$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: sEZ9+J6MXQ9Bc/YCEqwHHJNuY7q5nfzjn/nO0lrk39Y= Subject key identifier: 17:F5:BB:66:B2:C2:AB:48:9F:E9:9B:36:21:A5:1B:86:68:E8:91:26 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 017D Signing time: Wed 05 Nov 2025 04:03:35 +0000 Manifest this update: Wed 05 Nov 2025 04:03:34 +0000 Manifest next update: Wed 12 Nov 2025 04:03:34 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: sOb2+GdNsMi/mp3VvGGlitMu2WqgIi/ml9JlkcS7oGI=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Nov 5 04:03:34 2025 GMT Not After : Nov 12 04:03:34 2025 GMT Subject: CN=690acc96-0540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:31:0d:4a:db:9c:7a:54:c6:b7:97:60:03:bc: 7f:c1:b4:66:a3:17:fc:a6:c5:11:6c:e2:91:e4:bb: ee:b4:90:4e:4d:42:96:8f:43:fb:0e:e9:28:7f:75: 67:84:73:79:b6:9d:bf:5d:4e:97:d0:49:a9:5e:07: 08:c1:fa:3f:26:8a:d3:4e:09:c3:11:82:9b:90:77: b6:58:a0:c5:0f:f7:31:7a:46:cf:29:c9:4f:3f:10: 76:b3:59:4c:d6:d9:30:02:b2:b5:7f:d9:58:0a:a2: 8f:cd:09:5a:65:26:1e:11:8e:90:93:e4:a8:88:06: d0:37:40:a2:19:6f:a0:77:ab:0f:88:0e:ae:25:52: 1d:b5:7e:98:de:33:49:ae:6c:85:25:26:4f:6d:31: 40:25:90:69:32:2e:96:69:43:13:f5:5f:7b:93:ea: 36:b8:bc:46:91:dc:e5:e0:ab:a4:f5:24:9f:9a:86: da:67:e7:7d:c3:68:8a:d9:92:98:87:20:2b:28:b9: c8:31:ee:a9:56:0e:90:7e:2f:c5:d3:8a:a8:9b:b5: d8:0f:de:ec:07:87:49:14:56:db:e9:af:b6:f2:82: 20:21:57:84:fb:29:ed:05:dd:fe:35:03:db:22:fd: 7a:7a:ef:3f:3b:21:79:cc:94:3b:18:ab:7c:9c:97: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F5:BB:66:B2:C2:AB:48:9F:E9:9B:36:21:A5:1B:86:68:E8:91:26 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3b:a8:07:f1:42:00:b1:e4:7b:74:59:dc:13:c7:36:df:56: f3:3b:13:64:1e:ec:99:62:70:1f:2b:01:88:14:1a:c9:bd:11: e6:10:c5:de:89:e1:df:42:c2:b9:88:3f:b1:b2:dd:b7:6c:bd: ad:18:43:0b:1c:95:f1:65:13:65:cc:b4:42:bc:98:b7:6a:d2: af:64:0d:44:a9:1c:71:a7:6f:ad:a3:07:66:ce:70:ce:56:02: c5:37:4a:5a:0d:f6:fb:6b:70:78:54:c3:5f:49:8a:48:a4:55: c5:6f:b9:6d:d3:24:90:89:be:de:85:3e:32:bb:e6:08:b3:04: 28:02:c9:f1:44:28:54:c4:0f:c9:3c:70:75:b7:fc:7f:56:39: 54:18:70:8e:3f:38:ec:9f:ee:59:56:c7:a0:47:64:62:5d:84: 20:07:1d:98:00:aa:74:20:8a:95:d5:30:c8:db:42:ef:f5:20: 9e:68:12:d6:55:c4:1e:dd:3d:c7:af:a5:c1:16:eb:07:d0:c3: a0:7e:fb:d0:ea:79:d9:db:15:5e:b5:6c:b2:9f:59:c2:11:13: 52:96:53:55:bd:1b:e3:b0:b5:fd:fd:2f:e9:60:d5:55:f7:d8: 07:28:7e:f1:89:d9:ef:73:c3:08:e7:cb:1d:f0:1a:e2:d2:cd: 85:1c:e2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUxMTA1MDQwMzM0WhcNMjUxMTEyMDQwMzM0WjAYMRYwFAYD VQQDEw02OTBhY2M5Ni0wNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDENStucelTGt5dgA7x/wbRmoxf8psURbOKR5LvutJBOTUKWj0P7Dukof3Vn hHN5tp2/XU6X0EmpXgcIwfo/JorTTgnDEYKbkHe2WKDFD/cxekbPKclPPxB2s1lM 1tkwArK1f9lYCqKPzQlaZSYeEY6Qk+SoiAbQN0CiGW+gd6sPiA6uJVIdtX6Y3jNJ rmyFJSZPbTFAJZBpMi6WaUMT9V97k+o2uLxGkdzl4Kuk9SSfmobaZ+d9w2iK2ZKY hyArKLnIMe6pVg6Qfi/F04qom7XYD97sB4dJFFbb6a+28oIgIVeE+yntBd3+NQPb Iv16eu8/OyF5zJQ7GKt8nJeGowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf1u2ay wqtIn+mbNiGlG4Zo6JEmMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtO6gH8UIAseR7dFncE8c231bzOxNkHuyZYnAfKwGIFBrJvRHmEMXe ieHfQsK5iD+xst23bL2tGEMLHJXxZRNlzLRCvJi3atKvZA1EqRxxp2+towdmznDO VgLFN0paDfb7a3B4VMNfSYpIpFXFb7lt0ySQib7ehT4yu+YIswQoAsnxRChUxA/J PHB1t/x/VjlUGHCOPzjsn+5ZVsegR2RiXYQgBx2YAKp0IIqV1TDI20Lv9SCeaBLW VcQe3T3Hr6XBFusH0MOgfvvQ6nnZ2xVetWyyn1nCERNSllNVvRvjsLX9/S/pYNVV 99gHKH7xidnvc8MI58sd8Bri0s2FHOKH -----END CERTIFICATE-----Generated at Wed Nov 5 20:02:17 2025 by rpki-client