$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: 1m9Qm4BF4eTfHX6hi/6XrYanZ8wyNXdhDgGb/3iCF2k= Subject key identifier: 86:AB:BF:29:F9:6F:9B:15:40:66:A9:68:84:97:D9:D5:65:FA:56:26 Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 07B1 Signing time: Sat 18 Oct 2025 22:39:25 +0000 Manifest this update: Sat 18 Oct 2025 22:39:24 +0000 Manifest next update: Sat 25 Oct 2025 22:39:24 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: Tnr4M2CqL2nVi+vdC/+eCjATtY968Qsh/Gu3L+fIMLg=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: LAOdJFFawenc1AsXXDOL+3qQmHgUCEKitPEgiKRJnTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Oct 18 22:39:24 2025 GMT Not After : Oct 25 22:39:24 2025 GMT Subject: CN=68f4171c-8b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:01:53:61:18:67:eb:ee:5b:a5:7b:51:4b: 1c:80:53:bb:bc:ae:f3:fd:4c:34:2f:99:d1:18:c0: 9f:72:23:c1:10:f0:0b:3d:f0:9f:ad:a4:ff:89:cf: a8:3f:72:76:d3:af:22:7c:d4:ad:4d:80:ea:54:60: a8:08:29:ed:06:64:23:ff:0a:38:3d:36:01:1a:f6: 49:37:7e:3f:cf:ba:a7:aa:58:c1:26:1b:0f:d5:6f: 10:e4:dc:d3:f1:5c:d7:2a:98:45:65:35:d3:fb:75: b0:60:53:67:ab:5c:cc:47:94:83:51:f5:08:cf:cb: 06:b7:f0:47:8e:89:35:b1:6e:24:c8:86:7f:16:f2: cb:db:90:e4:e5:12:ea:9f:3f:82:ef:1e:4d:7b:25: d1:d9:d7:0c:24:65:0b:87:af:22:8b:22:0e:b8:a0: e6:a5:7a:55:e3:80:d4:ea:4d:ae:88:7d:d1:38:21: 6d:96:6e:fc:33:4c:85:52:07:2e:ea:3c:fe:d8:3a: 4e:eb:fd:37:77:f4:a0:a1:76:1e:56:52:ba:c9:b1: 51:e5:c0:c3:d2:f5:ad:bc:1b:fc:19:4b:73:da:08: 8c:79:0a:2c:13:b3:71:6a:3a:2d:1c:ba:8f:37:fc: d2:32:03:01:ed:ae:b1:f3:8f:ed:90:ad:db:46:62: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:BF:29:F9:6F:9B:15:40:66:A9:68:84:97:D9:D5:65:FA:56:26 X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:39:5d:d1:88:61:01:01:0f:53:ce:51:c8:c3:8b:88:41:48: 3b:38:03:48:c4:fc:f5:26:1a:23:7b:54:d4:7b:a7:fc:0b:8f: 52:ce:6a:dc:87:2c:37:1b:42:de:27:7f:46:51:8b:66:7d:cb: ed:ac:8f:e6:ff:d8:b2:40:f0:34:b4:b0:63:73:d4:d7:fa:ff: 69:68:4c:c1:4c:2c:b0:96:0a:e1:c3:33:55:91:c5:13:b0:60: fe:21:ad:dc:32:37:57:ee:a2:17:14:77:fd:5d:c2:64:14:f1: d5:45:4f:43:db:1e:4d:37:a6:58:4b:24:de:13:1f:54:0f:18: 8f:4c:84:7f:9a:2c:e9:a3:4f:34:d1:6c:8a:98:72:0d:33:d9: c9:bf:b1:5e:2c:5e:ae:f4:f4:4c:de:7f:58:fa:c7:d1:f1:d4: de:08:86:dd:4f:b9:6d:16:09:61:7a:21:a3:6d:64:c6:55:c5: ee:67:7c:f4:57:94:69:40:91:08:0d:db:2b:4e:1b:d5:b6:56: ed:41:f6:34:0a:01:9f:60:7d:54:2b:6d:7b:74:53:f3:7c:26: b1:66:7d:b1:2d:80:8e:6e:b0:fa:8a:c0:6e:17:08:b3:3f:9a: eb:30:ed:92:e3:c1:c8:5a:89:5d:1d:16:23:da:eb:c3:2f:aa: 44:95:0c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUxMDE4MjIzOTI0WhcNMjUxMDI1MjIzOTI0WjAYMRYwFAYD VQQDEw02OGY0MTcxYy04YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu80BU2EYZ+vuW6V7UUscgFO7vK7z/Uw0L5nRGMCfciPBEPALPfCfraT/ic+o P3J2068ifNStTYDqVGCoCCntBmQj/wo4PTYBGvZJN34/z7qnqljBJhsP1W8Q5NzT 8VzXKphFZTXT+3WwYFNnq1zMR5SDUfUIz8sGt/BHjok1sW4kyIZ/FvLL25Dk5RLq nz+C7x5NeyXR2dcMJGULh68iiyIOuKDmpXpV44DU6k2uiH3ROCFtlm78M0yFUgcu 6jz+2DpO6/03d/SgoXYeVlK6ybFR5cDD0vWtvBv8GUtz2giMeQosE7NxajotHLqP N/zSMgMB7a6x84/tkK3bRmLGrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIarvyn5 b5sVQGapaISX2dVl+lYmMB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHOV3RiGEBAQ9TzlHIw4uIQUg7OANIxPz1Jhoje1TUe6f8C49Szmrc hyw3G0LeJ39GUYtmfcvtrI/m/9iyQPA0tLBjc9TX+v9paEzBTCywlgrhwzNVkcUT sGD+Ia3cMjdX7qIXFHf9XcJkFPHVRU9D2x5NN6ZYSyTeEx9UDxiPTIR/mizpo080 0WyKmHINM9nJv7FeLF6u9PRM3n9Y+sfR8dTeCIbdT7ltFglheiGjbWTGVcXuZ3z0 V5RpQJEIDdsrThvVtlbtQfY0CgGfYH1UK217dFPzfCaxZn2xLYCObrD6isBuFwiz P5rrMO2S48HIWoldHRYj2uvDL6pElQw3 -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:40 2025 by rpki-client