$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json) Hash identifier: hOLfz1zaj+IiTmfbXVh8UeDD1GTZay4x6zrpB5Hfe6c= Subject key identifier: 2B:C4:DF:DA:88:4D:19:9E:54:19:AF:96:A0:74:34:33:8F:25:2B:31 Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft Manifest number: 0C4C Signing time: Thu 24 Apr 2025 18:16:20 +0000 Manifest this update: Thu 24 Apr 2025 18:16:20 +0000 Manifest next update: Thu 01 May 2025 18:16:20 +0000 Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: WbqL8dEuPIfix7ZRxV9ufblwEZYo/SC7TALuqOX3hic=) 2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: 4jaQnB9w67oOMyiG00onAIjQ5GTEi4FpaqMXIzq3/AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Validity Not Before: Apr 24 18:16:20 2025 GMT Not After : May 1 18:16:20 2025 GMT Subject: CN=680a7ff4-8f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:b7:fe:28:6b:c6:c7:62:ae:a2:a1:96:28: a4:29:ce:49:55:ae:a7:e8:6b:83:cb:45:88:39:1e: fc:5d:d4:50:e2:1e:42:ab:bd:48:22:1f:31:ba:62: c2:23:9e:bf:35:49:ae:2f:bf:e4:2a:fc:80:89:cf: 40:32:8b:05:53:be:ef:a0:40:7b:60:69:97:e1:f6: 5a:ef:75:df:a3:66:a6:ba:3c:84:ca:ce:90:40:e4: af:e1:57:db:95:48:71:74:dd:c7:0b:d7:16:a1:c3: f4:d8:62:2f:15:66:13:7f:86:f9:0d:00:b4:92:30: 57:b5:8e:46:e5:30:4e:61:6b:f0:32:38:8f:c5:9f: 46:cd:72:b6:3d:4e:09:23:c7:24:51:fa:ea:65:a0: 90:b7:17:29:a3:fc:54:08:03:f2:f7:06:7f:4f:f5: 71:92:6c:7e:ae:56:61:2f:e6:76:48:f6:0f:cd:e9: c8:b8:c1:30:3c:73:2b:5f:4d:cb:de:7f:91:0f:94: 76:25:53:13:bc:f7:f9:dc:cf:f9:62:74:54:9d:0a: 13:50:21:e9:f2:d4:90:a4:d8:d4:45:c7:54:7f:9f: 17:5c:55:2e:81:b8:86:fa:cf:6a:df:fe:ee:83:e5: d4:0e:75:f5:30:36:6f:67:d1:8b:5d:4f:db:0a:c4: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C4:DF:DA:88:4D:19:9E:54:19:AF:96:A0:74:34:33:8F:25:2B:31 X509v3 Authority Key Identifier: keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2f:17:93:db:80:5d:c8:79:e3:24:6d:69:54:87:a0:e6:87: c7:47:e9:43:9b:68:1c:21:49:8a:93:72:a0:c2:a8:ec:9b:d8: 09:48:18:8a:1d:a7:f2:72:71:9d:b5:64:94:14:67:85:63:6c: 0b:13:9a:03:43:c4:ca:a8:b6:ef:2e:30:13:80:26:01:84:53: 89:92:0b:9f:31:41:f1:af:48:a8:b1:01:41:a2:76:51:68:ea: 26:d5:11:e6:b0:fb:67:b5:ac:79:71:cb:b7:a3:ab:a0:37:21: 0d:37:d2:93:d9:16:25:5a:8a:78:82:6c:a6:10:30:98:3a:46: 05:c5:37:48:ad:52:ab:3f:f6:6a:08:6f:46:9e:41:a2:0a:ae: 14:96:fa:ac:cc:a2:34:34:16:cd:43:04:16:3e:ab:00:89:81: 66:88:f4:61:fd:9f:07:d5:d6:5e:9e:c5:2d:00:5a:81:6c:c5: e9:ed:4f:74:3f:99:d5:cf:42:d0:27:74:de:02:c2:75:86:e8: ba:08:32:b0:ad:3a:40:f7:18:69:66:84:70:08:83:c0:67:43: 6a:e8:75:92:17:64:d4:4c:0e:42:00:ea:9c:3f:84:fe:8f:9d: 95:85:09:e5:d8:45:b7:31:d8:b1:fa:f8:66:3e:31:fb:07:95: 2d:fe:dc:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEY3RThCM0JCNEVGMTkyQjg3NjM2MDFEQjMyM0Y0REUy ODMxQTEwMUEwHhcNMjUwNDI0MTgxNjIwWhcNMjUwNTAxMTgxNjIwWjAYMRYwFAYD VQQDEw02ODBhN2ZmNC04ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwu3/ihrxsdirqKhliikKc5JVa6n6GuDy0WIOR78XdRQ4h5Cq71IIh8xumLC I56/NUmuL7/kKvyAic9AMosFU77voEB7YGmX4fZa73Xfo2amujyEys6QQOSv4Vfb lUhxdN3HC9cWocP02GIvFWYTf4b5DQC0kjBXtY5G5TBOYWvwMjiPxZ9GzXK2PU4J I8ckUfrqZaCQtxcpo/xUCAPy9wZ/T/Vxkmx+rlZhL+Z2SPYPzenIuMEwPHMrX03L 3n+RD5R2JVMTvPf53M/5YnRUnQoTUCHp8tSQpNjURcdUf58XXFUugbiG+s9q3/7u g+XUDnX1MDZvZ9GLXU/bCsSvpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvE39qI TRmeVBmvlqB0NDOPJSsxMB8GA1UdIwQYMBaAFPfos7tO8ZK4djYB2zI/TeKDGhAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC8xNjMzM0RBRUZG QkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGtyaDJOZ0hiTWo5TjRvTWFF Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktaXp1MDd4a3JoMk5nSGJNajlONG9NYUVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC8xNjMzM0RBRUZGQkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGty aDJOZ0hiTWo5TjRvTWFFQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvLxeT24BdyHnjJG1pVIeg5ofHR+lDm2gcIUmKk3Kgwqjsm9gJSBiK HafycnGdtWSUFGeFY2wLE5oDQ8TKqLbvLjATgCYBhFOJkgufMUHxr0iosQFBonZR aOom1RHmsPtntax5ccu3o6ugNyENN9KT2RYlWop4gmymEDCYOkYFxTdIrVKrP/Zq CG9GnkGiCq4UlvqszKI0NBbNQwQWPqsAiYFmiPRh/Z8H1dZensUtAFqBbMXp7U90 P5nVz0LQJ3TeAsJ1hui6CDKwrTpA9xhpZoRwCIPAZ0Nq6HWSF2TUTA5CAOqcP4T+ j52VhQnl2EW3Mdix+vhmPjH7B5Ut/tyl -----END CERTIFICATE-----Generated at Sat Apr 26 05:30:08 2025 by rpki-client