$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: NONtPtR3+LkDu5BUsJOfzFw0ut2CbQoZayaKji4Ievc= Subject key identifier: 44:75:7A:D3:0E:EE:8E:9E:61:4B:BF:B7:36:97:51:82:95:D0:B7:1D Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 07A1 Signing time: Tue 16 Sep 2025 21:39:48 +0000 Manifest this update: Tue 16 Sep 2025 21:39:47 +0000 Manifest next update: Tue 23 Sep 2025 21:39:47 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: V67MFIyo5XDv2ZoDjhWU8s2zK6Y2rYWyCFEnk9kHCGg=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: LAOdJFFawenc1AsXXDOL+3qQmHgUCEKitPEgiKRJnTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 21:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Sep 16 21:39:47 2025 GMT Not After : Sep 23 21:39:47 2025 GMT Subject: CN=68c9d924-697c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f3:93:5e:29:a2:b0:c3:51:fd:42:28:89:3c: 6a:8e:de:7b:e9:c9:5f:f7:a7:da:05:da:a7:69:7f: 79:f0:ba:17:74:85:35:37:b1:6f:f2:3b:29:75:9d: 3c:bb:87:cb:95:c5:5c:18:a9:2d:60:21:c7:2f:a0: 40:de:27:e0:2f:b5:68:88:02:85:b4:a1:1c:1b:8e: e6:c9:25:8a:6e:13:54:23:d2:6b:35:be:0a:13:d5: c9:4b:5f:3f:a8:ab:bc:23:0b:02:31:9a:54:20:1c: ea:69:20:28:85:da:be:70:6f:9f:57:62:17:a2:e9: e4:74:21:be:ca:e8:61:4b:fd:1e:88:a6:d8:0e:36: 7b:5c:c0:2b:6e:8e:fa:5c:8d:88:4e:a3:4f:6a:d9: 99:21:ad:c7:c4:6b:63:d7:55:33:f9:e7:d3:43:ef: 6e:b6:e7:27:d7:06:61:9b:9e:0e:42:d6:2d:23:c8: 6a:77:b4:b5:3a:aa:35:b5:25:c5:fa:52:fe:41:44: e5:bf:44:22:92:59:77:5d:95:1b:23:db:bc:07:8c: 57:d4:40:5c:54:93:51:00:57:4b:f0:da:70:54:c4: 0e:12:4b:89:e7:a7:00:68:9f:01:2a:77:60:3c:7b: 2d:f0:1c:df:c8:a0:5f:79:5d:95:b9:04:10:bb:7a: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:75:7A:D3:0E:EE:8E:9E:61:4B:BF:B7:36:97:51:82:95:D0:B7:1D X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:af:8c:c2:60:04:c7:6d:ec:a8:55:f6:72:ee:08:c1:24:f3: 3c:92:b5:c4:8f:f8:25:5f:8a:07:15:21:98:80:f6:36:03:52: fe:22:78:b6:19:24:cc:01:b5:db:3d:df:4d:b7:4a:8f:b6:3c: 64:bd:4d:1c:69:37:c8:71:7a:9a:d2:4a:ff:03:83:10:44:18: 49:73:ac:87:d9:e3:86:b9:ad:88:0f:3e:2a:af:9d:a1:4b:a9: 9f:56:00:56:fa:44:e1:8d:a6:8b:33:7a:be:f0:73:de:42:0d: 99:5a:d3:63:4b:15:75:a6:4e:14:fe:24:7d:4c:4a:1c:55:67: 7d:eb:d8:9e:4d:63:60:08:23:47:a3:9f:24:d1:ce:09:54:c3: 9b:0e:4b:f6:86:8a:c8:9e:26:c6:59:8e:12:38:49:50:08:0a: 17:0c:f1:e6:ad:c4:81:e5:a9:28:09:a2:68:52:06:3b:40:e3: 68:63:b4:9b:e2:61:97:c6:da:33:0d:0e:a2:f4:1e:1c:7f:4b: b6:9a:54:9a:93:73:b8:23:59:18:27:ca:3d:57:7f:05:a8:88: 3c:d1:2c:5d:e7:f5:2d:84:78:3e:14:bc:8a:62:b6:2b:b3:67: 2c:50:19:d5:aa:cf:ff:37:7f:a0:72:e9:25:03:c3:04:c1:a9: ea:fe:bb:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUwOTE2MjEzOTQ3WhcNMjUwOTIzMjEzOTQ3WjAYMRYwFAYD VQQDEw02OGM5ZDkyNC02OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/OTXimisMNR/UIoiTxqjt576clf96faBdqnaX958LoXdIU1N7Fv8jspdZ08 u4fLlcVcGKktYCHHL6BA3ifgL7VoiAKFtKEcG47mySWKbhNUI9JrNb4KE9XJS18/ qKu8IwsCMZpUIBzqaSAohdq+cG+fV2IXounkdCG+yuhhS/0eiKbYDjZ7XMArbo76 XI2ITqNPatmZIa3HxGtj11Uz+efTQ+9utucn1wZhm54OQtYtI8hqd7S1Oqo1tSXF +lL+QUTlv0Qikll3XZUbI9u8B4xX1EBcVJNRAFdL8NpwVMQOEkuJ56cAaJ8BKndg PHst8BzfyKBfeV2VuQQQu3qltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFER1etMO 7o6eYUu/tzaXUYKV0LcdMB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2r4zCYATHbeyoVfZy7gjBJPM8krXEj/glX4oHFSGYgPY2A1L+Ini2 GSTMAbXbPd9Nt0qPtjxkvU0caTfIcXqa0kr/A4MQRBhJc6yH2eOGua2IDz4qr52h S6mfVgBW+kThjaaLM3q+8HPeQg2ZWtNjSxV1pk4U/iR9TEocVWd969ieTWNgCCNH o58k0c4JVMObDkv2horInibGWY4SOElQCAoXDPHmrcSB5akoCaJoUgY7QONoY7Sb 4mGXxtozDQ6i9B4cf0u2mlSak3O4I1kYJ8o9V38FqIg80Sxd5/UthHg+FLyKYrYr s2csUBnVqs//N3+gcuklA8MEwanq/rs5 -----END CERTIFICATE-----Generated at Thu Sep 18 19:14:49 2025 by rpki-client