$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: es1B5yxj0vJdLzutFhJycm/JnS7WJ1uzdVsbm0EfEl0= Subject key identifier: 4D:D5:53:73:79:8D:8E:FC:28:F7:38:24:06:11:9A:BB:14:32:81:DE Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0C7D Signing time: Sun 02 Nov 2025 18:25:37 +0000 Manifest this update: Sun 02 Nov 2025 18:25:37 +0000 Manifest next update: Sun 09 Nov 2025 18:25:37 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: f1cFWjzrkrmXwRBUcc8dd7i0aVuX0gyt/B+2/RElTIA=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: jTKb6UqoxVKwoNueFvf3BZWhxggm3hq3OfDJsuiV3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Nov 2 18:25:37 2025 GMT Not After : Nov 9 18:25:37 2025 GMT Subject: CN=6907a221-1b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:87:c3:da:bc:1c:9f:f2:29:99:c9:79:a3: 5f:f6:0d:04:a8:64:e9:74:5f:53:e7:47:8d:29:df: b4:1e:91:ab:1b:61:de:d2:db:8a:0a:6e:27:2a:b8: 24:38:ab:b5:e4:e5:5d:69:24:59:bd:7d:d4:3d:58: a7:7f:9b:1f:3b:af:a9:f8:e6:cb:5e:06:7a:be:35: 52:7e:c4:ee:a1:8a:2e:99:ea:26:e5:75:19:7f:25: 11:6e:e0:eb:60:b5:f5:ea:57:96:d1:2a:85:0d:93: 0c:05:4f:96:69:ec:6b:70:04:db:a1:cb:0b:ed:3d: 64:4d:08:57:62:b5:93:73:36:34:3c:91:2c:ce:b5: 4f:ba:f2:a0:50:af:13:95:45:d4:5a:33:82:8d:3e: bd:ec:93:ae:f3:eb:4e:da:34:5e:96:c5:2a:85:4d: d2:07:d1:87:85:92:af:f2:5b:be:98:44:74:98:cd: 0e:c9:e5:14:34:2d:41:f7:32:f0:1b:4f:65:97:bc: 29:39:1d:44:46:39:fa:98:c5:84:a9:8c:aa:f5:d5: f8:36:fe:19:c7:70:6b:24:11:8b:be:84:f4:d9:f9: 3d:55:06:73:1e:00:cd:80:8a:95:76:21:fa:c8:81: 5e:d7:59:94:ca:52:b1:b9:28:e6:14:cc:c8:88:90: 71:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D5:53:73:79:8D:8E:FC:28:F7:38:24:06:11:9A:BB:14:32:81:DE X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8c:e9:6c:47:54:5e:a9:ae:9f:ef:ed:34:97:2c:53:77:c0: 3e:6e:88:59:7f:a6:a8:aa:69:16:3e:d0:6d:51:fe:96:8e:50: 61:e5:b7:82:ad:82:f4:22:1a:00:6b:a2:a6:f9:98:47:74:45: 33:32:57:ac:63:8b:11:3c:a5:4d:d7:6c:b9:2a:36:50:2d:36: 5a:a0:01:af:3b:9d:f8:35:fe:bc:47:78:c5:ea:ea:fe:83:0c: c7:c7:ad:70:d5:41:ca:41:6d:dc:69:42:c0:2d:08:be:36:43: c1:37:05:5c:47:ba:64:56:19:85:c6:d8:3d:17:11:8f:fe:ad: 11:16:4b:e1:9f:8b:e1:45:20:6c:94:79:a5:b3:f9:5a:f7:99: 4d:69:92:b7:96:2e:e1:51:f4:f7:91:56:46:9e:95:b3:49:36: 38:8e:4e:f6:e4:ef:b6:26:94:ef:7b:7b:84:61:78:cf:4d:07: 82:02:e3:e3:a0:3e:1f:76:90:5e:45:f7:fb:95:62:09:4f:ef: df:1e:cc:06:d7:8f:4b:51:e7:31:a6:fb:b9:f9:a6:25:39:54: eb:61:af:47:95:a6:68:7b:64:2f:11:13:e7:21:2b:b6:3d:c7: 74:b8:ab:26:20:20:1b:8e:5a:4a:6f:4f:b2:d1:73:60:3a:a2: 2e:4b:b4:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjUxMTAyMTgyNTM3WhcNMjUxMTA5MTgyNTM3WjAYMRYwFAYD VQQDEw02OTA3YTIyMS0xYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGKHw9q8HJ/yKZnJeaNf9g0EqGTpdF9T50eNKd+0HpGrG2He0tuKCm4nKrgk OKu15OVdaSRZvX3UPVinf5sfO6+p+ObLXgZ6vjVSfsTuoYoumeom5XUZfyURbuDr YLX16leW0SqFDZMMBU+WaexrcATbocsL7T1kTQhXYrWTczY0PJEszrVPuvKgUK8T lUXUWjOCjT697JOu8+tO2jRelsUqhU3SB9GHhZKv8lu+mER0mM0OyeUUNC1B9zLw G09ll7wpOR1ERjn6mMWEqYyq9dX4Nv4Zx3BrJBGLvoT02fk9VQZzHgDNgIqVdiH6 yIFe11mUylKxuSjmFMzIiJBxwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3VU3N5 jY78KPc4JAYRmrsUMoHeMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkjOlsR1Reqa6f7+00lyxTd8A+bohZf6aoqmkWPtBtUf6WjlBh5beC rYL0IhoAa6Km+ZhHdEUzMlesY4sRPKVN12y5KjZQLTZaoAGvO534Nf68R3jF6ur+ gwzHx61w1UHKQW3caULALQi+NkPBNwVcR7pkVhmFxtg9FxGP/q0RFkvhn4vhRSBs lHmls/la95lNaZK3li7hUfT3kVZGnpWzSTY4jk725O+2JpTve3uEYXjPTQeCAuPj oD4fdpBeRff7lWIJT+/fHswG149LUecxpvu5+aYlOVTrYa9HlaZoe2QvERPnISu2 Pcd0uKsmICAbjlpKb0+y0XNgOqIuS7RJ -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:46 2025 by rpki-client