$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: 8x+GkpaoG/MrqrQB0ji1I/f2ul1UNcCNeH1XUjySNUs= Subject key identifier: 7A:09:F7:F9:82:C1:A1:91:A1:B8:27:FD:77:B5:AA:1F:58:D2:14:3C Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0A83 Signing time: Wed 06 Aug 2025 19:54:01 +0000 Manifest this update: Wed 06 Aug 2025 19:54:00 +0000 Manifest next update: Wed 13 Aug 2025 19:54:00 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: m5cniHavwklxcwxRzPfpkTy0hDoxaPvgSSuDf4sbeFA=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: UXUfyB+pn9SOV3ygiY+ZvkGtLzGs52/Oyg8uFf+KACQ=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: 4WsYTMNNYAvfdJVoV95sMIl7HsgXw6PaENna1SuEyOg=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: aiIUZFsJTpfn5BXB+rWnJ9nA89byXhhvyAYhsvf98Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Aug 6 19:54:00 2025 GMT Not After : Aug 13 19:54:00 2025 GMT Subject: CN=6893b2d9-6a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:06:68:7b:ad:22:b4:a0:aa:37:3e:5d:6d:2c: 4f:94:83:4a:ab:44:af:39:d5:9d:76:e8:c7:27:9b: 3c:f7:ec:6d:e0:3b:1c:63:2f:c1:f3:3d:b1:7c:2a: 61:c0:e6:bf:56:37:4e:30:5a:a6:ee:ed:2d:50:3f: 73:da:ba:25:59:70:af:e2:92:e1:9c:42:4d:19:e8: d6:c4:71:59:ec:5d:65:17:3d:f5:81:03:4d:f8:19: 31:6b:eb:2e:fe:79:32:91:19:22:00:af:eb:4a:6c: 93:77:f4:01:26:7e:78:24:50:c9:a0:b3:87:19:91: 40:a4:ee:48:5a:5b:1f:81:1d:c9:20:6f:0d:30:af: 8d:d5:d8:04:d9:d7:66:16:ca:61:44:3e:4f:ee:de: 83:76:6f:fb:9c:56:8c:92:bc:c2:7c:f4:fb:86:bb: df:9c:5d:5c:b4:4d:e1:a7:9b:6a:0e:eb:ae:41:48: 39:4e:7d:48:4e:52:ed:7d:58:ba:13:8c:c5:00:a9: 66:5a:6c:c4:28:11:b8:06:e1:e4:e1:76:af:16:80: d4:a9:d5:79:43:e7:8f:3a:17:fb:a1:6c:60:8c:73: ab:3e:94:27:51:3a:2f:14:68:f2:42:9f:f9:7f:e6: 0c:2e:bd:18:1a:ee:73:a3:03:d1:6a:29:74:f0:66: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:09:F7:F9:82:C1:A1:91:A1:B8:27:FD:77:B5:AA:1F:58:D2:14:3C X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:dc:3e:df:40:6b:ae:c7:72:d7:40:2a:81:5d:87:06:0e:f3: 92:6c:3f:a4:e0:83:e0:e9:cc:23:02:e9:5c:62:9c:42:ec:44: cf:8b:a6:84:c4:78:b3:e2:43:b7:13:6f:3d:27:92:6c:41:f9: 8e:06:37:37:d6:82:e4:22:87:62:39:24:70:b2:7f:90:50:e5: bc:ab:4a:07:a0:8f:4a:99:86:1d:dd:13:bb:16:23:db:ee:f2: 41:17:09:b0:72:7f:fc:38:38:ef:07:3d:6f:6e:21:4f:3a:08: a7:ea:ac:ed:61:cc:d5:63:62:ae:ee:54:37:f9:02:31:88:61: 9b:e9:5f:5f:9b:34:24:08:01:a3:72:83:53:a8:45:aa:00:0f: 2b:3d:ae:a3:f4:29:88:80:fd:b3:18:d2:b6:90:e7:6b:49:e7: d4:68:d5:ad:f2:24:60:8c:2e:dc:a6:79:f9:19:4d:b9:75:1e: a2:ee:cd:e0:c3:03:e4:5a:4c:f9:7e:41:d1:f4:f5:ee:89:f4: 5d:2d:b2:d8:e3:16:a3:83:93:0a:aa:94:bc:d6:f0:54:07:37: 1c:81:8e:f9:b3:11:cf:a9:2e:18:c0:b5:f8:c4:da:b0:f0:8b: e5:5e:26:2a:46:03:52:7d:d1:d0:2a:d2:6f:3d:78:6b:4f:ec: 4d:9f:0c:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUwODA2MTk1NDAwWhcNMjUwODEzMTk1NDAwWjAYMRYwFAYD VQQDEw02ODkzYjJkOS02YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AZoe60itKCqNz5dbSxPlINKq0SvOdWddujHJ5s89+xt4DscYy/B8z2xfCph wOa/VjdOMFqm7u0tUD9z2rolWXCv4pLhnEJNGejWxHFZ7F1lFz31gQNN+Bkxa+su /nkykRkiAK/rSmyTd/QBJn54JFDJoLOHGZFApO5IWlsfgR3JIG8NMK+N1dgE2ddm FsphRD5P7t6Ddm/7nFaMkrzCfPT7hrvfnF1ctE3hp5tqDuuuQUg5Tn1ITlLtfVi6 E4zFAKlmWmzEKBG4BuHk4XavFoDUqdV5Q+ePOhf7oWxgjHOrPpQnUTovFGjyQp/5 f+YMLr0YGu5zowPRail08Gbq5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoJ9/mC waGRobgn/Xe1qh9Y0hQ8MB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO3D7fQGuux3LXQCqBXYcGDvOSbD+k4IPg6cwjAulcYpxC7ETPi6aE xHiz4kO3E289J5JsQfmOBjc31oLkIodiOSRwsn+QUOW8q0oHoI9KmYYd3RO7FiPb 7vJBFwmwcn/8ODjvBz1vbiFPOgin6qztYczVY2Ku7lQ3+QIxiGGb6V9fmzQkCAGj coNTqEWqAA8rPa6j9CmIgP2zGNK2kOdrSefUaNWt8iRgjC7cpnn5GU25dR6i7s3g wwPkWkz5fkHR9PXuifRdLbLY4xajg5MKqpS81vBUBzccgY75sxHPqS4YwLX4xNqw 8IvlXiYqRgNSfdHQKtJvPXhrT+xNnwxs -----END CERTIFICATE-----Generated at Fri Aug 8 19:22:33 2025 by rpki-client