$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: oTDKvwnqTe9KPmEWbwi5QIaDaOYtZXjPoa8cwOEf7dE= Subject key identifier: 9E:C9:61:20:D6:A5:DE:62:76:4F:65:3F:52:A5:E1:A3:4C:43:5D:19 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0AAE Signing time: Sun 26 Oct 2025 20:03:31 +0000 Manifest this update: Sun 26 Oct 2025 20:03:30 +0000 Manifest next update: Sun 02 Nov 2025 20:03:30 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: B8Vf/CapOlGRA+Nwvtm0+emOUKqFRYxt1oyWo0SSKEk=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: UQI8Fd4IsbMRQfXyTMFvSmN0fjZzMOEN8kbfmrroqXA=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: SvGpd5pCGO9/pwIUeRowgxIT0zcF1gs1tLMG2Scm/1Q=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: O6xTukSXkRkmptzUfSfbkc6euxNs5PIvwDcK/m8EIkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 20:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Oct 26 20:03:30 2025 GMT Not After : Nov 2 20:03:30 2025 GMT Subject: CN=68fe7e93-dcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b7:cd:0e:0b:d9:f3:a9:39:de:bc:83:03:ba: 6f:33:7b:4f:9e:c7:76:3e:16:44:11:91:00:d3:45: 63:ed:20:67:3f:4a:fc:a2:dd:3d:ee:22:9e:34:9b: 57:f7:72:49:87:02:9b:f3:25:88:48:c9:9b:aa:ee: df:ba:6c:86:ea:c8:45:57:10:bf:bb:df:4c:a3:fc: 6a:5c:ef:05:14:0a:f5:e8:fa:f3:c9:83:7e:b0:2f: ef:69:c9:fa:70:31:0a:38:04:4d:0a:b5:22:fa:89: 1e:6d:43:49:93:31:6c:0a:12:fd:8f:b4:33:be:d6: 30:b9:3c:3f:8c:dc:3b:76:9c:88:bf:b3:01:4e:e6: c1:e0:a4:cc:4c:f4:a2:c5:1c:d3:06:0a:fe:8c:80: 91:38:90:12:f9:d6:fa:07:7d:7a:9b:45:00:a8:bf: 04:10:9c:06:14:dd:4f:88:80:6b:51:fd:2a:bd:d8: 14:34:ec:45:de:24:69:c7:21:78:fd:fd:6b:3b:71: c4:58:de:41:e9:b5:aa:fb:fc:13:b5:a9:6f:ab:16: 06:86:87:01:17:af:a9:58:0a:63:e3:f1:bc:fe:7e: 27:c5:e7:75:0e:1f:ae:29:06:9b:c6:af:c2:d4:ae: bd:74:14:2c:a1:2c:4e:f6:cd:e2:1c:93:1f:41:d0: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C9:61:20:D6:A5:DE:62:76:4F:65:3F:52:A5:E1:A3:4C:43:5D:19 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a9:b3:09:0f:83:6c:7f:79:a3:23:5a:64:1d:af:0a:9c:64: b4:00:6f:67:65:63:5a:7a:dc:e8:00:48:50:90:6d:b4:10:d4: 80:a3:ff:a6:70:4a:ae:62:5a:79:dd:8f:31:63:ef:39:b1:2f: 68:5f:eb:e8:c2:11:40:4f:ae:8f:0f:9b:d5:b8:88:0e:2d:af: bf:d8:dd:b8:c7:b9:c9:8f:40:fb:6c:79:89:26:98:e7:eb:b0: 49:e1:a4:d2:71:3b:84:89:ca:79:14:32:11:a4:44:e6:aa:f2: 72:34:c0:67:d0:d1:9d:fa:d3:5c:32:8e:db:99:df:0f:2c:32: 5a:9e:e8:86:3e:65:4b:e8:fa:19:7b:31:9a:9e:a3:75:2f:b0: 0d:a2:1c:d8:52:32:67:e0:3a:1b:39:95:7e:aa:d6:43:72:46: 97:8c:6e:01:18:52:b1:cd:92:b8:53:62:82:0d:5b:16:45:a3: 2f:a5:45:bd:4d:c5:c1:6d:b2:c0:6d:6c:64:5f:75:70:8a:ad: 99:42:1c:17:fb:55:f3:eb:87:90:1b:ae:9b:f2:4b:24:dc:52: 23:00:31:19:ee:8d:f5:4e:b6:ee:84:ff:74:60:56:0d:c1:6c: 14:a8:98:a2:19:fd:a1:32:37:41:7f:f1:ae:38:38:a9:2e:16: 44:a9:59:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUxMDI2MjAwMzMwWhcNMjUxMTAyMjAwMzMwWjAYMRYwFAYD VQQDEw02OGZlN2U5My1kY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rfNDgvZ86k53ryDA7pvM3tPnsd2PhZEEZEA00Vj7SBnP0r8ot097iKeNJtX 93JJhwKb8yWISMmbqu7fumyG6shFVxC/u99Mo/xqXO8FFAr16PrzyYN+sC/vacn6 cDEKOARNCrUi+okebUNJkzFsChL9j7QzvtYwuTw/jNw7dpyIv7MBTubB4KTMTPSi xRzTBgr+jICROJAS+db6B316m0UAqL8EEJwGFN1PiIBrUf0qvdgUNOxF3iRpxyF4 /f1rO3HEWN5B6bWq+/wTtalvqxYGhocBF6+pWApj4/G8/n4nxed1Dh+uKQabxq/C 1K69dBQsoSxO9s3iHJMfQdCVQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7JYSDW pd5idk9lP1Kl4aNMQ10ZMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdqbMJD4Nsf3mjI1pkHa8KnGS0AG9nZWNaetzoAEhQkG20ENSAo/+m cEquYlp53Y8xY+85sS9oX+vowhFAT66PD5vVuIgOLa+/2N24x7nJj0D7bHmJJpjn 67BJ4aTScTuEicp5FDIRpETmqvJyNMBn0NGd+tNcMo7bmd8PLDJanuiGPmVL6PoZ ezGanqN1L7ANohzYUjJn4DobOZV+qtZDckaXjG4BGFKxzZK4U2KCDVsWRaMvpUW9 TcXBbbLAbWxkX3Vwiq2ZQhwX+1Xz64eQG66b8ksk3FIjADEZ7o31TrbuhP90YFYN wWwUqJiiGf2hMjdBf/GuODipLhZEqVlT -----END CERTIFICATE-----Generated at Mon Oct 27 04:41:40 2025 by rpki-client