$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: mPIgA1hmU+OksRccQO6t2Xy5MtS+yaCinbojPGVmlcE= Subject key identifier: A9:16:01:98:D7:FA:08:10:1B:5F:BB:1C:8A:9F:68:67:99:1F:99:43 Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: 90 Signing time: Fri 05 Sep 2025 07:00:09 +0000 Manifest this update: Fri 05 Sep 2025 07:00:09 +0000 Manifest next update: Fri 12 Sep 2025 07:00:09 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: VOKVTZAamQNbiRKvmhi0bEnNGPLrJZwW4ZnyHhToowE=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Sep 5 07:00:09 2025 GMT Not After : Sep 12 07:00:09 2025 GMT Subject: CN=68ba8a79-908f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:f2:23:9f:bf:a7:0a:b7:a9:8d:2f:33:9c: 76:fc:52:1b:89:36:33:56:63:4e:81:11:13:6c:48: e2:d3:7a:99:10:6f:2a:8f:42:66:6c:81:08:c2:3c: a1:a4:ab:12:9b:70:36:95:86:5c:33:c3:40:3c:58: 33:45:87:c3:4c:5e:1e:24:8a:1d:98:53:4d:b9:81: 63:28:af:c8:26:63:c8:cf:23:ea:1a:10:6d:7e:31: 0a:b4:ad:82:90:91:8f:c9:13:d8:a6:6c:e8:5e:20: 64:e5:51:98:4e:55:8d:ce:15:67:87:86:5c:33:36: bf:a2:de:9a:30:92:ba:dc:a3:33:f8:30:ce:50:88: ee:ac:91:f3:5f:bd:fa:59:a8:8c:5c:a2:3c:bb:5f: d7:89:15:fc:05:8b:d3:9e:e0:e3:87:e1:c5:9f:9d: 94:1a:76:0c:6b:b3:08:2e:8b:40:ef:a9:65:ad:6c: 0f:f4:6b:51:11:5f:03:c8:4f:18:05:40:e0:bf:ae: 97:46:3e:cb:7b:e4:dc:a5:4a:8e:82:2d:9f:4a:a9: f4:b0:40:4b:72:f0:86:d4:a0:11:15:f5:a9:2a:15: 0c:b4:24:6e:80:a8:98:e2:ae:5d:77:9c:1e:44:20: ea:8b:46:c3:f0:59:e0:68:73:5a:31:06:83:eb:e9: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:16:01:98:D7:FA:08:10:1B:5F:BB:1C:8A:9F:68:67:99:1F:99:43 X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:1c:a1:f2:97:2e:d7:a6:79:f1:11:59:cb:70:55:f8:3a:46: b4:8f:1c:9e:c3:74:2c:1c:c5:b6:37:5f:d3:bf:92:32:ed:1f: 6f:76:f0:c0:10:67:8f:3f:4a:41:35:9f:c4:3c:5b:13:cd:be: 65:65:74:fa:0e:47:ba:c9:ee:41:e2:40:e4:6a:df:6b:ed:71: 56:8e:2b:36:b1:a5:9f:29:26:19:6e:f0:fd:c0:2c:88:d1:7d: ca:b7:0d:a8:60:93:e0:21:9c:88:86:67:8d:6b:84:db:86:15: 07:3f:b4:ff:60:96:6b:63:5b:75:39:57:03:31:78:f1:6f:d6: f3:b8:e6:0a:cd:0e:b0:3f:11:e8:30:22:bf:02:c3:a6:92:85: 1f:44:87:b1:0d:ac:eb:c0:fd:e7:09:82:46:50:4b:c9:59:5c: c5:d8:b8:ef:44:6f:26:76:ec:f4:b9:b0:ca:ec:be:fe:af:a0: ec:83:2f:e5:69:90:63:b3:7d:a9:01:43:e4:e2:31:ff:b2:34: c7:83:0f:65:2d:de:36:7a:25:97:82:14:b5:db:bf:cb:78:85: 9c:d4:3b:85:a9:86:f3:e7:e9:8e:61:47:11:91:8c:72:94:c2: ca:3a:29:56:01:69:ca:da:4d:ff:35:3b:cf:18:da:61:59:37: 77:b4:46:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky NkY5MkUzNzQwHhcNMjUwOTA1MDcwMDA5WhcNMjUwOTEyMDcwMDA5WjAYMRYwFAYD VQQDEw02OGJhOGE3OS05MDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE/yI5+/pwq3qY0vM5x2/FIbiTYzVmNOgRETbEji03qZEG8qj0JmbIEIwjyh pKsSm3A2lYZcM8NAPFgzRYfDTF4eJIodmFNNuYFjKK/IJmPIzyPqGhBtfjEKtK2C kJGPyRPYpmzoXiBk5VGYTlWNzhVnh4ZcMza/ot6aMJK63KMz+DDOUIjurJHzX736 WaiMXKI8u1/XiRX8BYvTnuDjh+HFn52UGnYMa7MILotA76llrWwP9GtREV8DyE8Y BUDgv66XRj7Le+TcpUqOgi2fSqn0sEBLcvCG1KARFfWpKhUMtCRugKiY4q5dd5we RCDqi0bD8FngaHNaMQaD6+mbUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkWAZjX +ggQG1+7HIqfaGeZH5lDMB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo aHE2dlVEUzZDMGttLVM0M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADHKHyly7XpnnxEVnLcFX4Oka0jxyew3QsHMW2N1/Tv5Iy7R9vdvDA EGePP0pBNZ/EPFsTzb5lZXT6Dke6ye5B4kDkat9r7XFWjis2saWfKSYZbvD9wCyI 0X3Ktw2oYJPgIZyIhmeNa4TbhhUHP7T/YJZrY1t1OVcDMXjxb9bzuOYKzQ6wPxHo MCK/AsOmkoUfRIexDazrwP3nCYJGUEvJWVzF2LjvRG8mduz0ubDK7L7+r6Dsgy/l aZBjs32pAUPk4jH/sjTHgw9lLd42eiWXghS127/LeIWc1DuFqYbz5+mOYUcRkYxy lMLKOilWAWnK2k3/NTvPGNphWTd3tEYS -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:08 2025 by rpki-client