$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json) Hash identifier: qNWu05tsNWZUhJYrvqkpaGydIhIVgQ7l/kY6k9hwn5w= Subject key identifier: 0C:FE:4F:78:DC:76:52:85:0D:80:59:5A:B9:34:34:28:E5:83:F8:8D Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Certificate serial: 0CAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft Manifest number: 0CA6 Signing time: Sat 18 Oct 2025 18:55:57 +0000 Manifest this update: Sat 18 Oct 2025 18:55:56 +0000 Manifest next update: Sat 25 Oct 2025 18:55:56 +0000 Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: D+HcDweKToXn+2Qk6E0vLE+uIH5zkELUHiicNvG6y4M=) 2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: 4jaQnB9w67oOMyiG00onAIjQ5GTEi4FpaqMXIzq3/AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3245 (0xcad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Validity Not Before: Oct 18 18:55:56 2025 GMT Not After : Oct 25 18:55:56 2025 GMT Subject: CN=68f3e2bc-4eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:2b:d9:69:7c:1a:d8:d6:b3:b9:cb:f0:48: 17:df:ea:bf:ba:a8:35:79:b0:04:9f:3a:81:1c:d9: ce:71:7d:e8:52:0e:d7:6e:68:fb:94:91:56:4d:a5: af:24:22:cc:e3:8f:07:54:e3:ce:43:8c:09:51:58: cc:a0:49:4f:5e:b6:87:cf:d2:63:f2:57:d9:08:9f: 5e:ad:0d:22:b2:19:5a:1f:43:d7:0a:63:0d:70:3d: 2e:5f:60:67:89:6d:05:03:1e:c6:15:bf:52:ce:79: 87:e4:03:d0:f3:90:99:a6:48:bd:10:8f:eb:11:3d: f6:e1:12:55:b2:e9:82:69:92:dd:ad:f1:8d:2c:a7: ff:14:7d:e2:fb:7c:cb:d3:f3:43:c9:aa:3f:62:9f: 90:f8:68:c8:2f:57:ab:26:44:16:35:f8:9f:23:40: 1f:3e:ab:2d:3d:76:10:e0:f9:c9:aa:db:af:fc:93: 49:55:97:d7:65:d3:d7:e8:4a:99:9a:5a:3e:de:fa: 58:b7:d4:f3:f8:4f:11:9a:7c:f0:37:e1:d1:9a:0a: 53:da:8e:11:5e:06:d1:71:dc:5f:d7:32:bc:8a:65: 68:67:2d:64:c4:b9:fa:01:b5:6e:27:91:a1:7f:4c: f9:25:55:27:d1:d9:76:76:d8:1b:ac:bc:91:b1:84: 24:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FE:4F:78:DC:76:52:85:0D:80:59:5A:B9:34:34:28:E5:83:F8:8D X509v3 Authority Key Identifier: keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:98:9c:fc:e7:ee:ce:ac:0f:22:5b:d7:d9:57:3b:64:b2:b0: a8:9f:01:f4:7b:83:cf:92:d0:34:05:ea:d0:13:e5:fb:26:c2: 34:77:09:24:58:8d:aa:14:ee:95:de:06:7c:cf:5a:92:ec:24: 97:39:e7:91:5f:af:88:d0:96:15:fe:9c:82:68:44:f5:03:e7: 6c:7e:39:ee:ad:b6:95:1e:f5:8b:fc:1d:89:9b:08:ca:c2:2b: 53:d2:59:69:42:40:50:6c:11:a9:e8:ec:ca:42:6d:0e:57:ee: 0b:f4:25:59:11:e7:b8:63:af:8d:22:95:ac:9c:fe:bb:58:bf: 9f:45:58:cb:f2:12:76:e8:f0:05:35:a8:01:17:a9:bb:ab:50: 0a:90:53:85:5c:26:7e:b1:33:4c:a4:b1:2d:74:a1:d5:46:47: 84:c6:f2:b6:4a:ae:66:ff:1c:1e:46:df:99:ba:25:ed:3b:5c: 7c:c3:f7:3d:ed:aa:10:4e:da:b9:67:6f:5d:0d:85:be:9d:e0: 0c:9d:d3:7b:aa:35:d0:74:cc:8e:3d:80:24:50:30:65:94:8d: 10:84:4d:1c:18:47:c8:01:e3:f3:76:e5:28:56:2e:81:b8:60: 7c:0e:fe:57:4a:9f:4d:df:4e:8b:8c:03:52:f5:5c:0e:6b:03: d0:0f:63:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEY3RThCM0JCNEVGMTkyQjg3NjM2MDFEQjMyM0Y0REUy ODMxQTEwMUEwHhcNMjUxMDE4MTg1NTU2WhcNMjUxMDI1MTg1NTU2WjAYMRYwFAYD VQQDEw02OGYzZTJiYy00ZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx08r2Wl8GtjWs7nL8EgX3+q/uqg1ebAEnzqBHNnOcX3oUg7Xbmj7lJFWTaWv JCLM448HVOPOQ4wJUVjMoElPXraHz9Jj8lfZCJ9erQ0ishlaH0PXCmMNcD0uX2Bn iW0FAx7GFb9SznmH5APQ85CZpki9EI/rET324RJVsumCaZLdrfGNLKf/FH3i+3zL 0/NDyao/Yp+Q+GjIL1erJkQWNfifI0AfPqstPXYQ4PnJqtuv/JNJVZfXZdPX6EqZ mlo+3vpYt9Tz+E8RmnzwN+HRmgpT2o4RXgbRcdxf1zK8imVoZy1kxLn6AbVuJ5Gh f0z5JVUn0dl2dtgbrLyRsYQkNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAz+T3jc dlKFDYBZWrk0NCjlg/iNMB8GA1UdIwQYMBaAFPfos7tO8ZK4djYB2zI/TeKDGhAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC8xNjMzM0RBRUZG QkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGtyaDJOZ0hiTWo5TjRvTWFF Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktaXp1MDd4a3JoMk5nSGJNajlONG9NYUVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC8xNjMzM0RBRUZGQkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGty aDJOZ0hiTWo5TjRvTWFFQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEmJz85+7OrA8iW9fZVztksrConwH0e4PPktA0BerQE+X7JsI0dwkk WI2qFO6V3gZ8z1qS7CSXOeeRX6+I0JYV/pyCaET1A+dsfjnurbaVHvWL/B2JmwjK witT0llpQkBQbBGp6OzKQm0OV+4L9CVZEee4Y6+NIpWsnP67WL+fRVjL8hJ26PAF NagBF6m7q1AKkFOFXCZ+sTNMpLEtdKHVRkeExvK2Sq5m/xweRt+ZuiXtO1x8w/c9 7aoQTtq5Z29dDYW+neAMndN7qjXQdMyOPYAkUDBllI0QhE0cGEfIAePzduUoVi6B uGB8Dv5XSp9N306LjANS9VwOawPQD2Oc -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:34 2025 by rpki-client