$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: vb3+7LNXckZmGFmtZ83oF91y7uycoiJCYo4jkbjr+sU= Subject key identifier: 86:C1:40:04:2F:E6:A1:74:0D:46:27:1D:24:E9:5D:62:31:3C:0A:BB Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 0781 Signing time: Sun 20 Jul 2025 21:36:20 +0000 Manifest this update: Sun 20 Jul 2025 21:36:20 +0000 Manifest next update: Sun 27 Jul 2025 21:36:20 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: E1LO50TY+GYkNZYnYDmidRdyjl2dFj/93Xn+i3kvDks=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: sPnbljaDBmWrfqdfFlvNku+IoDBHr9vsXcs9cIAu9pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Jul 20 21:36:20 2025 GMT Not After : Jul 27 21:36:20 2025 GMT Subject: CN=687d6154-a1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:2b:3d:7f:ce:ee:75:55:0d:a0:3a:2f:75: 32:49:37:ee:cf:9c:b1:4b:5e:5d:e4:5e:ab:07:5b: 73:30:e2:85:82:98:39:29:f4:51:62:1b:85:99:f5: 32:d4:b2:59:d8:90:1c:bf:1f:57:a7:74:18:3e:91: c9:84:7a:90:84:9d:44:0c:d3:08:38:6c:79:95:dc: cb:6a:a3:36:67:3f:14:c1:bb:9b:bf:75:d8:71:f6: 8f:4a:a5:51:c1:03:cd:6f:7f:03:24:ca:da:92:2e: 99:5b:c3:75:ec:9c:c2:be:b9:65:84:1a:8e:7a:39: 9c:6a:d6:fe:58:10:dd:56:6a:34:e2:44:da:d6:32: f2:03:d8:b0:0d:46:36:e5:18:55:8a:3c:57:c1:c1: b0:8b:ae:7f:73:44:61:aa:75:38:e0:d8:50:70:b5: bc:87:c5:8f:8a:ca:1c:6b:de:88:f4:cd:6a:df:64: f8:8c:89:94:59:86:9e:a9:17:0e:ef:88:9a:d9:1e: b5:2f:97:a0:7f:7b:8c:ac:bc:36:cf:6e:df:54:3b: 71:21:97:63:8b:c1:f0:64:e2:96:8e:d7:e2:82:8a: c7:16:4f:17:d5:7c:35:4f:b9:c0:88:07:94:e8:a1: 07:a9:85:bc:11:3f:d1:43:ce:9b:58:17:ca:14:7d: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C1:40:04:2F:E6:A1:74:0D:46:27:1D:24:E9:5D:62:31:3C:0A:BB X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:01:a5:bf:c8:ba:ad:88:b5:b5:eb:bc:a4:56:22:50:a1:dd: be:a4:69:a7:67:ae:94:75:2d:b1:4f:11:a3:65:a8:e8:f6:da: 5b:d7:a3:39:2f:9b:65:34:e7:6d:b3:a9:e9:2d:97:47:69:61: d9:a8:b1:33:88:40:b5:8a:c8:63:bb:38:d7:c6:24:83:da:bd: 16:65:20:d6:38:8e:be:1a:21:49:f1:a0:7c:3f:c0:69:5c:fa: e6:bc:4b:6e:33:2d:73:64:f9:ae:40:dd:4f:ae:ed:ba:cb:d5: db:c2:34:bb:ea:c4:20:78:2b:1b:e1:40:03:86:ed:e5:45:82: 1a:76:c3:7e:98:1b:bf:6e:f3:09:68:a6:94:6d:8f:0d:4e:e6: 98:76:91:4e:2b:82:68:36:d7:7c:11:2c:7a:ad:80:18:f7:54: c3:1f:1b:fc:df:75:d1:d0:35:30:5b:cc:96:6a:ed:d5:e8:05: 42:06:3b:87:06:a0:22:22:b1:b2:6d:8d:a7:12:e3:a3:51:fa: ef:ea:6a:52:32:87:bb:a6:88:17:45:3c:b5:ac:bf:71:ad:44: ce:f2:66:18:6a:b9:59:c7:c1:fd:0e:1c:64:34:18:ee:e6:8c: 7d:55:2b:6c:40:c6:7e:64:86:65:22:01:86:58:f9:aa:c4:f2: 23:99:0e:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUwNzIwMjEzNjIwWhcNMjUwNzI3MjEzNjIwWjAYMRYwFAYD VQQDEw02ODdkNjE1NC1hMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28krPX/O7nVVDaA6L3UySTfuz5yxS15d5F6rB1tzMOKFgpg5KfRRYhuFmfUy 1LJZ2JAcvx9Xp3QYPpHJhHqQhJ1EDNMIOGx5ldzLaqM2Zz8Uwbubv3XYcfaPSqVR wQPNb38DJMraki6ZW8N17JzCvrllhBqOejmcatb+WBDdVmo04kTa1jLyA9iwDUY2 5RhVijxXwcGwi65/c0RhqnU44NhQcLW8h8WPisoca96I9M1q32T4jImUWYaeqRcO 74ia2R61L5egf3uMrLw2z27fVDtxIZdji8HwZOKWjtfigorHFk8X1Xw1T7nAiAeU 6KEHqYW8ET/RQ86bWBfKFH0bNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbBQAQv 5qF0DUYnHSTpXWIxPAq7MB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADAaW/yLqtiLW167ykViJQod2+pGmnZ66UdS2xTxGjZajo9tpb16M5 L5tlNOdts6npLZdHaWHZqLEziEC1ishjuzjXxiSD2r0WZSDWOI6+GiFJ8aB8P8Bp XPrmvEtuMy1zZPmuQN1Pru26y9XbwjS76sQgeCsb4UADhu3lRYIadsN+mBu/bvMJ aKaUbY8NTuaYdpFOK4JoNtd8ESx6rYAY91TDHxv833XR0DUwW8yWau3V6AVCBjuH BqAiIrGybY2nEuOjUfrv6mpSMoe7pogXRTy1rL9xrUTO8mYYarlZx8H9DhxkNBju 5ox9VStsQMZ+ZIZlIgGGWPmqxPIjmQ41 -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:12 2025 by rpki-client