$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft File: 9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json) Hash identifier: Z5ZtU6uqe7mK6+k2Out/VYcX5j14WLgI8Tz2iBwYNpc= Subject key identifier: E7:94:6A:46:43:91:51:59:DE:B7:19:16:0B:7F:F6:27:98:68:75:27 Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A Certificate issuer: /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft Manifest number: 0CAE Signing time: Sun 02 Nov 2025 18:12:16 +0000 Manifest this update: Sun 02 Nov 2025 18:12:16 +0000 Manifest next update: Sun 09 Nov 2025 18:12:16 +0000 Files and hashes: 1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: AdZ1IKGNtUyG+T54EguIOx6Bdpqeo+K7BLN/1ZlyXL0=) 2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: 4jaQnB9w67oOMyiG00onAIjQ5GTEi4FpaqMXIzq3/AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A Validity Not Before: Nov 2 18:12:16 2025 GMT Not After : Nov 9 18:12:16 2025 GMT Subject: CN=69079f00-07df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:63:5e:09:96:c9:54:72:6d:fe:d6:5d:8f: bd:87:52:32:ae:70:10:2f:a6:4e:f1:18:6d:18:46: 02:04:10:84:46:50:fd:cb:6e:e0:ff:21:70:4f:f4: ab:48:02:07:20:69:25:20:6e:ed:18:ce:d4:9b:16: ac:75:4a:ba:2d:88:94:9a:51:7b:4b:8e:19:98:80: c1:0c:6f:fc:9a:84:cf:25:93:0d:96:9e:c8:f8:36: df:30:f8:c3:fd:6d:15:d6:16:ac:13:5e:e9:d1:47: 2c:76:ec:76:04:88:43:7e:b1:1d:3b:da:ac:7a:f3: 1d:b2:64:f1:46:93:d7:c7:6d:41:8d:88:ea:ea:3e: e1:b1:61:39:70:2a:f8:8b:4d:73:23:64:67:4a:74: 37:20:0a:79:d9:56:1d:ea:c6:e6:ed:d5:f6:8f:ea: 0d:c5:0a:79:c5:02:87:51:1d:42:db:32:40:bc:96: 6f:53:d7:aa:64:7e:9a:a1:2b:da:f6:38:80:e4:79: a0:9d:0d:a5:9a:73:af:10:13:01:e8:da:93:11:e4: c5:1f:e2:71:a3:9e:18:09:3c:c4:11:46:8f:2f:5a: 50:e3:5f:26:e9:49:2a:d6:1b:41:1a:75:74:51:32: d5:19:4b:04:8d:5e:2e:18:6d:a9:3d:54:fc:fc:86: 87:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:6A:46:43:91:51:59:DE:B7:19:16:0B:7F:F6:27:98:68:75:27 X509v3 Authority Key Identifier: keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:fc:29:4d:b3:c4:b2:e5:78:10:1e:80:8b:57:77:26:31:f8: 8b:4c:f3:08:9e:b1:b7:5b:3f:1d:0b:fe:6e:23:12:0e:62:e5: 42:84:bc:87:ad:dc:18:1f:bf:f5:b7:64:bb:36:cc:59:a0:75: b2:d5:07:0e:f8:ff:8b:02:66:60:c9:cf:a6:a0:c5:2f:b4:e4: 8b:23:dc:54:97:45:ea:91:09:7a:65:8f:77:1b:0c:71:9c:09: c7:77:2b:b7:27:1c:65:e4:db:24:ac:7e:5e:a2:5f:0d:81:d9: f3:b4:b7:02:98:0c:3b:d8:e4:44:03:5e:a3:3f:9e:63:e9:2b: 58:27:8a:30:49:92:9e:21:05:d2:94:b8:f6:43:5a:e3:52:60: 64:b0:e0:3c:9a:10:43:af:c2:d5:13:78:2b:69:7e:06:44:fd: 57:7c:ac:f6:8d:92:b5:6f:8b:0c:3d:44:28:88:eb:62:3b:a6: 4d:ae:c4:8a:0e:ea:3e:4f:a8:b2:63:7f:dc:d9:f0:27:c2:57: 55:82:b4:f6:d8:cb:d2:ca:9b:51:0a:78:81:07:46:48:61:72: 00:48:75:57:9d:d1:59:21:f5:3d:a7:38:2f:0d:77:20:be:5e: 53:c9:84:46:c9:70:ed:b2:f3:53:a1:45:d6:f4:40:62:15:ff: da:5b:15:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2RDgxMTAvBgNVBAUTKEY3RThCM0JCNEVGMTkyQjg3NjM2MDFEQjMyM0Y0REUy ODMxQTEwMUEwHhcNMjUxMTAyMTgxMjE2WhcNMjUxMTA5MTgxMjE2WjAYMRYwFAYD VQQDEw02OTA3OWYwMC0wN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tJjXgmWyVRybf7WXY+9h1IyrnAQL6ZO8RhtGEYCBBCERlD9y27g/yFwT/Sr SAIHIGklIG7tGM7UmxasdUq6LYiUmlF7S44ZmIDBDG/8moTPJZMNlp7I+DbfMPjD /W0V1hasE17p0Ucsdux2BIhDfrEdO9qsevMdsmTxRpPXx21BjYjq6j7hsWE5cCr4 i01zI2RnSnQ3IAp52VYd6sbm7dX2j+oNxQp5xQKHUR1C2zJAvJZvU9eqZH6aoSva 9jiA5HmgnQ2lmnOvEBMB6NqTEeTFH+Jxo54YCTzEEUaPL1pQ418m6Ukq1htBGnV0 UTLVGUsEjV4uGG2pPVT8/IaHmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeUakZD kVFZ3rcZFgt/9ieYaHUnMB8GA1UdIwQYMBaAFPfos7tO8ZK4djYB2zI/TeKDGhAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjZEOC8xNjMzM0RBRUZG QkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGtyaDJOZ0hiTWo5TjRvTWFF Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktaXp1MDd4a3JoMk5nSGJNajlONG9NYUVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjZEOC8xNjMzM0RBRUZGQkMxMUU5QUJCQjE0NTFDNEY5QUUwMi85LWl6dTA3eGty aDJOZ0hiTWo5TjRvTWFFQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp/ClNs8Sy5XgQHoCLV3cmMfiLTPMInrG3Wz8dC/5uIxIOYuVChLyH rdwYH7/1t2S7NsxZoHWy1QcO+P+LAmZgyc+moMUvtOSLI9xUl0XqkQl6ZY93Gwxx nAnHdyu3Jxxl5NskrH5eol8NgdnztLcCmAw72OREA16jP55j6StYJ4owSZKeIQXS lLj2Q1rjUmBksOA8mhBDr8LVE3graX4GRP1XfKz2jZK1b4sMPUQoiOtiO6ZNrsSK Duo+T6iyY3/c2fAnwldVgrT22MvSyptRCniBB0ZIYXIASHVXndFZIfU9pzgvDXcg vl5TyYRGyXDtsvNToUXW9EBiFf/aWxUA -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:36 2025 by rpki-client