$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: PE8BLeoOQV3KPF4EQ4+fchjms/9ZIXUdYRD/tC58QTE= Subject key identifier: 94:87:AB:B5:1B:9B:24:A9:87:9B:2F:DD:4D:4A:5E:4F:AF:62:66:D5 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 95 Signing time: Sun 19 Oct 2025 09:39:32 +0000 Manifest this update: Sun 19 Oct 2025 09:39:31 +0000 Manifest next update: Sun 26 Oct 2025 09:39:31 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: V0GqOKrB0w366acXVNAc/9NgdxyXi1U7QmHAzzJqvrk=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Oct 19 09:39:31 2025 GMT Not After : Oct 26 09:39:31 2025 GMT Subject: CN=68f4b1d4-c9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d7:c8:c1:fa:a4:79:84:e7:9c:f1:e6:5c:6c: 32:5c:f1:88:80:e1:06:6a:68:df:9a:89:c0:60:1c: f8:2b:d5:89:cb:98:90:f2:bc:41:0c:98:1a:e0:df: 78:7f:7c:25:f5:d7:21:aa:73:82:15:bd:91:59:5b: 65:85:76:45:a9:33:d6:81:48:3e:65:4c:2d:11:c0: 94:31:90:65:0e:72:db:f9:02:f7:59:3d:92:91:f3: 6b:4f:82:19:34:7a:73:c0:e9:a2:50:f5:99:6e:00: c6:f6:f1:94:cf:53:23:c6:91:fe:ac:b5:21:db:7c: 1d:92:3a:a2:7f:9f:09:26:88:e7:d1:49:46:06:3d: c1:b8:eb:96:0b:cc:f7:b9:f5:31:43:1f:b3:6d:af: ff:38:ac:62:29:e5:6b:6a:9f:a5:31:68:1a:f4:08: ff:7e:e5:2e:e3:43:55:17:01:54:1d:dd:f3:97:dd: af:73:6c:ef:dd:cb:a2:c9:97:53:52:1e:58:f1:83: 01:5e:52:01:51:98:72:db:b4:81:20:62:81:46:1d: b9:d9:38:6f:af:a1:13:6a:01:21:cf:d4:e0:29:c7: 2b:db:b9:8a:7b:7f:8f:bd:95:38:5a:38:a1:4b:f7: 38:80:8e:ca:85:49:53:3f:69:d8:ec:33:a5:8a:6e: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:87:AB:B5:1B:9B:24:A9:87:9B:2F:DD:4D:4A:5E:4F:AF:62:66:D5 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:98:fe:f9:71:36:31:e1:21:ed:c7:0d:a4:27:ec:99:59:e5: f8:64:32:79:29:40:37:b4:40:18:15:be:9f:51:c8:48:0a:bc: 91:8f:6b:51:ef:b3:77:80:ff:fc:78:32:21:11:0b:76:90:a7: a4:5a:06:0f:39:4b:44:30:dd:dc:eb:5c:3e:85:40:61:98:a9: d4:f5:0b:16:71:0a:01:9f:8e:25:58:ca:11:3d:7b:59:37:07: 30:d9:f4:f9:c6:ff:28:b3:0b:17:51:fb:4a:87:d3:c5:70:f9: 7a:5b:9a:eb:e9:72:78:43:60:66:e6:0b:74:57:6e:f2:f4:b7: f5:fe:e9:54:d8:51:59:63:c4:c0:a3:06:89:7a:a4:d4:ed:56: eb:08:f2:e8:05:d2:ce:0c:5e:b8:82:f8:f4:97:92:6e:22:cb: 27:a9:4a:bc:1a:1b:b6:f5:8e:b9:f5:7d:66:3b:3b:22:04:8b: a7:4a:c1:02:77:59:2a:94:c7:0d:58:b9:d1:3d:b5:08:e9:df: cb:cc:63:35:8f:fa:85:a0:2d:55:86:71:dd:82:d5:af:e4:08: 5b:6d:7f:c8:35:74:39:d4:a0:69:ce:e6:21:6c:cd:c2:16:b0: ee:8b:02:ed:9e:3f:e5:1e:ff:02:57:34:23:3a:27:b9:f2:94: 51:cf:5a:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4NTQxMTAvBgNVBAUTKDhCMzQ3MUI5MEI3QTVCQzc2Q0UzRkMwOUFDQUM4OTI4 RUI0RDgxNzkwHhcNMjUxMDE5MDkzOTMxWhcNMjUxMDI2MDkzOTMxWjAYMRYwFAYD VQQDEw02OGY0YjFkNC1jOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tfIwfqkeYTnnPHmXGwyXPGIgOEGamjfmonAYBz4K9WJy5iQ8rxBDJga4N94 f3wl9dchqnOCFb2RWVtlhXZFqTPWgUg+ZUwtEcCUMZBlDnLb+QL3WT2SkfNrT4IZ NHpzwOmiUPWZbgDG9vGUz1MjxpH+rLUh23wdkjqif58JJojn0UlGBj3BuOuWC8z3 ufUxQx+zba//OKxiKeVrap+lMWga9Aj/fuUu40NVFwFUHd3zl92vc2zv3cuiyZdT Uh5Y8YMBXlIBUZhy27SBIGKBRh252Thvr6ETagEhz9TgKccr27mKe3+PvZU4Wjih S/c4gI7KhUlTP2nY7DOlim6aNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSHq7Ub mySph5sv3U1KXk+vYmbVMB8GA1UdIwQYMBaAFIs0cbkLelvHbOP8CaysiSjrTYF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ENTNFMUI2RUNC MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4ZHM0X3dKckt5SktPdE5n WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njg1NC9ENTNFMUI2RUNCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4 ZHM0X3dKckt5SktPdE5nWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXmP75cTYx4SHtxw2kJ+yZWeX4ZDJ5KUA3tEAYFb6fUchICryRj2tR 77N3gP/8eDIhEQt2kKekWgYPOUtEMN3c61w+hUBhmKnU9QsWcQoBn44lWMoRPXtZ Nwcw2fT5xv8oswsXUftKh9PFcPl6W5rr6XJ4Q2Bm5gt0V27y9Lf1/ulU2FFZY8TA owaJeqTU7VbrCPLoBdLODF64gvj0l5JuIssnqUq8Ghu29Y659X1mOzsiBIunSsEC d1kqlMcNWLnRPbUI6d/LzGM1j/qFoC1VhnHdgtWv5AhbbX/INXQ51KBpzuYhbM3C FrDuiwLtnj/lHv8CVzQjOie58pRRz1rs -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:21 2025 by rpki-client