$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json) Hash identifier: xu+ChpTZZ/7k78WkfadnFPINAuwSX2Vz44U378+ivKo= Subject key identifier: 64:34:64:02:53:44:FD:F0:71:9E:74:1B:50:ED:86:CA:D0:C0:29:5E Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft Manifest number: 0C84 Signing time: Tue 12 Aug 2025 18:25:56 +0000 Manifest this update: Tue 12 Aug 2025 18:25:55 +0000 Manifest next update: Tue 19 Aug 2025 18:25:55 +0000 Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: FckdDwzNUa4159P6w8oNdM0GWu40fihcyeDNLsV6Shg=) 2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: 4jaQnB9w67oOMyiG00onAIjQ5GTEi4FpaqMXIzq3/AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Validity Not Before: Aug 12 18:25:55 2025 GMT Not After : Aug 19 18:25:55 2025 GMT Subject: CN=689b8733-78cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:61:9f:ca:c8:f8:a7:c1:0d:76:4c:e3:6d: 56:9d:cb:78:25:a7:1e:d8:ee:8d:07:87:4c:c4:c9: fc:49:b2:0a:10:6e:25:ee:61:6d:37:74:1d:9b:d8: b6:42:18:07:35:c0:6b:df:a0:1f:75:71:86:bd:ea: ed:fb:62:ce:4f:c1:76:46:ae:83:0b:ed:a7:3e:9c: 4a:07:dd:8e:92:68:5b:ac:10:d6:75:0a:bb:b2:43: 11:1a:1e:ff:45:8b:27:a7:eb:d8:ef:db:52:2e:84: cc:61:27:4e:ca:5c:0a:48:d7:a2:e1:e4:22:24:7d: 5e:1d:a3:8c:4f:e2:50:ea:b0:84:f9:d6:97:f0:af: 9e:7f:45:57:fc:d0:78:bc:be:5c:1b:c1:f2:20:6d: bb:99:bf:2f:ba:37:c8:67:38:78:1e:bf:b3:79:82: b8:e1:73:f0:a7:88:ef:1d:bf:b7:83:0e:06:f7:e5: a4:91:c8:04:75:ea:e7:01:e5:b5:01:83:d2:c7:ad: 8e:5b:39:f0:96:d1:d3:70:f2:93:8e:dd:cb:21:fb: eb:d3:c1:fd:b3:83:7e:92:40:9b:57:c1:e8:cb:c3: 3f:11:d8:11:97:cc:9f:96:e8:8b:d4:12:a5:86:a1: 9c:48:55:3c:a4:3e:a8:df:70:da:45:31:a7:ff:6a: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:64:02:53:44:FD:F0:71:9E:74:1B:50:ED:86:CA:D0:C0:29:5E X509v3 Authority Key Identifier: keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:da:d4:01:97:46:1c:72:08:79:6e:b1:bd:b7:3a:8e:4c:96: 73:fc:11:52:2d:b0:c3:3f:eb:fb:65:bd:b1:49:7a:c7:ca:1f: 8d:c5:50:49:91:ed:f7:80:4a:41:80:5b:f0:f4:73:4a:7f:66: 1d:a6:51:eb:f3:d5:e9:80:ed:6f:08:2d:f9:ce:79:23:cf:52: a9:d7:80:d3:b5:c4:fc:36:8e:fb:e9:86:eb:73:26:b2:c3:dd: bd:5f:af:b5:5a:dc:79:d3:2e:3a:fd:83:e7:68:86:20:5c:19: ea:73:05:77:04:51:1a:3c:79:dd:f1:75:4f:5d:35:c7:8d:71: 88:8d:3e:85:53:3c:94:cb:ab:4c:ab:81:e5:61:d5:20:38:75: e1:51:b8:9b:8d:6e:57:f7:05:9b:7b:92:0f:06:03:14:ab:8e: b8:57:b1:f0:df:fd:dc:19:85:69:1f:a4:bd:01:dc:a8:7f:63: 7a:5a:5a:e4:eb:d4:78:fd:1a:a9:d4:d8:07:ab:35:fa:7c:f8: 1b:e2:a7:d5:c5:5d:f1:5f:94:bc:37:99:00:5b:5b:83:3e:88: 70:40:bf:cc:77:bb:86:c9:f8:dd:a9:dc:8e:da:43:18:f7:e6: cd:ce:58:81:46:24:2d:4d:68:7f:5d:11:3c:37:35:46:ff:7a: de:a8:ec:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEY3RThCM0JCNEVGMTkyQjg3NjM2MDFEQjMyM0Y0REUy ODMxQTEwMUEwHhcNMjUwODEyMTgyNTU1WhcNMjUwODE5MTgyNTU1WjAYMRYwFAYD VQQDEw02ODliODczMy03OGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1Zhn8rI+KfBDXZM421Wnct4Jace2O6NB4dMxMn8SbIKEG4l7mFtN3Qdm9i2 QhgHNcBr36AfdXGGvert+2LOT8F2Rq6DC+2nPpxKB92OkmhbrBDWdQq7skMRGh7/ RYsnp+vY79tSLoTMYSdOylwKSNei4eQiJH1eHaOMT+JQ6rCE+daX8K+ef0VX/NB4 vL5cG8HyIG27mb8vujfIZzh4Hr+zeYK44XPwp4jvHb+3gw4G9+WkkcgEdernAeW1 AYPSx62OWznwltHTcPKTjt3LIfvr08H9s4N+kkCbV8Hoy8M/EdgRl8yfluiL1BKl hqGcSFU8pD6o33DaRTGn/2qzUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQ0ZAJT RP3wcZ50G1DthsrQwCleMB8GA1UdIwQYMBaAFPfos7tO8ZK4djYB2zI/TeKDGhAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC8xNjMzM0RBRUZG QkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGtyaDJOZ0hiTWo5TjRvTWFF Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktaXp1MDd4a3JoMk5nSGJNajlONG9NYUVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC8xNjMzM0RBRUZGQkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGty aDJOZ0hiTWo5TjRvTWFFQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK2tQBl0Yccgh5brG9tzqOTJZz/BFSLbDDP+v7Zb2xSXrHyh+NxVBJ ke33gEpBgFvw9HNKf2YdplHr89XpgO1vCC35znkjz1Kp14DTtcT8No776Ybrcyay w929X6+1Wtx50y46/YPnaIYgXBnqcwV3BFEaPHnd8XVPXTXHjXGIjT6FUzyUy6tM q4HlYdUgOHXhUbibjW5X9wWbe5IPBgMUq464V7Hw3/3cGYVpH6S9Adyof2N6Wlrk 69R4/Rqp1NgHqzX6fPgb4qfVxV3xX5S8N5kAW1uDPohwQL/Md7uGyfjdqdyO2kMY 9+bNzliBRiQtTWh/XRE8NzVG/3reqOz+ -----END CERTIFICATE-----Generated at Wed Aug 13 08:55:05 2025 by rpki-client