$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: okqS2TBZMxUVtI8dXwTatsCAhR0SUoKVP4eNZQS2bjM= Subject key identifier: 92:3A:BC:83:35:D2:04:AB:BC:B4:3A:61:75:E6:A0:CB:FF:C2:FC:2F Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: AE Signing time: Wed 05 Nov 2025 06:22:39 +0000 Manifest this update: Wed 05 Nov 2025 06:22:38 +0000 Manifest next update: Wed 12 Nov 2025 06:22:38 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: gsDyte0g/Tx5c3VDnBiQ3YYnRpO3UvAl9S8QVYMxKWI=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Nov 5 06:22:38 2025 GMT Not After : Nov 12 06:22:38 2025 GMT Subject: CN=690aed2e-f5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:18:e7:61:b0:a0:20:7e:67:64:26:68:57: ab:c1:51:bf:90:80:2a:89:55:0e:65:a7:c4:cc:14: 97:af:5f:c5:ad:03:41:6e:40:3e:d1:0b:b3:6b:28: 32:d8:e0:42:24:8b:d0:31:02:76:c3:0f:67:2e:ba: 79:55:51:4a:e4:6d:7f:b4:de:a1:d2:fb:34:ac:7e: ce:94:63:94:88:70:53:c4:15:9c:24:d8:22:1e:2e: 3a:69:ce:81:ca:1f:6f:f0:76:35:5e:25:90:b2:94: 55:20:1d:ca:cc:69:97:53:e1:5e:2b:62:ae:25:50: 9d:38:2f:d4:3e:54:4f:f9:fb:1a:d9:93:2a:7f:03: 59:3f:a1:e8:c8:a3:c3:78:16:54:43:37:37:ff:1d: d2:0b:1c:41:80:a3:f0:90:d9:9c:eb:87:83:d7:90: b1:2d:d0:ea:68:5e:50:1f:0d:6c:59:94:ee:6b:e6: 80:42:82:d2:f5:55:e5:f1:88:19:ff:1d:9d:7f:ba: f6:02:b4:a0:d2:53:cc:f3:d4:90:0c:22:e3:eb:d8: 6b:60:51:f6:c6:47:84:da:ff:b1:e6:f4:eb:e6:3b: 27:2d:25:aa:87:82:43:6b:f7:6b:94:2d:7d:b1:6f: 4b:fd:a6:48:04:a0:0f:a2:ba:5e:48:eb:93:91:0e: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:BC:83:35:D2:04:AB:BC:B4:3A:61:75:E6:A0:CB:FF:C2:FC:2F X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d8:99:b2:91:5b:0e:73:2a:11:24:55:2c:1c:e8:63:fa:e7: 17:dd:52:dc:82:87:95:ad:de:b9:91:b1:65:af:c5:42:cb:7d: 70:14:25:7a:80:26:e7:b4:5a:bc:a5:17:a6:4b:fd:28:a6:94: bf:f3:d1:28:41:84:d1:89:82:24:69:e0:50:f6:fe:9b:c2:c0: c8:b8:7b:b3:19:ee:2c:b7:db:83:3b:fb:2c:18:24:f4:ba:56: 21:e0:36:55:3a:9c:ea:0c:26:b0:d4:da:84:6c:36:3b:59:b6: ae:a2:23:4b:99:ed:6c:b6:31:73:ea:4a:65:4f:aa:fb:b7:34: 3b:d3:21:68:ba:44:79:00:dc:37:db:61:f0:11:7d:26:be:9e: 1a:fa:00:37:9d:20:15:85:3a:dc:5b:8b:98:c3:3c:2a:96:96: a5:4b:35:6b:f8:22:e4:a8:47:26:41:18:5e:c7:b2:ef:4c:63: 74:04:0a:0e:48:7e:24:df:32:3b:a7:78:6e:5e:85:9a:55:e2: d9:21:c8:3f:90:96:67:ef:30:07:34:9c:9c:50:6c:4e:05:1b: 06:8d:25:aa:00:48:88:ee:d9:39:4a:b3:08:f5:1e:ee:7b:44: cc:01:b8:c1:cd:eb:e1:75:61:af:db:d7:50:e6:13:03:a1:a0: d0:3c:40:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky NkY5MkUzNzQwHhcNMjUxMTA1MDYyMjM4WhcNMjUxMTEyMDYyMjM4WjAYMRYwFAYD VQQDEw02OTBhZWQyZS1mNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVgY52GwoCB+Z2QmaFerwVG/kIAqiVUOZafEzBSXr1/FrQNBbkA+0Quzaygy 2OBCJIvQMQJ2ww9nLrp5VVFK5G1/tN6h0vs0rH7OlGOUiHBTxBWcJNgiHi46ac6B yh9v8HY1XiWQspRVIB3KzGmXU+FeK2KuJVCdOC/UPlRP+fsa2ZMqfwNZP6HoyKPD eBZUQzc3/x3SCxxBgKPwkNmc64eD15CxLdDqaF5QHw1sWZTua+aAQoLS9VXl8YgZ /x2df7r2ArSg0lPM89SQDCLj69hrYFH2xkeE2v+x5vTr5jsnLSWqh4JDa/drlC19 sW9L/aZIBKAPorpeSOuTkQ6tEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJI6vIM1 0gSrvLQ6YXXmoMv/wvwvMB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo aHE2dlVEUzZDMGttLVM0M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx2JmykVsOcyoRJFUsHOhj+ucX3VLcgoeVrd65kbFlr8VCy31wFCV6 gCbntFq8pRemS/0oppS/89EoQYTRiYIkaeBQ9v6bwsDIuHuzGe4st9uDO/ssGCT0 ulYh4DZVOpzqDCaw1NqEbDY7WbauoiNLme1stjFz6kplT6r7tzQ70yFoukR5ANw3 22HwEX0mvp4a+gA3nSAVhTrcW4uYwzwqlpalSzVr+CLkqEcmQRhex7LvTGN0BAoO SH4k3zI7p3huXoWaVeLZIcg/kJZn7zAHNJycUGxOBRsGjSWqAEiI7tk5SrMI9R7u e0TMAbjBzevhdWGv29dQ5hMDoaDQPECU -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:34 2025 by rpki-client