$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: ZQ98l+o2+6vzPSBrRjXal0nug7iBhl77rS7MudE+pI4= Subject key identifier: E7:03:9A:CF:93:AC:B5:2A:F9:DD:3E:95:41:23:75:44:61:08:E4:DE Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 07BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 07B9 Signing time: Tue 04 Nov 2025 21:25:25 +0000 Manifest this update: Tue 04 Nov 2025 21:25:24 +0000 Manifest next update: Tue 11 Nov 2025 21:25:24 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: 3b8DdmUJQYnYGhlvpVS5XPQV/OVwqRicGqztSaJUUvU=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: LAOdJFFawenc1AsXXDOL+3qQmHgUCEKitPEgiKRJnTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Nov 4 21:25:24 2025 GMT Not After : Nov 11 21:25:24 2025 GMT Subject: CN=690a6f45-6209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:8a:6c:ec:22:c4:18:e0:ae:de:64:4a:a5: be:bb:08:ff:15:e1:f5:6a:5a:34:f0:95:39:5e:fc: 9d:b1:80:52:7c:6b:de:5e:9e:42:dc:d4:e8:fe:66: 8d:ed:c2:d6:f0:5f:5f:09:60:66:e8:60:08:e7:09: b4:c9:0e:63:68:d2:77:48:b2:3a:5c:a3:c8:35:ca: 71:7e:4f:dd:51:c0:ee:2e:2d:5a:1c:e3:ca:84:3c: 75:5a:e9:e8:d9:0d:33:da:58:89:9b:f0:bc:11:11: 0f:4f:cb:77:7c:57:53:77:8c:81:55:14:ed:73:72: 71:21:4a:35:f9:b3:4a:4b:65:89:23:74:f5:1e:65: 9d:4d:a4:7e:0b:17:c4:eb:62:7d:0b:90:0a:41:f9: 0f:dc:47:67:36:8a:4e:4e:cf:83:cd:3d:67:83:c6: 69:eb:31:78:20:61:82:85:44:d5:c1:c4:a9:2d:87: c9:ce:93:09:5d:28:e5:a3:0e:20:77:48:2e:f2:cb: 73:0c:5b:89:9f:ea:e3:fb:2b:97:0c:f4:4e:68:c6: b9:ce:de:0e:5d:0d:0f:ab:69:f2:d9:a9:d7:ba:72: 5d:bc:c8:18:52:3a:e3:df:fe:df:65:b6:4f:59:4f: a1:e2:c8:c4:15:1f:a1:04:9d:b3:86:14:53:96:4d: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:03:9A:CF:93:AC:B5:2A:F9:DD:3E:95:41:23:75:44:61:08:E4:DE X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:5e:b0:29:35:ae:94:47:6e:e6:2d:bd:2d:2d:ae:6c:64:ec: b5:40:6a:3f:ff:67:9e:31:e3:29:43:33:87:0b:d9:f4:e9:82: c2:a9:ae:bd:2e:9d:4d:71:c2:cd:b2:d0:1c:3a:7f:c3:5b:97: 98:37:18:16:5c:cd:c4:83:4a:df:01:c9:c5:44:d5:d8:4a:74: eb:0e:f7:16:af:d0:79:05:16:1f:53:5e:6b:53:55:02:e5:f5: 46:4c:77:ba:dc:dc:b4:71:15:58:a8:28:95:4c:cb:94:96:5f: ff:49:b6:26:ea:21:44:13:c2:50:cf:a5:22:67:1e:ab:47:e9: d8:e4:77:b4:5e:9a:08:10:2b:9f:76:aa:a2:41:e5:b5:1a:53: de:d0:5c:0a:e4:45:f4:14:5a:67:a2:db:8b:f8:d8:f0:bd:86: e7:36:c5:5c:95:ac:5b:2c:cf:24:95:04:a9:29:63:c8:e0:0a: 92:a8:cc:f4:e8:5e:1c:dd:77:86:ac:b2:75:7a:8d:8e:19:f3: 8a:2a:21:28:ea:be:72:2b:d9:16:d3:18:50:bd:d4:9d:10:32: 01:d5:8b:09:a0:40:64:de:e2:96:1e:a6:f7:46:54:83:48:90: 2b:be:23:02:cb:69:5c:80:0f:a8:12:ac:ed:e9:71:9e:f7:39: 2d:1d:7b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUxMTA0MjEyNTI0WhcNMjUxMTExMjEyNTI0WjAYMRYwFAYD VQQDEw02OTBhNmY0NS02MjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZuKbOwixBjgrt5kSqW+uwj/FeH1alo08JU5XvydsYBSfGveXp5C3NTo/maN 7cLW8F9fCWBm6GAI5wm0yQ5jaNJ3SLI6XKPINcpxfk/dUcDuLi1aHOPKhDx1Wuno 2Q0z2liJm/C8EREPT8t3fFdTd4yBVRTtc3JxIUo1+bNKS2WJI3T1HmWdTaR+CxfE 62J9C5AKQfkP3EdnNopOTs+DzT1ng8Zp6zF4IGGChUTVwcSpLYfJzpMJXSjlow4g d0gu8stzDFuJn+rj+yuXDPROaMa5zt4OXQ0Pq2ny2anXunJdvMgYUjrj3/7fZbZP WU+h4sjEFR+hBJ2zhhRTlk2SYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcDms+T rLUq+d0+lUEjdURhCOTeMB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnXrApNa6UR27mLb0tLa5sZOy1QGo//2eeMeMpQzOHC9n06YLCqa69 Lp1NccLNstAcOn/DW5eYNxgWXM3Eg0rfAcnFRNXYSnTrDvcWr9B5BRYfU15rU1UC 5fVGTHe63Ny0cRVYqCiVTMuUll//SbYm6iFEE8JQz6UiZx6rR+nY5He0XpoIECuf dqqiQeW1GlPe0FwK5EX0FFpnotuL+NjwvYbnNsVclaxbLM8klQSpKWPI4AqSqMz0 6F4c3XeGrLJ1eo2OGfOKKiEo6r5yK9kW0xhQvdSdEDIB1YsJoEBk3uKWHqb3RlSD SJArviMCy2lcgA+oEqzt6XGe9zktHXtE -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:28 2025 by rpki-client