$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: TE+kbRVqdXLafqRCnyv6fLtpaRkdxkRVP3yKb+xZdCE= Subject key identifier: 08:36:9E:FA:AD:40:CA:04:8E:FB:B6:A3:D7:86:AE:33:91:5F:1C:B7 Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 18F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 18E7 Signing time: Fri 24 Oct 2025 16:48:27 +0000 Manifest this update: Fri 24 Oct 2025 16:48:27 +0000 Manifest next update: Fri 31 Oct 2025 16:48:27 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: tpdKf6VV71fjlCT2b8+iSkKzV9suSivuVoLtWmrLtoo=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: cv0ZUc0lebxpCeCaHLbic5zL6MtIPbL3843SH+qN9Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 16:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6384 (0x18f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: Oct 24 16:48:27 2025 GMT Not After : Oct 31 16:48:27 2025 GMT Subject: CN=68fbaddb-8cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a7:24:87:d3:56:db:4d:a8:8c:b3:d9:b2:87: ed:e8:af:30:f0:69:8d:22:62:94:67:fa:31:7a:33: 4c:87:43:f9:c7:65:cb:6f:92:5b:58:30:0a:e6:8e: 43:a0:b0:41:f2:81:f4:e2:fa:4f:f6:06:26:ad:66: dc:f9:e4:41:dc:41:be:9d:e8:c1:d9:47:57:6a:5f: 78:97:73:5f:1e:d3:a4:53:ad:9b:bb:47:36:e6:16: 9f:da:1c:0c:38:d5:8b:6e:ce:65:ab:10:75:28:f4: 79:64:6b:a1:af:e0:9a:67:d9:3f:23:14:30:db:30: b2:c3:4b:1d:3d:2e:2b:0b:5c:45:33:df:1f:2a:fe: e5:1b:ff:bd:45:a7:29:4d:bb:66:c4:07:25:1d:ad: 7a:4d:85:05:b7:ed:32:77:b2:ec:0f:67:63:31:05: d5:e4:c2:8e:5a:68:c4:c2:4b:57:bb:09:9e:af:a3: cd:a2:7b:b5:d5:f5:ca:44:46:68:7b:14:e9:69:bb: 55:18:10:6e:b4:2e:d3:7a:8a:02:6b:94:54:dc:de: 7b:27:d2:cc:a0:03:bf:c9:33:62:ba:f6:c4:da:31: 63:bb:28:16:72:60:b4:d5:b9:c9:bf:0e:51:2b:71: 54:69:0d:7d:b2:43:eb:c2:17:94:0a:ea:fa:40:65: c9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:36:9E:FA:AD:40:CA:04:8E:FB:B6:A3:D7:86:AE:33:91:5F:1C:B7 X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e4:7a:c5:57:5e:4d:55:41:3b:f5:f6:60:4d:4a:22:8b:10: 73:17:fa:c6:07:74:4e:02:43:0d:0a:f7:ae:9b:79:92:3e:06: 2e:1d:ab:eb:26:90:53:53:17:20:88:ba:e6:0f:4c:93:11:61: bc:b1:74:f3:2c:35:2d:d6:0f:01:a9:8c:a3:09:eb:d2:76:e0: 02:eb:45:3c:8e:ec:17:7e:82:23:cc:c9:d2:30:0c:7b:80:64: ce:4f:cd:6f:dc:33:3e:f3:d3:cd:72:28:a6:13:08:37:2a:f1: c2:e5:e9:3f:76:d5:34:e3:5b:fa:eb:1a:cd:06:e1:9d:9d:1a: f6:4a:74:c8:46:69:94:48:b9:cd:0e:a6:39:7e:6d:20:52:fe: 26:79:77:cd:66:86:fc:09:c7:0d:a8:37:80:9f:00:18:6a:94: 96:a7:7d:c9:19:b2:c3:e4:2b:92:12:d5:19:dd:9d:05:12:2b: b5:e6:1c:0e:59:da:09:f5:d8:70:a7:da:90:60:55:9c:27:fc: 9b:26:d9:0e:ca:1d:05:36:1a:c3:45:cf:f3:ec:0b:94:6f:94: ee:e6:2c:48:c1:06:d8:ab:b2:3e:c2:c6:ea:de:52:52:ac:e0: 27:0e:2f:de:1b:6e:45:74:4f:7c:f3:ed:8f:0f:04:8b:7a:13: 93:54:63:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjUxMDI0MTY0ODI3WhcNMjUxMDMxMTY0ODI3WjAYMRYwFAYD VQQDEw02OGZiYWRkYi04Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6ckh9NW202ojLPZsoft6K8w8GmNImKUZ/oxejNMh0P5x2XLb5JbWDAK5o5D oLBB8oH04vpP9gYmrWbc+eRB3EG+nejB2UdXal94l3NfHtOkU62bu0c25haf2hwM ONWLbs5lqxB1KPR5ZGuhr+CaZ9k/IxQw2zCyw0sdPS4rC1xFM98fKv7lG/+9Racp TbtmxAclHa16TYUFt+0yd7LsD2djMQXV5MKOWmjEwktXuwmer6PNonu11fXKREZo exTpabtVGBButC7TeooCa5RU3N57J9LMoAO/yTNiuvbE2jFjuygWcmC01bnJvw5R K3FUaQ19skPrwheUCur6QGXJAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg2nvqt QMoEjvu2o9eGrjORXxy3MB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA5HrFV15NVUE79fZgTUoiixBzF/rGB3ROAkMNCveum3mSPgYuHavr JpBTUxcgiLrmD0yTEWG8sXTzLDUt1g8BqYyjCevSduAC60U8juwXfoIjzMnSMAx7 gGTOT81v3DM+89PNciimEwg3KvHC5ek/dtU041v66xrNBuGdnRr2SnTIRmmUSLnN DqY5fm0gUv4meXfNZob8CccNqDeAnwAYapSWp33JGbLD5CuSEtUZ3Z0FEiu15hwO WdoJ9dhwp9qQYFWcJ/ybJtkOyh0FNhrDRc/z7AuUb5Tu5ixIwQbYq7I+wsbq3lJS rOAnDi/eG25FdE988+2PDwSLehOTVGPm -----END CERTIFICATE-----Generated at Sun Oct 26 00:41:42 2025 by rpki-client