$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json) Hash identifier: fhBp+sGGWO1OZasI/J8ydpYPRtzVW8Yx/yuY2pmGtug= Subject key identifier: A7:5A:D2:97:27:6F:C6:A1:59:11:5F:CC:77:5A:DF:9D:80:3F:B0:BB Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft Manifest number: 0C78 Signing time: Sun 20 Jul 2025 18:18:23 +0000 Manifest this update: Sun 20 Jul 2025 18:18:23 +0000 Manifest next update: Sun 27 Jul 2025 18:18:23 +0000 Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: DRTic/9MLn/j6CuFwYk4EGx54Eeiz3G2N1IHp4Bv2bQ=) 2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: 4jaQnB9w67oOMyiG00onAIjQ5GTEi4FpaqMXIzq3/AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Validity Not Before: Jul 20 18:18:23 2025 GMT Not After : Jul 27 18:18:23 2025 GMT Subject: CN=687d32ef-2405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:a9:3c:00:bc:e6:e8:2c:97:2c:6d:2e:11: 8a:c7:57:73:da:82:66:af:9d:b9:9f:51:25:d9:8b: b5:d9:5d:cd:9d:54:b7:8f:a4:7f:d7:56:de:19:63: c0:26:ba:72:54:8d:c4:bc:05:53:44:b9:55:aa:bd: af:c2:1b:a4:60:01:be:1c:14:7c:a5:bb:dc:a5:12: 3e:07:5d:9e:ae:66:fc:c3:ad:65:56:24:36:f7:89: fd:f9:91:e8:48:33:95:3f:90:5d:82:36:33:b3:86: ec:14:7e:ce:06:d7:c4:a7:aa:07:bf:0b:f1:d1:06: d4:a2:11:9a:0c:8f:8c:2a:b8:35:39:7e:a7:a9:87: 8f:7a:63:f2:3b:c8:e8:5f:71:a5:03:6c:9c:88:d8: 40:86:b7:c5:60:d0:38:51:34:17:85:ab:d6:16:5b: 38:49:f6:35:fa:28:ba:43:c2:3b:3b:72:c0:6b:92: 8e:a2:e4:7b:41:d1:91:02:85:3e:d8:b4:03:03:34: 3b:05:c6:d7:a2:07:a6:6b:fe:6f:44:6a:2f:8c:97: 21:c2:be:2a:00:98:3c:3d:21:9b:2c:99:a9:20:9a: 8b:b7:a1:e5:08:6b:7f:d5:a6:2f:49:aa:6c:b0:79: 2e:13:14:d4:f0:ad:a0:40:b0:be:44:f3:d1:27:69: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5A:D2:97:27:6F:C6:A1:59:11:5F:CC:77:5A:DF:9D:80:3F:B0:BB X509v3 Authority Key Identifier: keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b2:ce:33:3e:22:e1:59:aa:e3:60:a9:62:f5:ba:4b:e1:fb: e1:b6:7b:19:aa:0d:f8:88:dc:43:b7:85:f2:b1:6f:73:34:44: 77:53:b2:4a:75:dd:81:39:a6:ed:e9:b8:f6:1e:ed:fb:18:b8: 25:7e:3d:cb:9c:d9:b7:3c:a2:ee:1d:7c:23:4a:c9:07:9d:6d: dd:8f:01:8e:65:66:fa:da:05:cb:09:30:7f:81:fb:ac:65:d0: 17:9b:a7:30:61:8d:b5:57:1b:fd:74:20:15:32:d6:bd:3f:36: 2c:08:7f:c4:42:9e:12:5d:08:e5:59:ec:af:a9:b5:76:0b:f7: 3e:a1:e1:bf:35:fe:2d:1d:97:e9:e5:16:ca:22:a3:bd:90:72: fa:0d:8f:dc:4b:fd:25:db:e5:96:fd:dd:9b:75:22:01:87:14: 79:f8:e3:a5:85:e3:87:fe:ec:9f:67:cc:bb:0d:c8:b1:ec:41: 3a:23:db:27:93:0c:77:88:99:b8:32:99:a3:e4:f5:5b:e3:de: d9:c4:f8:d4:49:76:73:16:1f:86:55:29:c4:e1:73:9a:33:00: 59:5c:22:9b:a2:86:b5:c5:d1:f8:83:73:e7:44:56:64:14:98: 86:7c:b3:99:58:18:19:de:3f:ac:71:35:25:6a:c4:a9:a1:37: a0:14:5f:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEY3RThCM0JCNEVGMTkyQjg3NjM2MDFEQjMyM0Y0REUy ODMxQTEwMUEwHhcNMjUwNzIwMTgxODIzWhcNMjUwNzI3MTgxODIzWjAYMRYwFAYD VQQDEw02ODdkMzJlZi0yNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSmpPAC85ugslyxtLhGKx1dz2oJmr525n1El2Yu12V3NnVS3j6R/11beGWPA JrpyVI3EvAVTRLlVqr2vwhukYAG+HBR8pbvcpRI+B12ermb8w61lViQ294n9+ZHo SDOVP5BdgjYzs4bsFH7OBtfEp6oHvwvx0QbUohGaDI+MKrg1OX6nqYePemPyO8jo X3GlA2yciNhAhrfFYNA4UTQXhavWFls4SfY1+ii6Q8I7O3LAa5KOouR7QdGRAoU+ 2LQDAzQ7BcbXogema/5vRGovjJchwr4qAJg8PSGbLJmpIJqLt6HlCGt/1aYvSaps sHkuExTU8K2gQLC+RPPRJ2m0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKda0pcn b8ahWRFfzHda352AP7C7MB8GA1UdIwQYMBaAFPfos7tO8ZK4djYB2zI/TeKDGhAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC8xNjMzM0RBRUZG QkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGtyaDJOZ0hiTWo5TjRvTWFF Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktaXp1MDd4a3JoMk5nSGJNajlONG9NYUVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC8xNjMzM0RBRUZGQkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGty aDJOZ0hiTWo5TjRvTWFFQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiss4zPiLhWarjYKli9bpL4fvhtnsZqg34iNxDt4XysW9zNER3U7JK dd2BOabt6bj2Hu37GLglfj3LnNm3PKLuHXwjSskHnW3djwGOZWb62gXLCTB/gfus ZdAXm6cwYY21Vxv9dCAVMta9PzYsCH/EQp4SXQjlWeyvqbV2C/c+oeG/Nf4tHZfp 5RbKIqO9kHL6DY/cS/0l2+WW/d2bdSIBhxR5+OOlheOH/uyfZ8y7Dcix7EE6I9sn kwx3iJm4Mpmj5PVb497ZxPjUSXZzFh+GVSnE4XOaMwBZXCKbooa1xdH4g3PnRFZk FJiGfLOZWBgZ3j+scTUlasSpoTegFF/s -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:20 2025 by rpki-client