$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: DjxvJIc4GYpDRJ3nGpUrS+354KKwC9VXXWZeYcB8TnI= Subject key identifier: 29:D3:DE:08:F4:F9:E0:BF:C2:4C:C9:0E:67:DC:8C:3F:A7:38:EC:89 Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 076C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 0767 Signing time: Fri 30 May 2025 21:46:38 +0000 Manifest this update: Fri 30 May 2025 21:46:38 +0000 Manifest next update: Fri 06 Jun 2025 21:46:38 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: DzXsTe7MlMbCXFvii1z7MtjA1mtJ+FKCh3Y7FXv50nQ=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: sPnbljaDBmWrfqdfFlvNku+IoDBHr9vsXcs9cIAu9pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: May 30 21:46:38 2025 GMT Not After : Jun 6 21:46:38 2025 GMT Subject: CN=683a273e-2e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:1e:05:76:b9:2c:11:cc:24:a8:af:23:f9: 6d:f2:74:93:e2:27:fb:1a:be:8f:31:ac:bf:f9:fa: b5:a2:15:bc:34:38:64:88:c4:0d:79:f6:0d:cd:3f: d2:37:23:1f:69:b2:85:48:34:46:f1:64:6a:77:ee: 27:a1:2c:5d:06:b2:9b:ca:52:88:79:9d:f9:ea:7b: be:44:2e:a3:07:d2:77:54:f8:41:e1:31:15:5f:2c: 46:00:0a:6c:1c:a7:c4:b2:b8:28:b5:c3:0d:f6:49: 1f:c1:43:fc:a7:42:d8:71:a1:f9:70:68:20:8f:15: d1:1f:b1:f0:4a:54:24:8f:77:38:44:0b:15:83:59: e7:11:59:93:b0:b8:23:aa:08:ba:b9:c6:38:38:30: 28:0c:3b:cd:9d:d0:ed:36:c4:15:08:14:cc:cd:91: 46:96:17:e3:94:db:ba:70:ef:1c:17:2a:29:49:75: bf:3f:51:9a:e0:e4:ca:15:55:d6:7a:d3:a7:a7:93: e5:f6:39:dc:51:b3:e0:4f:f2:86:3e:b5:64:bc:df: 5a:a7:3c:98:07:2a:41:d8:aa:6d:6b:79:84:41:c7: 18:34:07:f2:53:36:b4:11:2d:ad:c0:fb:52:29:22: f2:c2:4e:b4:c7:59:45:7c:8b:53:0c:45:37:d1:2c: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D3:DE:08:F4:F9:E0:BF:C2:4C:C9:0E:67:DC:8C:3F:A7:38:EC:89 X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:16:0e:b0:a1:ef:ee:70:33:59:d6:47:e7:81:77:33:7f:62: d3:47:40:44:c2:f2:11:1b:bb:60:f5:5c:d8:49:09:12:00:e5: be:ba:b7:f4:bc:86:27:ab:f1:0c:8d:52:ed:47:7a:a6:76:c2: 0c:d4:28:38:68:70:79:e1:80:fe:32:60:a3:b2:b3:84:ce:43: e1:ac:84:52:04:4d:1c:06:45:ab:b7:da:51:56:a0:6c:d8:5f: c4:d3:96:15:e1:e9:d3:a7:2d:cf:9f:ba:af:59:f9:3d:5e:df: 5d:08:a7:12:81:a4:ea:da:8f:3b:e6:d0:23:bf:26:70:2a:af: e4:bc:4a:83:76:e7:05:66:d1:a7:d5:d3:69:28:9e:28:c0:87: 37:1d:81:56:0e:ea:b3:d8:8f:4a:e7:a9:27:08:4a:03:46:d7: b0:5f:fc:f3:e1:a3:fb:6c:e2:49:1d:03:67:8e:15:30:1a:79: ec:23:e6:bd:62:22:16:99:b2:b8:ad:50:6a:cf:5b:69:22:3a: cd:be:05:7c:66:84:df:47:2b:c8:00:b6:b3:74:41:d5:f1:89: 9f:a7:6a:e6:34:2a:85:5f:1d:e7:38:d3:af:7c:bc:35:8c:78: 6e:4d:1b:fb:48:2e:6d:5c:bb:b9:70:fd:7e:b8:ff:ee:19:69: 5d:bd:19:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUwNTMwMjE0NjM4WhcNMjUwNjA2MjE0NjM4WjAYMRYwFAYD VQQDEw02ODNhMjczZS0yZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvseBXa5LBHMJKivI/lt8nST4if7Gr6PMay/+fq1ohW8NDhkiMQNefYNzT/S NyMfabKFSDRG8WRqd+4noSxdBrKbylKIeZ356nu+RC6jB9J3VPhB4TEVXyxGAAps HKfEsrgotcMN9kkfwUP8p0LYcaH5cGggjxXRH7HwSlQkj3c4RAsVg1nnEVmTsLgj qgi6ucY4ODAoDDvNndDtNsQVCBTMzZFGlhfjlNu6cO8cFyopSXW/P1Ga4OTKFVXW etOnp5Pl9jncUbPgT/KGPrVkvN9apzyYBypB2Kpta3mEQccYNAfyUza0ES2twPtS KSLywk60x1lFfItTDEU30Sz+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnT3gj0 +eC/wkzJDmfcjD+nOOyJMB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlFg6woe/ucDNZ1kfngXczf2LTR0BEwvIRG7tg9VzYSQkSAOW+urf0 vIYnq/EMjVLtR3qmdsIM1Cg4aHB54YD+MmCjsrOEzkPhrIRSBE0cBkWrt9pRVqBs 2F/E05YV4enTpy3Pn7qvWfk9Xt9dCKcSgaTq2o875tAjvyZwKq/kvEqDducFZtGn 1dNpKJ4owIc3HYFWDuqz2I9K56knCEoDRtewX/zz4aP7bOJJHQNnjhUwGnnsI+a9 YiIWmbK4rVBqz1tpIjrNvgV8ZoTfRyvIALazdEHV8Ymfp2rmNCqFXx3nONOvfLw1 jHhuTRv7SC5tXLu5cP1+uP/uGWldvRna -----END CERTIFICATE-----Generated at Sat May 31 17:57:49 2025 by rpki-client