$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: 2Nb49tRXSRbk9ylXtdrXQZwPTG742NNXgNDS5WPHHsE= Subject key identifier: 1A:44:28:45:A8:41:3A:F4:0C:A5:FC:31:71:97:DE:C3:DD:FA:2F:BD Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 079A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 0794 Signing time: Fri 22 Aug 2025 21:34:18 +0000 Manifest this update: Fri 22 Aug 2025 21:34:17 +0000 Manifest next update: Fri 29 Aug 2025 21:34:17 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: 7/xFglAojpIR1GTAxZvTA8mk+oo6qKlEpvq7ehPBNq0=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: LAOdJFFawenc1AsXXDOL+3qQmHgUCEKitPEgiKRJnTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1946 (0x79a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Aug 22 21:34:17 2025 GMT Not After : Aug 29 21:34:17 2025 GMT Subject: CN=68a8e25a-a3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:26:ca:7f:1b:f9:ad:8a:b8:92:5a:81:3e: 9c:72:e3:48:2f:cd:8b:65:11:75:28:aa:22:ce:0e: 00:b1:1b:52:d3:c5:26:1e:bc:45:4d:86:fa:b7:ec: 17:2f:a6:9b:2c:ae:7e:62:84:91:bc:db:b1:5a:71: 4a:8d:47:ef:ae:f9:90:8b:f8:1b:88:2b:b8:a9:17: c7:f9:cf:bc:47:9e:a2:f7:b4:24:5d:6d:63:3a:53: ce:90:8f:d2:93:29:be:6c:31:a1:8a:53:c1:71:50: 84:ef:46:be:d3:0b:45:e7:c9:84:b9:02:eb:5e:88: bc:b2:f2:00:69:9c:80:f6:d2:92:83:a6:19:82:4b: d9:09:3a:80:42:3f:6f:80:42:e0:1a:a3:6c:3c:e1: f0:7b:39:a8:06:95:2d:1b:b0:3d:e3:8d:dd:7b:75: 02:9e:be:a5:de:56:93:b0:c2:40:71:95:50:8b:31: ed:09:d3:08:c9:ad:39:e2:a1:a0:79:05:ff:8d:44: 15:10:3c:e7:61:2a:0d:4a:45:ae:09:f8:c3:f8:26: e0:68:8a:62:55:6d:5d:27:35:df:6c:dd:a6:ef:fe: 27:c2:d9:a7:b1:88:5e:4a:df:5d:64:8c:e6:4a:9e: e8:2c:15:9a:8b:52:14:a6:af:fa:0f:ac:76:fe:dc: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:44:28:45:A8:41:3A:F4:0C:A5:FC:31:71:97:DE:C3:DD:FA:2F:BD X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:84:a8:fe:16:ad:dc:aa:df:72:10:34:22:a8:87:44:92:47: aa:af:c3:8c:41:a3:f4:94:26:50:f5:61:31:69:e8:e2:63:1c: 12:d5:d4:b7:74:f4:89:d5:36:05:1d:6f:8d:ed:87:6f:8f:75: 78:9c:50:35:d8:ce:3b:73:b8:b7:fd:54:51:7c:11:29:e0:56: 9b:c2:63:35:5b:52:94:1a:87:83:78:01:73:d6:fe:d5:91:da: 23:8c:2d:44:a3:45:f6:bc:c8:c6:ba:ff:d2:49:cc:64:f1:04: c9:87:0c:a9:b9:04:7a:f4:9c:7a:3d:d3:75:6a:86:91:e9:e0: fd:ca:9c:eb:cd:ed:b9:c2:24:04:e6:1c:f0:c7:39:7f:b8:25: dc:1f:69:d6:72:f7:0f:27:38:10:49:35:72:70:a4:d7:df:15: e6:66:f8:0f:60:61:16:25:7f:a4:c0:15:20:64:c5:6c:74:18: e4:6a:ec:c7:19:40:49:6a:ab:22:ad:f3:1d:56:0c:f0:45:cf: e1:ad:42:6d:e2:f5:bc:6f:33:b4:e4:53:33:da:3e:60:af:30: d6:e9:3d:d9:58:af:25:76:9e:5f:22:e3:c7:06:57:c4:b2:8a: a3:40:70:e9:9d:81:9b:4d:16:53:36:f8:28:c6:c2:c3:9d:25: 32:24:c7:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUwODIyMjEzNDE3WhcNMjUwODI5MjEzNDE3WjAYMRYwFAYD VQQDEw02OGE4ZTI1YS1hM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFwmyn8b+a2KuJJagT6ccuNIL82LZRF1KKoizg4AsRtS08UmHrxFTYb6t+wX L6abLK5+YoSRvNuxWnFKjUfvrvmQi/gbiCu4qRfH+c+8R56i97QkXW1jOlPOkI/S kym+bDGhilPBcVCE70a+0wtF58mEuQLrXoi8svIAaZyA9tKSg6YZgkvZCTqAQj9v gELgGqNsPOHwezmoBpUtG7A9443de3UCnr6l3laTsMJAcZVQizHtCdMIya054qGg eQX/jUQVEDznYSoNSkWuCfjD+CbgaIpiVW1dJzXfbN2m7/4nwtmnsYheSt9dZIzm Sp7oLBWai1IUpq/6D6x2/tyWfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpEKEWo QTr0DKX8MXGX3sPd+i+9MB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBphKj+Fq3cqt9yEDQiqIdEkkeqr8OMQaP0lCZQ9WExaejiYxwS1dS3 dPSJ1TYFHW+N7Ydvj3V4nFA12M47c7i3/VRRfBEp4FabwmM1W1KUGoeDeAFz1v7V kdojjC1Eo0X2vMjGuv/SScxk8QTJhwypuQR69Jx6PdN1aoaR6eD9ypzrze25wiQE 5hzwxzl/uCXcH2nWcvcPJzgQSTVycKTX3xXmZvgPYGEWJX+kwBUgZMVsdBjkauzH GUBJaqsirfMdVgzwRc/hrUJt4vW8bzO05FMz2j5grzDW6T3ZWK8ldp5fIuPHBlfE soqjQHDpnYGbTRZTNvgoxsLDnSUyJMeS -----END CERTIFICATE-----Generated at Sun Aug 24 04:49:56 2025 by rpki-client