$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: 1xNpXrkfd4jJo8cZqT8Rxw61qwKjj3dzr8ybQRo0HB0= Subject key identifier: 3A:2C:94:87:4E:1C:A4:12:5A:CC:BD:99:EA:DC:E9:76:CD:F9:12:22 Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 18D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 18D0 Signing time: Mon 08 Sep 2025 16:28:50 +0000 Manifest this update: Mon 08 Sep 2025 16:28:49 +0000 Manifest next update: Mon 15 Sep 2025 16:28:49 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: I/3EwOBGgKkCQqKCeWtwCchUNFPJ42lSVA78J9JkK1w=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: cv0ZUc0lebxpCeCaHLbic5zL6MtIPbL3843SH+qN9Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6361 (0x18d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: Sep 8 16:28:49 2025 GMT Not After : Sep 15 16:28:49 2025 GMT Subject: CN=68bf0442-f841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:8f:be:c1:6a:44:b5:6b:e3:2a:29:98:b0: 56:e7:8e:c5:42:6c:f5:0c:c2:62:23:e9:71:0c:d6: 66:ff:9b:3f:65:d0:24:07:dc:d4:9e:42:52:94:be: 71:3d:0e:19:25:40:60:14:87:ba:66:d5:1f:52:03: 91:60:ac:cb:83:fc:c1:58:8f:a2:0c:6b:e2:a1:37: 16:ad:7f:41:dc:30:21:da:b5:74:e0:d0:e2:d6:0f: 7a:4f:e8:37:14:83:55:71:0a:64:9d:74:d2:18:b0: d0:16:0b:a9:3f:46:c3:db:be:07:43:3d:b5:8d:62: 78:7b:23:21:b2:2f:25:d9:aa:49:fc:f9:fe:47:89: 2b:e7:d9:d3:32:bc:55:91:13:97:bb:54:72:cb:b0: 94:81:ae:ea:8e:75:90:e3:23:1f:2c:43:61:19:3f: 0b:80:b3:33:21:1e:3f:4d:c4:cc:84:e8:38:a6:f9: cd:d5:27:16:0a:a2:37:1d:1e:ec:a7:e2:f4:f3:7f: 35:a5:71:b5:1b:6a:b7:0d:7d:24:eb:48:fb:29:dc: c4:7c:9c:af:47:67:ca:2a:8d:6c:10:08:d3:a6:08: f6:c0:5f:c0:09:69:a0:8c:e6:c7:90:ba:32:de:be: 96:1e:3c:9a:8d:ab:62:69:52:46:dc:d4:f5:67:df: 43:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2C:94:87:4E:1C:A4:12:5A:CC:BD:99:EA:DC:E9:76:CD:F9:12:22 X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:57:53:67:f2:99:fd:1b:a8:7e:ed:35:f1:6d:67:81:f5:17: ad:a1:c4:ce:82:90:0b:e0:da:e8:85:b6:bd:4e:6d:eb:dc:e6: 3a:ca:5f:67:72:16:18:30:f1:fe:eb:5a:5b:78:b6:9e:c6:af: 62:3b:52:ba:57:cd:58:5c:59:52:16:04:2b:9f:18:f2:40:be: 0e:05:c9:16:d6:4d:44:e9:71:c4:4f:69:31:ab:20:da:6b:a2: 50:df:62:10:c8:30:90:42:02:39:b6:14:00:ea:7a:df:ac:15: 01:b7:3c:b3:0b:0d:81:a2:cc:50:4f:33:29:1a:02:45:26:b0: 13:09:db:e1:b4:ba:f5:97:f6:38:93:63:e7:ed:c0:9b:e7:1c: e5:82:e3:39:97:b5:59:39:ad:bc:cb:6f:eb:38:09:4d:77:30: 85:69:d6:30:6a:dc:89:64:2c:97:ba:ad:ba:bc:06:c1:ed:fe: 9b:b0:d4:3c:39:a8:e4:b2:48:62:39:13:65:72:2f:9e:30:8b: 6d:4b:38:3e:b1:15:db:70:2c:e3:bb:b5:3b:23:ea:14:a7:ea: 98:03:f6:85:9d:f6:5b:f5:eb:3b:18:1e:f3:e9:f9:97:c3:a7: 82:5b:8d:fd:2c:88:e0:2f:83:0b:8f:7b:31:60:4b:4e:52:07: 69:a7:2a:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjUwOTA4MTYyODQ5WhcNMjUwOTE1MTYyODQ5WjAYMRYwFAYD VQQDEw02OGJmMDQ0Mi1mODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZKPvsFqRLVr4yopmLBW547FQmz1DMJiI+lxDNZm/5s/ZdAkB9zUnkJSlL5x PQ4ZJUBgFIe6ZtUfUgORYKzLg/zBWI+iDGvioTcWrX9B3DAh2rV04NDi1g96T+g3 FINVcQpknXTSGLDQFgupP0bD274HQz21jWJ4eyMhsi8l2apJ/Pn+R4kr59nTMrxV kROXu1Ryy7CUga7qjnWQ4yMfLENhGT8LgLMzIR4/TcTMhOg4pvnN1ScWCqI3HR7s p+L08381pXG1G2q3DX0k60j7KdzEfJyvR2fKKo1sEAjTpgj2wF/ACWmgjObHkLoy 3r6WHjyajatiaVJG3NT1Z99D8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoslIdO HKQSWsy9merc6XbN+RIiMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVV1Nn8pn9G6h+7TXxbWeB9RetocTOgpAL4Nrohba9Tm3r3OY6yl9n chYYMPH+61pbeLaexq9iO1K6V81YXFlSFgQrnxjyQL4OBckW1k1E6XHET2kxqyDa a6JQ32IQyDCQQgI5thQA6nrfrBUBtzyzCw2BosxQTzMpGgJFJrATCdvhtLr1l/Y4 k2Pn7cCb5xzlguM5l7VZOa28y2/rOAlNdzCFadYwatyJZCyXuq26vAbB7f6bsNQ8 OajkskhiORNlci+eMIttSzg+sRXbcCzju7U7I+oUp+qYA/aFnfZb9es7GB7z6fmX w6eCW439LIjgL4MLj3sxYEtOUgdppyrJ -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:50 2025 by rpki-client