$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: fl5pEfaP6PmxQW+6mXl/YB1ce4QGPKfbA2MM4lehBWg= Subject key identifier: AC:74:2E:8D:D5:D8:B6:EE:19:88:A1:67:23:50:21:3C:90:39:12:4F Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: E1 Signing time: Mon 03 Nov 2025 05:28:49 +0000 Manifest this update: Mon 03 Nov 2025 05:28:49 +0000 Manifest next update: Mon 10 Nov 2025 05:28:49 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: qaGY2SKj2IvtY9IDgBXvoqofxUzq78esQFSIFTv2n5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Nov 3 05:28:49 2025 GMT Not After : Nov 10 05:28:49 2025 GMT Subject: CN=69083d91-9840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:3b:82:9d:ed:99:de:79:60:3f:a0:37:25: d3:7e:91:9c:77:78:a6:b2:d7:3d:53:46:d2:e0:73: 2e:1d:cc:5e:2b:6e:47:9d:a4:c5:91:0a:1b:66:33: 2b:1e:49:f7:8e:6c:75:70:de:df:2b:b9:7c:63:af: d2:19:92:bc:3d:21:de:75:2b:da:58:86:7e:ef:7e: fc:ae:9b:15:b2:35:4a:e1:31:e6:35:98:99:31:fb: 22:bf:60:18:8a:fb:4f:a5:61:63:81:a5:d3:cb:37: b3:13:29:9c:b8:c5:2e:94:62:30:f2:43:e4:7a:bd: 6c:bf:17:7d:67:7b:08:1b:62:fc:28:04:bf:1c:5a: 9f:0c:2e:ef:b2:40:06:2f:29:7e:94:ac:50:84:85: a2:0c:35:b7:83:2f:3f:cb:23:86:ff:70:9d:61:8f: 27:6a:cc:58:32:a9:23:02:60:51:9a:80:32:7d:c9: 4c:e3:8e:3f:34:65:f0:33:cf:c8:1c:52:94:3b:b6: 7a:b7:e6:ee:e0:3c:96:7f:c9:42:20:28:92:03:f5: 97:b0:35:91:a9:90:1c:54:69:d8:c6:81:c7:e5:72: d4:53:b7:b1:a7:21:f3:50:d3:7e:c9:4f:ce:29:39: 14:36:0c:40:40:e2:b7:2f:b7:5a:62:1e:ca:1e:45: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:74:2E:8D:D5:D8:B6:EE:19:88:A1:67:23:50:21:3C:90:39:12:4F X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:aa:b4:ef:2d:a2:40:e8:6b:89:9e:95:39:b1:86:17:ac:3c: 5e:d0:80:fd:0c:7e:f6:10:0e:85:7f:0c:76:d3:79:f7:64:af: 0f:7e:41:87:e5:1a:b1:2d:ea:44:89:b2:ed:2a:d4:0f:1b:81: 0b:96:6c:8c:cc:65:d2:82:d1:28:c1:7e:ed:72:72:5c:ac:65: c8:7d:40:69:02:e3:a6:05:c0:8e:b8:99:d8:70:df:ad:f0:1c: 14:ca:cb:47:b8:46:b7:46:eb:96:97:6b:cc:b7:28:06:1b:30: ec:a6:da:ac:31:73:2d:be:81:ff:68:6a:14:aa:6f:6b:42:16: b9:56:dd:5f:2b:8e:cf:af:15:83:52:a8:4c:45:1f:29:86:f5: 50:a9:26:21:9e:34:50:f0:54:ca:9d:78:31:86:33:d9:e0:cf: de:fc:03:58:d4:f8:88:be:49:de:c9:a0:22:53:70:38:90:96: a1:de:c0:2d:04:81:3f:85:d9:9b:d8:c8:ff:27:35:41:b7:a0: 40:39:05:62:6f:fd:75:1a:11:f1:f5:bf:fb:49:e9:51:fb:84: 23:40:04:32:f1:11:ec:9a:ee:10:86:ff:9a:ce:bc:36:22:be: 17:23:3a:b0:f3:d3:8b:fb:22:d6:36:98:bd:50:5d:d6:71:79: 87:ca:52:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjUxMTAzMDUyODQ5WhcNMjUxMTEwMDUyODQ5WjAYMRYwFAYD VQQDEw02OTA4M2Q5MS05ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosY7gp3tmd55YD+gNyXTfpGcd3imstc9U0bS4HMuHcxeK25HnaTFkQobZjMr Hkn3jmx1cN7fK7l8Y6/SGZK8PSHedSvaWIZ+7378rpsVsjVK4THmNZiZMfsiv2AY ivtPpWFjgaXTyzezEymcuMUulGIw8kPker1svxd9Z3sIG2L8KAS/HFqfDC7vskAG Lyl+lKxQhIWiDDW3gy8/yyOG/3CdYY8nasxYMqkjAmBRmoAyfclM444/NGXwM8/I HFKUO7Z6t+bu4DyWf8lCICiSA/WXsDWRqZAcVGnYxoHH5XLUU7expyHzUNN+yU/O KTkUNgxAQOK3L7daYh7KHkWoYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKx0Lo3V 2LbuGYihZyNQITyQORJPMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiqrTvLaJA6GuJnpU5sYYXrDxe0ID9DH72EA6Ffwx203n3ZK8PfkGH 5RqxLepEibLtKtQPG4ELlmyMzGXSgtEowX7tcnJcrGXIfUBpAuOmBcCOuJnYcN+t 8BwUystHuEa3RuuWl2vMtygGGzDsptqsMXMtvoH/aGoUqm9rQha5Vt1fK47PrxWD UqhMRR8phvVQqSYhnjRQ8FTKnXgxhjPZ4M/e/ANY1PiIvkneyaAiU3A4kJah3sAt BIE/hdmb2Mj/JzVBt6BAOQVib/11GhHx9b/7SelR+4QjQAQy8RHsmu4Qhv+azrw2 Ir4XIzqw89OL+yLWNpi9UF3WcXmHylLy -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:20 2025 by rpki-client