$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: sInmju1wlPbww0W4GkiyFMErGlAXi4vIUeyCAhKmXes= Subject key identifier: 93:7B:91:77:BE:B0:7A:86:A4:F2:5D:83:40:0D:64:64:9A:64:B9:88 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0AB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0A97 Signing time: Wed 10 Sep 2025 19:45:38 +0000 Manifest this update: Wed 10 Sep 2025 19:45:37 +0000 Manifest next update: Wed 17 Sep 2025 19:45:37 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: n1kuH7zrs7akKbneinNf0F0V26faft4mXBOQOcBeYj8=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: UQI8Fd4IsbMRQfXyTMFvSmN0fjZzMOEN8kbfmrroqXA=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: SvGpd5pCGO9/pwIUeRowgxIT0zcF1gs1tLMG2Scm/1Q=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: O6xTukSXkRkmptzUfSfbkc6euxNs5PIvwDcK/m8EIkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 19:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2743 (0xab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Sep 10 19:45:37 2025 GMT Not After : Sep 17 19:45:37 2025 GMT Subject: CN=68c1d562-823e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:f0:1a:a2:1b:39:47:30:b7:26:af:bb:a0: d1:34:f6:ce:8a:ab:08:34:d5:b1:5d:be:fd:1f:bf: d1:ef:01:21:03:45:d8:6c:80:d7:bc:72:78:61:04: 71:9c:b5:e3:24:d6:91:a9:5d:c4:52:45:98:cc:95: de:14:eb:15:99:31:a0:33:1a:9e:91:10:41:9e:57: 9c:f7:d5:b9:93:18:eb:93:b1:eb:9a:0b:d1:31:c1: e6:96:f8:8f:42:74:2b:a5:5a:23:9f:75:da:c7:e5: 7f:28:7a:e1:3c:04:f3:01:bc:dc:e9:79:37:45:18: 0d:21:3c:e4:52:f0:70:e5:17:89:aa:16:6a:85:0a: cb:33:9c:d6:15:05:2e:38:7d:34:a3:9c:30:96:3a: f5:a5:3b:e9:42:92:e4:7a:bd:a4:39:54:f0:d9:d5: 00:e7:1e:32:62:42:6a:26:fc:74:d0:6c:65:c5:a9: f2:6b:1d:3e:16:12:53:0d:34:ad:8b:a5:b1:e9:42: 7e:fd:66:94:6d:93:4d:13:38:91:36:0c:ce:03:a5: c2:84:05:00:78:73:9b:f5:13:cb:b6:30:48:89:27: aa:9f:cb:da:52:04:57:42:c2:17:6b:d9:c6:18:cf: ab:08:c4:22:62:cb:ef:77:f3:11:c9:05:72:7d:51: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7B:91:77:BE:B0:7A:86:A4:F2:5D:83:40:0D:64:64:9A:64:B9:88 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fa:7f:15:06:29:7c:b9:96:5f:6c:de:be:c9:1e:fd:9e:01: d4:78:04:ca:cd:17:5f:5c:40:26:a1:70:b9:28:40:11:44:3e: aa:29:42:9c:90:ea:87:f4:40:73:83:d1:22:33:31:89:2f:b3: ba:5b:ef:07:02:ec:97:c3:4a:f9:b4:34:ab:6e:ef:02:d2:80: a3:2b:ac:26:64:de:4e:e0:1d:76:cf:66:1b:5c:5b:de:97:b4: 05:25:dd:61:6a:f2:61:ef:ff:51:ff:5b:3c:da:af:30:1c:6c: e0:eb:23:9a:58:62:2d:58:60:3e:24:4d:bb:fe:5b:5f:00:ad: 17:a8:1b:0f:54:e0:e5:ad:a7:21:b2:1e:b9:d2:f6:b8:0e:41: 80:c1:cc:a3:cc:db:10:10:c3:01:6e:54:6a:c5:d6:82:bd:e0: 27:9b:46:e9:71:c2:c7:52:68:fe:4b:d2:ef:cf:c4:3f:3c:96: 4a:81:b7:7e:1c:ce:bd:df:18:e3:3d:8a:bd:7f:d0:46:7b:79: 7e:8f:97:37:98:43:af:49:11:15:d6:94:29:72:da:81:b1:d5: 7a:ec:c3:73:40:13:71:37:e5:52:0e:e7:bf:c9:f2:ed:73:b6: 34:39:ec:01:8c:36:93:42:f7:14:ed:1f:b8:08:1b:fc:91:89: 4f:54:d0:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUwOTEwMTk0NTM3WhcNMjUwOTE3MTk0NTM3WjAYMRYwFAYD VQQDEw02OGMxZDU2Mi04MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KjwGqIbOUcwtyavu6DRNPbOiqsINNWxXb79H7/R7wEhA0XYbIDXvHJ4YQRx nLXjJNaRqV3EUkWYzJXeFOsVmTGgMxqekRBBnlec99W5kxjrk7HrmgvRMcHmlviP QnQrpVojn3Xax+V/KHrhPATzAbzc6Xk3RRgNITzkUvBw5ReJqhZqhQrLM5zWFQUu OH00o5wwljr1pTvpQpLker2kOVTw2dUA5x4yYkJqJvx00Gxlxanyax0+FhJTDTSt i6Wx6UJ+/WaUbZNNEziRNgzOA6XChAUAeHOb9RPLtjBIiSeqn8vaUgRXQsIXa9nG GM+rCMQiYsvvd/MRyQVyfVF09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN7kXe+ sHqGpPJdg0ANZGSaZLmIMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa+n8VBil8uZZfbN6+yR79ngHUeATKzRdfXEAmoXC5KEARRD6qKUKc kOqH9EBzg9EiMzGJL7O6W+8HAuyXw0r5tDSrbu8C0oCjK6wmZN5O4B12z2YbXFve l7QFJd1havJh7/9R/1s82q8wHGzg6yOaWGItWGA+JE27/ltfAK0XqBsPVODlrach sh650va4DkGAwcyjzNsQEMMBblRqxdaCveAnm0bpccLHUmj+S9Lvz8Q/PJZKgbd+ HM693xjjPYq9f9BGe3l+j5c3mEOvSREV1pQpctqBsdV67MNzQBNxN+VSDue/yfLt c7Y0OewBjDaTQvcU7R+4CBv8kYlPVNCu -----END CERTIFICATE-----Generated at Thu Sep 11 00:08:48 2025 by rpki-client