$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: iB40Ywub/YmLCY+5r6SvQS+/xWoDCC+zkfqIPK8pTwY= Subject key identifier: 08:C6:99:67:1C:EF:62:63:C9:21:0C:09:D3:AD:1C:EA:55:3C:7B:D4 Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 0778 Signing time: Wed 02 Jul 2025 21:46:45 +0000 Manifest this update: Wed 02 Jul 2025 21:46:45 +0000 Manifest next update: Wed 09 Jul 2025 21:46:45 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: FbrKMbjk2obi365xK8ywL/57pp14653wAzjT30sC0xo=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: sPnbljaDBmWrfqdfFlvNku+IoDBHr9vsXcs9cIAu9pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Jul 2 21:46:45 2025 GMT Not After : Jul 9 21:46:45 2025 GMT Subject: CN=6865a8c5-46b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:af:a6:19:4e:c0:d6:f4:29:04:7d:30:5b: fd:48:2f:41:4b:1a:34:62:1a:38:3c:a9:6f:91:e3: 3a:7c:10:7f:c3:98:cd:f6:5a:75:80:b5:67:0c:97: f1:1d:40:f5:30:26:b1:d8:12:bb:50:fe:02:05:29: 2b:3e:be:6a:c6:83:17:f8:88:98:6e:25:3b:f6:b8: 4b:ff:24:b9:13:6e:20:8e:da:5f:44:f6:57:71:a6: 7f:3b:89:9a:4b:f4:c2:36:16:66:08:52:f1:df:43: e1:1e:15:2f:0e:28:d0:a6:00:04:92:f0:69:34:e6: a0:ed:7f:07:29:9b:8a:3d:6e:a3:7d:9e:81:5b:c1: b9:dd:aa:32:7b:9f:23:ea:2f:2f:37:5c:a6:bd:a0: 73:02:af:84:16:63:27:4c:40:c3:bf:f5:cf:f9:0d: e6:01:d4:28:0e:de:e8:33:3e:26:9b:d5:9c:2d:b6: 70:7b:b4:e5:8a:d2:68:59:b9:56:64:3c:21:ca:55: b3:9e:c2:b1:51:cf:0c:38:84:a6:1f:6c:30:19:5a: 42:9b:c0:d7:01:60:7a:c7:3b:62:93:97:fe:25:48: 44:cf:99:ff:1f:9f:05:fe:46:19:73:87:c4:5a:8d: a5:ac:fc:a9:48:2c:52:c7:92:06:32:dd:a8:8b:8a: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C6:99:67:1C:EF:62:63:C9:21:0C:09:D3:AD:1C:EA:55:3C:7B:D4 X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b7:4f:5d:bf:6b:60:fe:e5:bd:43:f3:c9:fa:80:15:e4:b8: f1:6b:9f:6e:6e:71:08:84:95:0e:1b:a1:59:65:cc:5f:0f:82: e5:f3:25:f1:cf:1a:ad:68:0b:87:31:b3:b0:e6:ed:b3:14:cc: b0:df:b3:d4:e0:c4:7c:32:1e:58:8c:25:58:ab:6e:6d:4c:81: 81:97:70:83:34:5a:1d:24:f0:45:f8:1d:93:49:87:7d:c8:ee: 54:7a:00:91:5e:67:15:29:1b:a1:d9:74:a4:c6:c6:61:35:bb: 7b:ae:88:36:41:27:12:80:d1:ab:3c:29:7c:98:04:92:a9:24: 5f:c1:c3:cc:51:09:47:e7:c9:68:64:b8:96:55:cf:8d:76:38: 51:14:82:ee:fd:83:3c:85:fb:fd:d5:37:01:57:18:ce:47:cc: dc:95:f6:31:5c:63:c3:e5:31:ca:03:4d:b0:8a:38:27:00:60: f8:9e:11:72:c9:0a:a4:a5:8d:bf:18:f0:9b:5c:f1:e4:44:05: 52:c7:8b:40:0a:da:a1:22:87:d4:ea:f6:c3:0f:d0:21:8e:cc: 53:a5:9c:f3:08:83:9c:8f:c5:3f:95:10:e0:a1:05:ac:ba:89: 00:16:bf:cf:26:3f:4f:23:af:ae:ed:b7:69:6b:cf:15:71:13: ba:b6:5d:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUwNzAyMjE0NjQ1WhcNMjUwNzA5MjE0NjQ1WjAYMRYwFAYD VQQDEw02ODY1YThjNS00NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OCvphlOwNb0KQR9MFv9SC9BSxo0Yho4PKlvkeM6fBB/w5jN9lp1gLVnDJfx HUD1MCax2BK7UP4CBSkrPr5qxoMX+IiYbiU79rhL/yS5E24gjtpfRPZXcaZ/O4ma S/TCNhZmCFLx30PhHhUvDijQpgAEkvBpNOag7X8HKZuKPW6jfZ6BW8G53aoye58j 6i8vN1ymvaBzAq+EFmMnTEDDv/XP+Q3mAdQoDt7oMz4mm9WcLbZwe7TlitJoWblW ZDwhylWznsKxUc8MOISmH2wwGVpCm8DXAWB6xztik5f+JUhEz5n/H58F/kYZc4fE Wo2lrPypSCxSx5IGMt2oi4quRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjGmWcc 72JjySEMCdOtHOpVPHvUMB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAat09dv2tg/uW9Q/PJ+oAV5Ljxa59ubnEIhJUOG6FZZcxfD4Ll8yXx zxqtaAuHMbOw5u2zFMyw37PU4MR8Mh5YjCVYq25tTIGBl3CDNFodJPBF+B2TSYd9 yO5UegCRXmcVKRuh2XSkxsZhNbt7rog2QScSgNGrPCl8mASSqSRfwcPMUQlH58lo ZLiWVc+NdjhRFILu/YM8hfv91TcBVxjOR8zclfYxXGPD5THKA02wijgnAGD4nhFy yQqkpY2/GPCbXPHkRAVSx4tACtqhIofU6vbDD9AhjsxTpZzzCIOcj8U/lRDgoQWs uokAFr/PJj9PI6+u7bdpa88VcRO6tl2V -----END CERTIFICATE-----Generated at Fri Jul 4 21:17:49 2025 by rpki-client