$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: TEpyBHS/WBelfzsRQjRyMW40xCwBdO6HHxa9F7BvYSQ= Subject key identifier: C8:CC:67:2F:68:F0:1E:35:11:D2:FD:77:7C:51:05:35:4E:53:FD:5F Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 0160 Signing time: Sun 07 Sep 2025 04:37:45 +0000 Manifest this update: Sun 07 Sep 2025 04:37:45 +0000 Manifest next update: Sun 14 Sep 2025 04:37:45 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: QQg3GjBw2Hz1WqKd6Pf7xlG4v5rnuXIpZ//73U2s3Uw=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Sep 7 04:37:45 2025 GMT Not After : Sep 14 04:37:45 2025 GMT Subject: CN=68bd0c19-d3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:bb:4c:56:39:c4:d2:52:af:2c:6e:ab:c6: ba:3c:58:10:ce:d7:36:d7:b8:fc:e1:27:2a:72:51: f2:1b:dd:da:a3:21:58:4b:92:a4:2b:7a:22:a8:24: 1b:8c:28:19:ff:e6:94:c7:14:bb:50:38:eb:d6:04: d8:72:1e:3b:00:36:84:78:09:16:2a:43:7d:3f:08: 5b:98:d9:33:6b:80:ba:ab:2b:72:fd:e8:f2:fe:a8: 0b:3c:56:e6:a1:61:fc:f3:f6:ad:d2:8b:a9:14:ad: 13:64:fb:46:a8:dd:55:c2:87:12:55:23:5e:ee:bf: c5:25:71:58:66:f9:18:5d:f8:6a:53:5e:fd:29:8c: 29:91:82:a8:bc:61:62:cd:c2:04:98:5c:4e:ee:0c: 69:81:ab:80:b6:82:ad:0f:f4:b2:9d:8b:21:26:55: 8f:17:8e:f6:c6:d7:42:fc:95:9d:5b:8a:22:e4:64: 28:7f:39:82:59:6f:b3:09:c1:b0:b0:60:20:c4:fb: f3:3a:c1:43:f3:45:d7:91:91:fb:7a:42:ea:67:70: 66:4d:b6:b8:4c:27:8f:b1:04:71:2c:6e:81:67:44: 9e:c2:16:71:28:25:9f:92:e9:47:ba:26:89:eb:dd: 0f:b2:f3:70:e0:fb:26:37:5d:fe:db:55:84:59:7d: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CC:67:2F:68:F0:1E:35:11:D2:FD:77:7C:51:05:35:4E:53:FD:5F X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e8:19:c6:51:8b:8f:37:61:75:c4:d5:8c:3a:c7:d8:a6:70: f5:bc:a2:05:0a:22:8f:38:d5:91:6d:4b:5a:7a:04:3c:65:9d: 17:bf:07:f0:de:c9:b8:69:6f:4f:bf:69:c0:db:b9:19:c5:2b: 9d:65:21:18:28:10:81:c1:61:f5:e7:27:f4:e4:60:79:65:68: 7a:6b:40:0c:8a:45:f9:5b:d4:a1:a1:24:04:c4:c0:5c:a7:ad: c8:09:f8:8f:68:24:0d:f4:f2:d1:91:9f:55:2c:ed:b4:cf:88: a3:a6:7e:87:38:d0:d9:a2:d5:07:91:39:41:0d:22:4d:8d:85: 1a:92:e9:56:33:0e:1d:0a:54:0b:6c:3f:e0:7e:e8:e9:7e:21: 98:22:86:f6:f3:b7:76:d8:49:be:2d:1e:7d:96:d4:7c:06:58: 37:63:d4:c8:56:34:f0:b2:4d:df:4c:47:c2:6f:d0:b6:23:25: 0a:8b:ba:dc:7f:61:9e:f5:d7:c0:b4:e2:44:59:e5:ca:5b:e1: d7:60:ff:b8:3f:71:42:1e:ff:63:5e:c3:35:7d:46:95:04:6b: 86:74:22:c4:5b:60:09:06:c3:74:de:51:63:d1:4a:1c:f9:8d: 53:d6:94:23:a5:31:e6:72:b7:a8:d2:77:15:93:9b:b9:0a:63: f8:17:50:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUwOTA3MDQzNzQ1WhcNMjUwOTE0MDQzNzQ1WjAYMRYwFAYD VQQDEw02OGJkMGMxOS1kM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXu7TFY5xNJSryxuq8a6PFgQztc217j84ScqclHyG93aoyFYS5KkK3oiqCQb jCgZ/+aUxxS7UDjr1gTYch47ADaEeAkWKkN9PwhbmNkza4C6qyty/ejy/qgLPFbm oWH88/at0oupFK0TZPtGqN1VwocSVSNe7r/FJXFYZvkYXfhqU179KYwpkYKovGFi zcIEmFxO7gxpgauAtoKtD/SynYshJlWPF472xtdC/JWdW4oi5GQofzmCWW+zCcGw sGAgxPvzOsFD80XXkZH7ekLqZ3BmTba4TCePsQRxLG6BZ0SewhZxKCWfkulHuiaJ 690PsvNw4PsmN13+21WEWX0yOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjMZy9o 8B41EdL9d3xRBTVOU/1fMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB26BnGUYuPN2F1xNWMOsfYpnD1vKIFCiKPONWRbUtaegQ8ZZ0Xvwfw 3sm4aW9Pv2nA27kZxSudZSEYKBCBwWH15yf05GB5ZWh6a0AMikX5W9ShoSQExMBc p63ICfiPaCQN9PLRkZ9VLO20z4ijpn6HONDZotUHkTlBDSJNjYUakulWMw4dClQL bD/gfujpfiGYIob287d22Em+LR59ltR8Blg3Y9TIVjTwsk3fTEfCb9C2IyUKi7rc f2Ge9dfAtOJEWeXKW+HXYP+4P3FCHv9jXsM1fUaVBGuGdCLEW2AJBsN03lFj0Uoc +Y1T1pQjpTHmcreo0ncVk5u5CmP4F1D2 -----END CERTIFICATE-----Generated at Mon Sep 8 17:43:11 2025 by rpki-client