$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json) Hash identifier: lj1wHmjmt7xWl+wrG4dyhXuiNoy4HdqYGMjV1ZBv7ag= Subject key identifier: F1:FA:66:73:B5:BE:36:45:35:51:97:E5:4C:C7:38:03:48:49:36:C1 Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Certificate serial: 0C90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft Manifest number: 0C89 Signing time: Fri 22 Aug 2025 18:21:51 +0000 Manifest this update: Fri 22 Aug 2025 18:21:50 +0000 Manifest next update: Fri 29 Aug 2025 18:21:50 +0000 Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: 6S6E4bRrDsM+vSvJhfLDwi9APo8KA/szzyQthaZZVOY=) 2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: 4jaQnB9w67oOMyiG00onAIjQ5GTEi4FpaqMXIzq3/AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3216 (0xc90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Validity Not Before: Aug 22 18:21:50 2025 GMT Not After : Aug 29 18:21:50 2025 GMT Subject: CN=68a8b53f-badd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:d0:20:d7:c0:7f:e2:04:9e:0e:76:c6:46: ec:51:0b:09:bf:5e:27:b4:92:26:c6:92:52:b0:7f: d8:02:47:c1:39:ed:dd:fc:e9:74:5a:75:8a:4f:31: 01:02:c8:35:d8:31:ac:70:66:2e:6a:9c:be:3c:09: 9e:8e:46:6f:cd:55:ff:3e:7c:fa:73:de:69:63:50: 7b:ca:51:66:e8:9a:68:75:71:c3:e8:96:ff:60:54: a8:51:0d:b6:d5:65:e4:ae:cb:99:c0:9f:db:98:eb: 40:52:54:5e:af:04:90:c9:ec:da:ab:8d:1f:3d:4b: 81:f4:57:d6:3b:50:de:67:9e:0b:a3:cb:32:c0:8b: 7a:b2:8a:23:31:93:c4:fc:56:1b:fa:5c:ce:8b:12: c1:eb:bc:0c:2a:aa:9f:1b:19:5b:30:0b:d9:51:54: f2:37:ed:f0:74:ae:16:b3:6d:ca:f5:ab:01:9a:1a: 79:62:22:d0:c3:3b:a0:0b:53:9d:31:73:a5:df:ec: af:5c:be:e9:7a:c4:ae:78:a5:a1:ee:bc:05:c9:22: 7f:18:d0:36:72:93:ba:e7:06:27:a2:c1:5e:5c:91: 0f:8a:7b:8a:56:db:9a:6f:8d:0b:75:dc:f5:2a:e7: d5:21:22:f8:64:73:cf:8e:a9:27:ae:14:23:b2:75: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FA:66:73:B5:BE:36:45:35:51:97:E5:4C:C7:38:03:48:49:36:C1 X509v3 Authority Key Identifier: keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a1:bc:ff:b5:bf:23:19:96:1b:ef:12:f0:1a:7d:4d:5d:c7: 0a:e1:bf:49:3d:61:2b:59:16:2a:33:a0:77:d8:36:a7:8a:6f: 2f:9b:cc:1f:a0:4e:79:86:49:2e:77:c9:5b:b8:2d:60:eb:97: 37:dd:9c:6c:8f:ac:e9:71:5f:26:59:73:47:3d:2f:7d:0a:97: 89:eb:c5:e2:b9:ce:8b:66:da:47:79:c5:06:32:70:8c:e8:77: 22:9a:c2:00:4c:a0:9e:db:18:5b:34:0f:5e:48:3d:4e:a9:c3: 8e:44:a1:29:be:96:39:19:ab:18:d5:8c:f0:cc:93:b7:30:22: 17:27:f3:1c:89:52:bf:9c:7a:1e:7e:12:54:67:ea:85:51:db: 31:c8:6d:e9:cb:9c:7e:dc:10:56:5f:bf:95:0d:b1:37:6a:ff: 37:18:38:0e:b3:1c:ec:ff:1b:36:26:02:ba:7b:43:5d:87:f8: b0:6e:f4:51:e2:28:76:02:b2:d7:bf:78:88:7e:fb:cb:1a:00: cd:5a:28:f9:81:04:c5:6b:67:9a:df:06:6b:f9:6d:46:82:78: 6d:51:0e:dc:62:c3:5f:a5:24:ec:41:87:c9:2d:7e:3f:2c:43: 76:90:ec:44:24:df:6a:15:52:dc:71:2a:07:d1:eb:43:6f:e7: 99:18:ce:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEY3RThCM0JCNEVGMTkyQjg3NjM2MDFEQjMyM0Y0REUy ODMxQTEwMUEwHhcNMjUwODIyMTgyMTUwWhcNMjUwODI5MTgyMTUwWjAYMRYwFAYD VQQDEw02OGE4YjUzZi1iYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwfQINfAf+IEng52xkbsUQsJv14ntJImxpJSsH/YAkfBOe3d/Ol0WnWKTzEB Asg12DGscGYuapy+PAmejkZvzVX/Pnz6c95pY1B7ylFm6JpodXHD6Jb/YFSoUQ22 1WXkrsuZwJ/bmOtAUlRerwSQyezaq40fPUuB9FfWO1DeZ54Lo8sywIt6soojMZPE /FYb+lzOixLB67wMKqqfGxlbMAvZUVTyN+3wdK4Ws23K9asBmhp5YiLQwzugC1Od MXOl3+yvXL7pesSueKWh7rwFySJ/GNA2cpO65wYnosFeXJEPinuKVtuab40Lddz1 KufVISL4ZHPPjqknrhQjsnXCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH6ZnO1 vjZFNVGX5UzHOANISTbBMB8GA1UdIwQYMBaAFPfos7tO8ZK4djYB2zI/TeKDGhAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC8xNjMzM0RBRUZG QkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGtyaDJOZ0hiTWo5TjRvTWFF Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktaXp1MDd4a3JoMk5nSGJNajlONG9NYUVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC8xNjMzM0RBRUZGQkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGty aDJOZ0hiTWo5TjRvTWFFQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTobz/tb8jGZYb7xLwGn1NXccK4b9JPWErWRYqM6B32Danim8vm8wf oE55hkkud8lbuC1g65c33Zxsj6zpcV8mWXNHPS99CpeJ68Xiuc6LZtpHecUGMnCM 6HcimsIATKCe2xhbNA9eSD1OqcOORKEpvpY5GasY1YzwzJO3MCIXJ/MciVK/nHoe fhJUZ+qFUdsxyG3py5x+3BBWX7+VDbE3av83GDgOsxzs/xs2JgK6e0Ndh/iwbvRR 4ih2ArLXv3iIfvvLGgDNWij5gQTFa2ea3wZr+W1GgnhtUQ7cYsNfpSTsQYfJLX4/ LEN2kOxEJN9qFVLccSoH0etDb+eZGM5T -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:44 2025 by rpki-client