$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: fiNo8cWhBBaLkwLGVL72tjvnXYzvwuQTUs1VW9iCbi0= Subject key identifier: 79:3B:7A:8C:35:65:7A:AC:87:41:FD:C1:04:0E:C8:4A:D6:F3:3F:4B Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 0151 Signing time: Sat 09 Aug 2025 04:46:32 +0000 Manifest this update: Sat 09 Aug 2025 04:46:32 +0000 Manifest next update: Sat 16 Aug 2025 04:46:32 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: ZfN+3KHXhV430EJ2Xh4u8tgmQLgoZFfcZ95BRn9oELo=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Aug 9 04:46:32 2025 GMT Not After : Aug 16 04:46:32 2025 GMT Subject: CN=6896d2a8-fe72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:c5:50:2f:82:84:63:4b:c0:24:6e:ef:07: 98:b8:1b:f4:f0:ea:d5:c6:d0:83:c6:93:a5:6e:21: b8:55:79:bc:d1:0e:9c:f3:4f:03:92:e4:a3:a1:e7: 88:49:e9:65:cc:5d:8f:1c:ba:c3:fb:2c:99:7e:ff: 4b:60:1e:44:da:dd:a0:9b:2d:f5:23:36:47:ab:57: 07:54:8f:53:d9:34:09:41:78:10:8e:e9:99:d3:bb: 53:b1:b0:ab:95:ad:4e:b0:9d:19:f6:0f:f9:67:46: 0a:ab:7e:04:ce:eb:72:76:8c:1b:74:5c:08:fe:f5: 66:1c:ce:26:25:4a:2f:0f:96:82:96:cd:67:58:84: 43:ec:e2:30:f3:83:d0:69:96:8a:a6:c6:49:f3:de: 1f:1a:6d:cb:0e:5f:52:96:60:cc:e2:c3:8b:8e:d0: 28:9a:9f:8d:0d:99:8f:6b:ef:08:62:38:d2:f0:d7: 22:56:c4:73:ca:cd:4f:07:69:65:e4:9c:8f:1e:73: f0:51:8c:bc:08:01:02:e3:56:ad:88:82:26:0b:cf: 12:ac:32:0d:48:e2:a3:0b:6a:4e:47:f3:b8:97:e4: 04:a9:ce:da:76:f7:24:08:23:2c:4d:52:aa:b9:7c: e7:f1:b6:50:48:b6:c1:aa:d2:5e:69:7b:7c:eb:81: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3B:7A:8C:35:65:7A:AC:87:41:FD:C1:04:0E:C8:4A:D6:F3:3F:4B X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:cf:cd:95:97:af:f1:2b:93:c1:17:62:aa:df:2d:10:81:f7: c9:da:1a:c6:55:ab:53:c5:0e:2d:72:b4:44:7f:5f:cc:e9:b1: f1:25:24:1a:b4:fb:d3:66:77:3c:a3:27:72:99:da:d6:fb:da: 2c:f6:22:c0:1e:33:ea:98:35:02:d3:e9:d3:1e:80:54:71:fc: 86:c2:94:3a:89:18:1e:ad:29:cd:30:5a:77:f2:89:09:9a:46: 64:c1:98:ae:62:db:d4:a1:d9:8f:2e:dc:47:7d:b5:8e:e0:29: a2:c6:0e:fc:4b:fb:26:73:0b:b7:cb:7b:0d:bc:63:47:f7:15: 72:f8:62:30:e2:4f:40:54:de:d0:86:89:ac:a8:71:4f:45:9e: b3:b2:81:70:c4:88:c5:e3:de:56:bc:94:b5:41:45:03:a8:a1: 94:ac:9f:a8:e5:a6:00:a7:ef:d7:7b:48:90:78:8d:36:7f:cf: c8:c0:21:c2:cc:e5:e8:34:5e:76:f9:b6:08:ca:69:ed:c6:ce: 2c:7c:41:dd:92:97:58:d9:c6:90:27:81:d6:d9:38:0f:09:8d: f1:ec:c7:c3:a6:4d:f4:dc:6a:81:80:78:13:f3:32:7f:ff:66: 02:9e:da:07:ef:fa:8f:a6:3c:a6:cf:96:9f:9b:57:5e:85:4d: 67:45:8e:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUwODA5MDQ0NjMyWhcNMjUwODE2MDQ0NjMyWjAYMRYwFAYD VQQDEw02ODk2ZDJhOC1mZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UfFUC+ChGNLwCRu7weYuBv08OrVxtCDxpOlbiG4VXm80Q6c808DkuSjoeeI SellzF2PHLrD+yyZfv9LYB5E2t2gmy31IzZHq1cHVI9T2TQJQXgQjumZ07tTsbCr la1OsJ0Z9g/5Z0YKq34EzutydowbdFwI/vVmHM4mJUovD5aCls1nWIRD7OIw84PQ aZaKpsZJ894fGm3LDl9SlmDM4sOLjtAomp+NDZmPa+8IYjjS8NciVsRzys1PB2ll 5JyPHnPwUYy8CAEC41atiIImC88SrDINSOKjC2pOR/O4l+QEqc7advckCCMsTVKq uXzn8bZQSLbBqtJeaXt864Gz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk7eow1 ZXqsh0H9wQQOyErW8z9LMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1z82Vl6/xK5PBF2Kq3y0QgffJ2hrGVatTxQ4tcrREf1/M6bHxJSQa tPvTZnc8oydymdrW+9os9iLAHjPqmDUC0+nTHoBUcfyGwpQ6iRgerSnNMFp38okJ mkZkwZiuYtvUodmPLtxHfbWO4Cmixg78S/smcwu3y3sNvGNH9xVy+GIw4k9AVN7Q homsqHFPRZ6zsoFwxIjF495WvJS1QUUDqKGUrJ+o5aYAp+/Xe0iQeI02f8/IwCHC zOXoNF52+bYIymntxs4sfEHdkpdY2caQJ4HW2TgPCY3x7MfDpk303GqBgHgT8zJ/ /2YCntoH7/qPpjymz5afm1dehU1nRY7P -----END CERTIFICATE-----Generated at Sun Aug 10 05:51:50 2025 by rpki-client