$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: /nMgEcpSpCsq9rsRhCNR7Uvsr4L2dDrqvKCA6bSH+JQ= Subject key identifier: 71:27:AA:28:F5:DD:6B:2B:0E:E8:1B:3A:29:45:51:82:80:34:92:DE Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0AD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0AB3 Signing time: Tue 04 Nov 2025 19:37:30 +0000 Manifest this update: Tue 04 Nov 2025 19:37:29 +0000 Manifest next update: Tue 11 Nov 2025 19:37:29 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: F3u3hjdJ2mqzTYnAnmGxe0J9oEobTcZhJBoyWjofqPc=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: UQI8Fd4IsbMRQfXyTMFvSmN0fjZzMOEN8kbfmrroqXA=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: SvGpd5pCGO9/pwIUeRowgxIT0zcF1gs1tLMG2Scm/1Q=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: O6xTukSXkRkmptzUfSfbkc6euxNs5PIvwDcK/m8EIkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2771 (0xad3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Nov 4 19:37:29 2025 GMT Not After : Nov 11 19:37:29 2025 GMT Subject: CN=690a55fa-66e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:ac:4e:64:1d:a1:33:61:57:0d:47:1d:b7: 6a:41:5b:5f:6f:7a:2e:f8:c8:1c:76:86:94:3c:96: 4d:57:40:8f:4c:b1:dc:4c:e1:d5:80:fb:d2:bc:e3: b4:31:8b:3c:74:98:e9:27:18:5c:dd:fa:e3:42:3e: 1c:28:de:28:9c:3a:d5:62:a7:97:9b:cb:2f:8b:0a: 21:d4:33:73:36:62:ff:e4:86:27:8d:d2:10:04:c2: 7d:94:db:60:6d:da:64:da:26:18:2e:cd:fd:9d:3a: c8:21:79:ae:1e:2f:8e:c4:6d:62:50:cb:ef:f3:d8: dc:53:81:ef:c1:5f:87:82:8e:85:f1:eb:e4:d0:bc: 72:10:c4:c8:1d:b0:e0:89:86:8a:40:6e:c3:11:b1: 73:bc:55:a2:13:8b:eb:ec:3c:1d:89:98:4c:d4:f3: aa:10:60:a7:69:c5:76:c7:ba:c9:b4:91:32:8e:f6: cd:78:3e:e4:a3:6c:46:b1:f7:55:97:d7:65:59:4f: d3:ce:fb:04:1a:d1:22:dd:45:b7:69:ff:61:db:c8: 7f:0e:ec:63:74:72:00:9a:de:c5:5f:53:4d:ac:5f: 30:df:1c:91:66:d2:e0:74:8b:ba:3f:a5:fd:03:15: aa:6e:24:d2:29:38:ea:06:25:5d:86:93:12:09:c6: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:AA:28:F5:DD:6B:2B:0E:E8:1B:3A:29:45:51:82:80:34:92:DE X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ed:9a:10:83:24:14:34:e6:c4:48:21:ec:b3:cf:f8:63:ea: bb:e8:49:36:a5:a0:ee:bb:3c:01:a8:f9:c8:26:59:8f:a4:62: 37:2e:87:bd:01:84:6e:41:4d:ae:63:62:00:fa:a4:95:b5:90: 6f:68:fa:4b:0e:18:fb:22:c3:8f:9e:70:58:7a:0b:4d:9b:85: be:0c:18:b1:a0:e4:2d:63:b0:17:d5:b5:60:59:ea:0d:d0:41: f0:38:6e:8f:ae:d8:92:95:5e:e6:84:17:09:8f:5c:36:94:6a: fc:26:cb:9d:7b:4d:7a:23:be:71:71:9d:dd:1e:e9:34:97:34: 3f:4f:e0:e5:75:6e:8d:33:6c:15:f1:6e:60:1f:a2:eb:a9:76: f5:c1:4f:b4:f5:57:04:fe:a5:e5:4f:b7:2f:00:f5:7b:58:42: b9:d4:d4:d1:73:02:ed:a2:9f:d1:cf:b6:95:e5:f2:88:f1:10: ab:bf:d0:d7:cf:71:97:cb:34:b6:22:bb:83:e2:ae:0e:5b:e4: 9f:52:98:08:3d:08:bd:71:91:bd:b5:80:bd:6e:cf:d2:0a:04: 49:11:b7:b0:54:60:a0:2b:0a:58:73:10:f7:36:33:17:4d:8c: 2e:9f:c4:2e:55:5e:87:52:fc:a9:d1:26:e0:8b:d3:e7:1f:a6: a1:65:23:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUxMTA0MTkzNzI5WhcNMjUxMTExMTkzNzI5WjAYMRYwFAYD VQQDEw02OTBhNTVmYS02NmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgysTmQdoTNhVw1HHbdqQVtfb3ou+MgcdoaUPJZNV0CPTLHcTOHVgPvSvOO0 MYs8dJjpJxhc3frjQj4cKN4onDrVYqeXm8sviwoh1DNzNmL/5IYnjdIQBMJ9lNtg bdpk2iYYLs39nTrIIXmuHi+OxG1iUMvv89jcU4HvwV+Hgo6F8evk0LxyEMTIHbDg iYaKQG7DEbFzvFWiE4vr7DwdiZhM1POqEGCnacV2x7rJtJEyjvbNeD7ko2xGsfdV l9dlWU/TzvsEGtEi3UW3af9h28h/DuxjdHIAmt7FX1NNrF8w3xyRZtLgdIu6P6X9 AxWqbiTSKTjqBiVdhpMSCcZfwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEnqij1 3WsrDugbOilFUYKANJLeMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk7ZoQgyQUNObESCHss8/4Y+q76Ek2paDuuzwBqPnIJlmPpGI3Loe9 AYRuQU2uY2IA+qSVtZBvaPpLDhj7IsOPnnBYegtNm4W+DBixoOQtY7AX1bVgWeoN 0EHwOG6PrtiSlV7mhBcJj1w2lGr8Jsude016I75xcZ3dHuk0lzQ/T+DldW6NM2wV 8W5gH6LrqXb1wU+09VcE/qXlT7cvAPV7WEK51NTRcwLtop/Rz7aV5fKI8RCrv9DX z3GXyzS2IruD4q4OW+SfUpgIPQi9cZG9tYC9bs/SCgRJEbewVGCgKwpYcxD3NjMX TYwun8QuVV6HUvyp0Sbgi9PnH6ahZSMg -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:02 2025 by rpki-client