$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json) Hash identifier: WfFQd2zj5UPkDGg6kmOcSB72TUqDh+13C7iT7p3ts5k= Subject key identifier: 7A:91:F8:FF:DA:25:B2:90:32:65:11:CB:81:69:02:C9:49:2F:53:1D Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft Manifest number: 0C42 Signing time: Fri 04 Apr 2025 18:26:30 +0000 Manifest this update: Fri 04 Apr 2025 18:26:29 +0000 Manifest next update: Fri 11 Apr 2025 18:26:29 +0000 Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: 6Mb4FjJmG626OVnzDRQyNbH6gZBfQ/cqPtLG9qLBgB0=) 2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: 4jaQnB9w67oOMyiG00onAIjQ5GTEi4FpaqMXIzq3/AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8 Validity Not Before: Apr 4 18:26:29 2025 GMT Not After : Apr 11 18:26:29 2025 GMT Subject: CN=67f02456-acb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:e4:9b:c9:51:40:46:5a:0a:82:1a:f9:cd: 88:a1:4f:fb:f4:11:1d:b6:8b:99:cb:4a:72:a5:f7: 80:ce:82:03:79:1b:c4:b7:4b:71:6e:e0:2b:68:d0: 9f:43:59:cd:0c:e1:84:e6:d2:8b:bc:b2:81:f9:52: 90:80:f6:c9:a5:6f:0d:46:3f:d6:93:06:3c:d5:63: 55:48:3b:60:84:8c:bf:f0:8a:92:41:9d:a6:26:c9: bf:66:5f:77:bc:c5:ae:cd:01:ae:cc:a8:55:13:5d: 4c:d6:6f:99:44:9f:f7:af:47:0f:59:e4:2a:75:7b: c6:f4:ca:13:5c:c4:bb:9b:93:17:a9:d9:99:23:28: 5d:a9:85:0f:7e:1e:fd:22:00:b9:4a:d5:72:c3:15: 48:ec:44:6e:8f:75:16:e1:ba:81:4f:e3:f2:0b:88: 45:2f:ba:c4:92:9f:24:e5:05:74:ba:24:aa:29:24: a9:64:f6:7d:fb:93:44:64:0f:c6:80:30:c1:db:9a: d2:6e:8b:af:48:30:af:bf:4c:d0:dc:93:10:ea:b4: d7:2a:7f:6d:4a:05:aa:21:00:28:b6:e6:cd:fe:4f: a9:b8:41:2d:7f:b0:e4:ec:91:81:9d:88:52:fc:ef: cf:00:5a:d1:84:a4:87:ff:62:63:26:be:81:93:8e: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:91:F8:FF:DA:25:B2:90:32:65:11:CB:81:69:02:C9:49:2F:53:1D X509v3 Authority Key Identifier: keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b0:7c:28:e4:c7:24:d6:ae:62:4f:4e:96:e0:c7:9b:3a:4d: c3:6e:65:fc:83:8f:89:0d:dc:8d:ab:ba:41:e2:b9:01:92:40: fa:c1:94:9c:81:99:06:ad:28:d7:cf:6b:da:82:2d:0a:f9:94: a3:7e:ce:71:34:25:6f:05:65:75:65:55:54:5e:e9:de:57:70: 7d:3f:86:3c:f5:f8:7d:40:5f:1e:72:bd:5f:c7:24:49:92:d5: 6d:04:d2:02:82:1b:e4:7f:da:d5:cf:9e:7a:29:82:7d:3d:58: d4:e4:ec:a3:c0:ba:43:ba:d8:75:aa:d1:a4:0c:58:4d:1d:b8: 1a:e5:21:f9:4e:1f:7f:4a:15:31:94:f3:52:d9:16:24:61:ee: cc:32:e8:64:c6:11:bb:43:52:9f:6b:c5:bf:52:fb:d7:53:8e: df:31:87:e2:dd:a3:0a:ae:16:a1:60:e8:b8:df:c3:77:0b:58: e3:9f:19:a6:f9:e0:24:aa:4e:4c:b3:0d:30:25:7f:fa:f1:76: 5e:7c:d4:e7:49:4c:af:cf:79:fb:17:47:cd:72:79:7d:bd:40: 69:39:b9:9e:37:c1:3c:af:c5:1a:f1:a8:99:84:66:cd:81:6a: e1:94:3b:4e:bb:52:bf:57:7e:cd:b6:c4:5b:18:4e:68:a9:a6: 2c:18:28:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEY3RThCM0JCNEVGMTkyQjg3NjM2MDFEQjMyM0Y0REUy ODMxQTEwMUEwHhcNMjUwNDA0MTgyNjI5WhcNMjUwNDExMTgyNjI5WjAYMRYwFAYD VQQDEw02N2YwMjQ1Ni1hY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsfkm8lRQEZaCoIa+c2IoU/79BEdtouZy0pypfeAzoIDeRvEt0txbuAraNCf Q1nNDOGE5tKLvLKB+VKQgPbJpW8NRj/WkwY81WNVSDtghIy/8IqSQZ2mJsm/Zl93 vMWuzQGuzKhVE11M1m+ZRJ/3r0cPWeQqdXvG9MoTXMS7m5MXqdmZIyhdqYUPfh79 IgC5StVywxVI7ERuj3UW4bqBT+PyC4hFL7rEkp8k5QV0uiSqKSSpZPZ9+5NEZA/G gDDB25rSbouvSDCvv0zQ3JMQ6rTXKn9tSgWqIQAotubN/k+puEEtf7Dk7JGBnYhS /O/PAFrRhKSH/2JjJr6Bk44vkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqR+P/a JbKQMmURy4FpAslJL1MdMB8GA1UdIwQYMBaAFPfos7tO8ZK4djYB2zI/TeKDGhAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC8xNjMzM0RBRUZG QkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGtyaDJOZ0hiTWo5TjRvTWFF Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktaXp1MDd4a3JoMk5nSGJNajlONG9NYUVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC8xNjMzM0RBRUZGQkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGty aDJOZ0hiTWo5TjRvTWFFQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjsHwo5Mck1q5iT06W4MebOk3DbmX8g4+JDdyNq7pB4rkBkkD6wZSc gZkGrSjXz2vagi0K+ZSjfs5xNCVvBWV1ZVVUXuneV3B9P4Y89fh9QF8ecr1fxyRJ ktVtBNICghvkf9rVz556KYJ9PVjU5OyjwLpDuth1qtGkDFhNHbga5SH5Th9/ShUx lPNS2RYkYe7MMuhkxhG7Q1Kfa8W/UvvXU47fMYfi3aMKrhahYOi438N3C1jjnxmm +eAkqk5Msw0wJX/68XZefNTnSUyvz3n7F0fNcnl9vUBpObmeN8E8r8Ua8aiZhGbN gWrhlDtOu1K/V37NtsRbGE5oqaYsGChi -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:40 2025 by rpki-client