$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: PEGFlTcG4k/osbvJwLIFZM25mdBuByvTzE5rHNxWwhM= Subject key identifier: 48:B0:CD:6F:5C:15:69:51:B5:36:B9:3C:13:B4:C0:78:64:19:02:25 Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: AF Signing time: Fri 07 Nov 2025 01:35:46 +0000 Manifest this update: Fri 07 Nov 2025 01:35:45 +0000 Manifest next update: Fri 14 Nov 2025 01:35:45 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: vr8+SlhCIFBRDeXIq519ASo+dbkQvbqhWclXO6Sx5+k=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 01:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Nov 7 01:35:45 2025 GMT Not After : Nov 14 01:35:45 2025 GMT Subject: CN=690d4cf1-efc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:5b:4d:ac:e2:ea:7e:fe:4f:e0:2a:4d:04: c1:6d:62:5d:92:40:97:91:e6:2b:82:c5:f1:15:24: 7a:2e:3b:7f:c2:b1:26:25:cf:d2:87:3e:ea:84:43: 2d:ba:3e:0d:8d:f3:8e:ae:f3:23:57:f3:39:3b:46: a8:c8:b1:5f:fa:4b:fd:6a:bb:6c:fb:0c:91:bd:9f: 1f:32:ff:8e:35:7e:c8:46:94:f3:4a:53:e5:3d:fa: e2:96:92:00:38:ff:e4:45:02:bb:b6:15:dd:e6:b0: 50:2c:c3:26:4c:4f:0c:d5:15:88:50:b8:fc:9b:89: 46:0d:1d:c4:df:cb:6f:db:83:f8:0e:07:fe:30:cf: 64:e0:ee:9a:25:00:e9:6f:ed:ce:03:05:0d:6a:39: a4:b9:29:4b:5e:8a:92:64:fe:eb:52:c1:6e:9f:f5: d6:97:1e:ee:f1:99:ae:04:f2:5e:ec:f7:f0:ec:50: 0e:5b:bb:cc:a3:5c:c4:d7:43:d3:45:ee:14:66:55: 51:d8:c4:a9:bb:2a:44:86:20:13:b2:5a:d9:dd:a0: 26:cc:a7:de:43:8c:31:b8:3a:cd:27:b9:a4:15:d8: 9a:d1:57:66:5d:63:1d:4a:fd:53:41:54:f5:24:f0: 91:81:ea:49:2d:3f:0a:24:a2:58:06:2d:4e:91:4e: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B0:CD:6F:5C:15:69:51:B5:36:B9:3C:13:B4:C0:78:64:19:02:25 X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:6f:80:52:f0:12:1e:cc:2f:4c:8d:9f:0f:83:90:49:17:c7: 1c:c1:24:84:39:51:3e:a9:bb:58:c8:e0:b7:fd:c3:09:a3:c6: c2:c4:62:2e:68:00:f2:2e:5c:b7:c3:59:60:bb:94:5d:b2:90: af:91:0a:1a:42:24:b0:64:fd:a3:40:4a:66:26:e1:4d:36:1c: 73:c2:75:72:36:75:4c:13:31:83:57:83:56:0e:af:ee:49:88: 11:b1:f5:c8:1e:fa:a1:9e:42:d0:93:9f:9e:0a:5f:a9:34:66: fe:da:9d:fc:e6:0c:26:30:d6:77:3b:0f:84:e2:de:8b:17:b2: 49:5e:bb:23:23:14:79:4d:88:5e:9d:c9:f6:88:2b:cd:a4:e1: 0b:c5:ca:e1:e2:a8:32:5f:e0:2d:93:00:ea:a6:74:98:09:c2: 0e:df:c2:24:a2:b1:22:2a:b4:c9:fc:7e:2b:c0:cf:45:60:d4: 35:51:e7:ac:b2:42:de:5d:e8:47:7e:1e:86:44:b1:a0:77:2b: 8a:e4:7a:0f:82:f0:95:75:51:5f:19:a8:69:b4:f9:ca:7f:6d: 13:03:60:4e:6f:65:a2:5e:ab:40:dd:bc:66:1a:55:e7:9d:f2: 5e:51:97:a6:68:be:eb:a7:1a:9d:fe:2f:3c:b1:d7:3c:71:c1: e2:8c:b7:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky NkY5MkUzNzQwHhcNMjUxMTA3MDEzNTQ1WhcNMjUxMTE0MDEzNTQ1WjAYMRYwFAYD VQQDEw02OTBkNGNmMS1lZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApg9bTazi6n7+T+AqTQTBbWJdkkCXkeYrgsXxFSR6Ljt/wrEmJc/Shz7qhEMt uj4NjfOOrvMjV/M5O0aoyLFf+kv9arts+wyRvZ8fMv+ONX7IRpTzSlPlPfrilpIA OP/kRQK7thXd5rBQLMMmTE8M1RWIULj8m4lGDR3E38tv24P4Dgf+MM9k4O6aJQDp b+3OAwUNajmkuSlLXoqSZP7rUsFun/XWlx7u8ZmuBPJe7Pfw7FAOW7vMo1zE10PT Re4UZlVR2MSpuypEhiATslrZ3aAmzKfeQ4wxuDrNJ7mkFdia0VdmXWMdSv1TQVT1 JPCRgepJLT8KJKJYBi1OkU5cgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiwzW9c FWlRtTa5PBO0wHhkGQIlMB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo aHE2dlVEUzZDMGttLVM0M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRb4BS8BIezC9MjZ8Pg5BJF8ccwSSEOVE+qbtYyOC3/cMJo8bCxGIu aADyLly3w1lgu5RdspCvkQoaQiSwZP2jQEpmJuFNNhxzwnVyNnVMEzGDV4NWDq/u SYgRsfXIHvqhnkLQk5+eCl+pNGb+2p385gwmMNZ3Ow+E4t6LF7JJXrsjIxR5TYhe ncn2iCvNpOELxcrh4qgyX+AtkwDqpnSYCcIO38IkorEiKrTJ/H4rwM9FYNQ1Uees skLeXehHfh6GRLGgdyuK5HoPgvCVdVFfGahptPnKf20TA2BOb2WiXqtA3bxmGlXn nfJeUZemaL7rpxqd/i88sdc8ccHijLfQ -----END CERTIFICATE-----Generated at Fri Nov 7 12:43:27 2025 by rpki-client