$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: DLIzkpGOGpqsplWY1YNeW/RtSSSmTGdO9wOJMUdDTIs= Subject key identifier: 98:70:EE:F8:D9:53:AB:72:01:9C:E5:4B:80:59:8F:9F:00:E9:AA:F7 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 9D Signing time: Wed 05 Nov 2025 06:31:48 +0000 Manifest this update: Wed 05 Nov 2025 06:31:48 +0000 Manifest next update: Wed 12 Nov 2025 06:31:48 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: 4NnnupF7peD6deXN8ojR6dQLarYJWC84+uDH2n6j2Qo=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Nov 5 06:31:48 2025 GMT Not After : Nov 12 06:31:48 2025 GMT Subject: CN=690aef54-a7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:0f:9d:d3:cb:45:08:72:44:b9:d9:fd:ed: a5:9a:2f:3c:39:63:9a:88:f1:26:73:94:d1:28:45: 80:e5:e1:2f:88:a9:00:6e:86:5f:b8:3d:c2:6c:21: 81:35:1a:92:cb:61:e9:43:5a:23:8b:20:9b:79:2f: a0:b6:8e:09:a3:42:91:ff:e8:e8:02:2f:ea:35:0f: 3a:31:2a:4b:78:6a:05:6a:0b:06:b8:3a:f2:b7:b0: ee:b4:9a:34:05:4b:31:2f:b8:e0:4b:29:bf:4b:03: 10:db:38:81:6e:b7:69:21:e2:5f:f3:fb:27:10:0b: 75:c8:42:73:5c:b9:de:8c:cd:ea:31:3e:0e:f7:40: eb:91:ca:69:f6:f1:a5:a4:37:91:25:23:0c:81:7e: 90:81:0e:ee:bb:9b:8f:92:5e:f1:75:e0:df:ad:06: 40:9e:ed:b8:3d:48:f7:3a:4e:dc:69:a8:bb:c1:45: 94:84:c7:12:8c:85:f3:88:35:55:09:36:ff:bc:dc: a8:48:7f:ce:4c:9c:a4:50:1a:72:38:2d:c5:b5:d1: 3f:29:d9:af:54:23:40:89:bd:1c:8f:90:1d:ce:db: 9a:23:5e:0a:a9:35:18:09:e4:78:d6:7d:23:85:ec: ee:2f:ae:37:a6:31:96:7d:71:7b:58:2d:53:20:e1: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:70:EE:F8:D9:53:AB:72:01:9C:E5:4B:80:59:8F:9F:00:E9:AA:F7 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:4e:78:e9:96:be:ff:0b:07:9d:b9:35:f9:9f:0d:8b:52:28: 1f:d3:2a:dc:c8:b9:34:f2:49:b2:10:8e:b8:b1:ec:bc:d4:f0: 3e:d8:21:4a:b1:27:10:f2:e2:d8:21:e1:cc:d9:62:d2:ef:32: f6:fe:07:f2:72:3d:02:47:b9:8a:cc:99:7e:4c:a9:52:14:65: 46:10:84:98:f1:90:b0:e6:1a:dd:53:5e:bc:7f:9b:f9:e5:35: 8a:06:ca:a8:63:15:2e:51:ba:b6:45:58:00:af:c7:dd:72:70: 4c:5f:3c:7d:c0:9b:b1:06:8e:30:ab:e9:d0:50:c7:16:b2:a4: 2e:14:2f:15:87:f9:bb:e9:8c:b3:9e:0d:19:0e:d5:b1:a4:e7: 6c:20:17:9c:44:f4:f3:6f:88:b4:3d:6e:08:34:e1:bd:98:bb: 26:92:b7:73:29:62:46:4a:6f:24:31:12:a9:92:f2:cd:6f:95: 5a:98:48:f4:2e:7c:e4:29:b5:a2:9a:05:e8:5a:0f:32:e8:65: a8:ee:b8:16:d7:fb:01:34:9b:8c:72:e7:a2:d4:5d:35:d4:f9: 88:d0:26:85:e0:ff:9e:f9:81:fe:8d:0d:61:e8:98:ed:c2:1d: cd:d6:cb:cb:cc:38:44:da:05:04:a1:e6:9a:5a:e9:49:23:1e: 7a:ae:dd:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4NTQxMTAvBgNVBAUTKDhCMzQ3MUI5MEI3QTVCQzc2Q0UzRkMwOUFDQUM4OTI4 RUI0RDgxNzkwHhcNMjUxMTA1MDYzMTQ4WhcNMjUxMTEyMDYzMTQ4WjAYMRYwFAYD VQQDEw02OTBhZWY1NC1hN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQ0PndPLRQhyRLnZ/e2lmi88OWOaiPEmc5TRKEWA5eEviKkAboZfuD3CbCGB NRqSy2HpQ1ojiyCbeS+gto4Jo0KR/+joAi/qNQ86MSpLeGoFagsGuDryt7DutJo0 BUsxL7jgSym/SwMQ2ziBbrdpIeJf8/snEAt1yEJzXLnejM3qMT4O90Drkcpp9vGl pDeRJSMMgX6QgQ7uu5uPkl7xdeDfrQZAnu24PUj3Ok7caai7wUWUhMcSjIXziDVV CTb/vNyoSH/OTJykUBpyOC3FtdE/KdmvVCNAib0cj5AdztuaI14KqTUYCeR41n0j hezuL643pjGWfXF7WC1TIOEajwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhw7vjZ U6tyAZzlS4BZj58A6ar3MB8GA1UdIwQYMBaAFIs0cbkLelvHbOP8CaysiSjrTYF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ENTNFMUI2RUNC MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4ZHM0X3dKckt5SktPdE5n WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njg1NC9ENTNFMUI2RUNCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4 ZHM0X3dKckt5SktPdE5nWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrTnjplr7/CweduTX5nw2LUigf0yrcyLk08kmyEI64sey81PA+2CFK sScQ8uLYIeHM2WLS7zL2/gfycj0CR7mKzJl+TKlSFGVGEISY8ZCw5hrdU168f5v5 5TWKBsqoYxUuUbq2RVgAr8fdcnBMXzx9wJuxBo4wq+nQUMcWsqQuFC8Vh/m76Yyz ng0ZDtWxpOdsIBecRPTzb4i0PW4INOG9mLsmkrdzKWJGSm8kMRKpkvLNb5VamEj0 LnzkKbWimgXoWg8y6GWo7rgW1/sBNJuMcuei1F011PmI0CaF4P+e+YH+jQ1h6Jjt wh3N1svLzDhE2gUEoeaaWulJIx56rt0v -----END CERTIFICATE-----Generated at Wed Nov 5 10:08:57 2025 by rpki-client