c: 99:c7:df:98:a3:c8:e0:e6:ff:6c:80:69:f4:de:03:f7:b8:db: 0c:f9:a6:ce:97:7d:41:19:b5:64:c4:d9:0b:b9:f3:fd:30:cb: 77:10:93:2d:98:4c:c5:7b:06:53:22:c3:bf:12:a1:27:71:b3: 07:47:7a:88:d8:1d:b0:58:8c:5c:82:e0:5a:21:98:68:62:50: 74:46:fc:1e:aa:e9:3a:a6:f0:b8:ce:8a:fc:31:7c:b3:8b:7c: d2:61:21:77:a1:eb:b7:d7:85:aa:06:3a:b0:2a:2d:ea:f7:99: 99:3c:8c:40:89:56:87:df:1f:2f:52:6f:0b:d7:7a:dc:7b:b1: db:88:8c:ce:49:3f:0b:4f:4c:89:8c:f1:ca:b5:4a:7e:b3:35: 37:f9:fd:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMjJEQzkzNjU4REM2RTk3MDMwN0FCN0FFRjFFMjU1REUz RDQzRjVCNzAeFw0yNTEwMTkxMTI0NTVaFw0yNTEwMjYxMTI0NTVaMBgxFjAUBgNV BAMTDTY4ZjRjYTg4LTI2MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbaNV5sx3JfQPPLXceZeV7ljrdEqI/PdqK8a/AiNwIlCLe1KZQfWNJDlKsxEIf mFfVU5PDCPafNZkJSnz+fb1/LeGblTlWbI2aAwbEFFrATwVmZBJs16ab33Ep3e0E waV3w8/lMYklBvS6+utHIVUD+jUPebMSWKV+DnKa6ORPQBRgUUfxHHdWot8iTXsz lxdplJ7mlDBbEn8sStMEpDVYFaIcZp7C3FiTwT9bJbkeJnT8JlMCdoi7YaXKfwDk cteAM+IuxCuuO5s9fJxsGb+KtgwLQSz76G8TZQ+gfpxzZH06Gt7IZeNuva8dZaCY 5hde6QkkONBVVdsaMQny2kazAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaOhGbj0p zbX9RnEoNIO/OIxpD5IwHwYDVR0jBBgwFoAUItyTZY3G6XAwereu8eJV3j1D9bcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1LzkxQTE4OTlFODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0l0eVRaWTNHNlhBd2VyZXU4ZUpWM2oxRDli Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXR5VFpZM0c2WEF3ZXJldThlSlYzajFEOWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1LzkxQTE4OTlFODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0l0eVRaWTNHNlhB d2VyZXU4ZUpWM2oxRDliYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAeBkHj3e3s39OLRGlF42r0rvmrPOrRh8o6HaH6AWob1Z5mSh28zsQW+ AHbdDrJMpXqc5gQd0oVsGQYbqTFBLc6avMDkdfNqg+U9cIyuvYlJfc5vXssDXi5i MXEs2++dlaz5d5uOFzWPEzbHnJnH35ijyODm/2yAafTeA/e42wz5ps6XfUEZtWTE 2Qu58/0wy3cQky2YTMV7BlMiw78SoSdxswdHeojYHbBYjFyC4FohmGhiUHRG/B6q 6Tqm8LjOivwxfLOLfNJhIXeh67fXhaoGOrAqLer3mZk8jECJVoffHy9SbwvXetx7 sduIjM5JPwtPTImM8cq1Sn6zNTf5/TE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:42 2025 by rpki-client