$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: w+2iSqER5xtOI0gvrKFTuh2rW8Oy1JnfxpNaIz0H1iA= Subject key identifier: 70:C5:5A:A9:5E:61:7A:43:97:78:51:4C:92:AB:2D:42:B1:1E:1F:0D Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0C59 Signing time: Sun 24 Aug 2025 18:27:39 +0000 Manifest this update: Sun 24 Aug 2025 18:27:39 +0000 Manifest next update: Sun 31 Aug 2025 18:27:39 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: WgVE6QNkeCl9mBFcQyKiB0DTy1SzOiKkayVKw9kYpKY=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: jTKb6UqoxVKwoNueFvf3BZWhxggm3hq3OfDJsuiV3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Aug 24 18:27:39 2025 GMT Not After : Aug 31 18:27:39 2025 GMT Subject: CN=68ab599b-571b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:ab:18:60:49:5d:cb:e7:1f:2d:77:de:c8: 50:a4:ae:23:95:2c:da:32:40:a2:80:6e:3a:39:bb: 35:4f:f9:e0:ce:f6:ff:dc:62:64:f1:3a:cf:2c:a1: d1:bf:ca:99:05:50:e0:0b:75:fc:22:54:26:dd:96: 93:b3:91:d1:1d:52:ce:88:3c:07:bd:75:cc:f5:bf: eb:8e:b2:91:36:9c:39:d7:04:b1:52:75:f1:35:c1: ac:76:10:c4:c1:7a:c0:1e:35:b1:bd:36:87:dc:bf: 37:be:9f:ad:be:fa:d0:fa:55:6c:b6:1b:a0:c6:eb: 2f:0f:5e:4f:20:02:fb:38:66:5e:44:82:33:b0:64: a5:17:36:aa:2b:1a:b0:4b:41:84:cb:14:81:b5:41: 40:95:1f:21:6a:93:81:ff:f8:ae:01:97:94:12:10: 05:af:42:13:60:92:22:aa:e1:54:20:b9:2d:35:27: b7:e0:7b:29:0b:be:2a:0f:bb:9e:38:1f:1e:f7:2e: ec:1f:17:ae:68:8d:8b:07:8b:be:f2:de:0f:f4:41: 38:7c:e3:b7:04:2b:b2:c0:bc:fe:71:88:c9:8e:54: f8:bb:9a:b5:ff:ef:d8:14:a8:22:40:2e:ec:0a:3f: ca:8f:fa:44:dd:98:6c:aa:4d:33:96:07:86:1b:31: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:5A:A9:5E:61:7A:43:97:78:51:4C:92:AB:2D:42:B1:1E:1F:0D X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a3:e9:93:a1:6f:f8:39:00:f5:6f:d4:a5:ab:b0:80:f6:2c: 8b:9b:42:32:ec:c6:be:91:f1:9f:02:21:0e:e2:1f:6f:e4:fe: 20:1c:68:2c:6c:d1:b5:8d:26:86:8e:c2:83:ea:d9:9e:30:2e: 06:61:85:4b:be:49:09:65:7c:b9:6a:e1:2b:78:27:fb:42:dc: 89:d3:cc:56:1b:3d:82:5e:b7:b2:3e:63:67:87:4a:da:5f:dc: a1:64:0a:1f:c7:fd:69:b4:dd:be:a9:48:14:51:2c:ca:47:1a: de:78:a1:26:9f:fc:91:98:64:a6:7f:d5:ee:3f:02:f0:43:84: 40:c0:a3:6d:a3:54:38:1d:83:c3:4e:9d:ef:0b:7e:df:03:ca: 38:74:2b:a2:b5:83:62:97:0a:4b:1d:f0:ba:18:65:99:a0:d0: b2:4c:83:ae:ed:f3:af:d5:90:39:9c:e6:45:58:81:9c:7b:5f: 0e:b3:eb:c0:ee:2c:45:01:95:78:f7:e1:81:5c:8f:d9:4d:34: 3a:b2:9d:eb:ef:f6:00:07:5b:20:fa:3d:dc:7f:71:71:f0:c3: 4d:f0:76:41:10:85:bd:f6:40:7c:d4:b8:f7:45:06:35:c2:75: 1b:1f:a5:00:45:1b:44:81:de:b7:cf:10:dd:f7:43:87:7f:5f: 1a:3d:af:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjUwODI0MTgyNzM5WhcNMjUwODMxMTgyNzM5WjAYMRYwFAYD VQQDEw02OGFiNTk5Yi01NzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VCrGGBJXcvnHy133shQpK4jlSzaMkCigG46Obs1T/ngzvb/3GJk8TrPLKHR v8qZBVDgC3X8IlQm3ZaTs5HRHVLOiDwHvXXM9b/rjrKRNpw51wSxUnXxNcGsdhDE wXrAHjWxvTaH3L83vp+tvvrQ+lVsthugxusvD15PIAL7OGZeRIIzsGSlFzaqKxqw S0GEyxSBtUFAlR8hapOB//iuAZeUEhAFr0ITYJIiquFUILktNSe34HspC74qD7ue OB8e9y7sHxeuaI2LB4u+8t4P9EE4fOO3BCuywLz+cYjJjlT4u5q1/+/YFKgiQC7s Cj/Kj/pE3Zhsqk0zlgeGGzECKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDFWqle YXpDl3hRTJKrLUKxHh8NMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxo+mToW/4OQD1b9Slq7CA9iyLm0Iy7Ma+kfGfAiEO4h9v5P4gHGgs bNG1jSaGjsKD6tmeMC4GYYVLvkkJZXy5auEreCf7QtyJ08xWGz2CXreyPmNnh0ra X9yhZAofx/1ptN2+qUgUUSzKRxreeKEmn/yRmGSmf9XuPwLwQ4RAwKNto1Q4HYPD Tp3vC37fA8o4dCuitYNilwpLHfC6GGWZoNCyTIOu7fOv1ZA5nOZFWIGce18Os+vA 7ixFAZV49+GBXI/ZTTQ6sp3r7/YAB1sg+j3cf3Fx8MNN8HZBEIW99kB81Lj3RQY1 wnUbH6UARRtEgd63zxDd90OHf18aPa/v -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:27 2025 by rpki-client