$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: atav+0AlDkmGe1VposnC0sOG0P/5V66gMJyAXYyn38c= Subject key identifier: F9:ED:B1:B9:93:2E:C8:2F:4A:66:A4:D3:81:82:DC:76:6C:B8:FB:BF Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 0761 Signing time: Fri 16 May 2025 21:51:56 +0000 Manifest this update: Fri 16 May 2025 21:51:56 +0000 Manifest next update: Fri 23 May 2025 21:51:56 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: U0WqmXbfYvXVm9Fq8/CDwIQb46XGF41iJRTrIoThdsU=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: sPnbljaDBmWrfqdfFlvNku+IoDBHr9vsXcs9cIAu9pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: May 16 21:51:56 2025 GMT Not After : May 23 21:51:56 2025 GMT Subject: CN=6827b37c-dfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:ac:a3:34:bd:82:0d:48:63:d3:a4:14:65: a7:b9:bf:72:b6:8a:d6:3b:0d:4c:63:e0:4a:c7:ee: 4a:e4:5b:d5:a0:2f:98:e1:eb:b6:65:c5:04:44:b9: b9:7c:f3:9a:18:e4:7b:97:8a:f6:de:0c:07:f7:a5: 38:b7:fb:38:9f:c0:df:9f:0c:f4:b2:16:4a:de:b1: 19:2d:74:41:c4:e6:00:ff:ab:15:c6:89:89:8d:5f: 1d:24:fc:43:f9:1b:ed:e0:b0:f0:b4:51:a9:ed:75: 78:d2:cc:b9:1a:8e:87:3b:64:bc:b1:4e:dd:8d:e8: b7:3c:d7:ee:8a:45:8f:19:9b:f9:ce:a8:4d:c0:6c: b6:43:cc:6f:46:bd:5c:df:1f:96:3e:5d:5b:7b:7f: ed:55:4c:c7:6d:ef:f3:90:18:05:d2:ce:f1:fa:23: ad:f8:70:af:ba:9c:e3:f6:60:c5:69:4c:d9:3a:55: 22:53:86:64:7d:2b:27:f0:37:18:a8:a7:06:70:f0: 5a:5b:46:2b:9f:8a:48:37:cd:f0:7b:cd:89:35:ea: 4f:44:a2:70:e8:39:0e:ce:c0:9d:ce:30:c1:87:d9: d0:32:d0:89:e9:24:75:3c:3b:c5:c1:f2:a3:ba:0b: 61:a8:fa:83:21:fe:c2:6a:05:41:0e:ab:6d:27:92: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:ED:B1:B9:93:2E:C8:2F:4A:66:A4:D3:81:82:DC:76:6C:B8:FB:BF X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:38:41:8f:61:64:65:1f:d5:32:66:2f:54:ad:6b:72:ee:48: 69:8b:63:8e:4e:66:7b:86:da:97:ca:3c:f5:09:3c:79:99:2d: d2:16:35:59:99:8c:87:c6:12:8d:d9:7e:1d:d6:b6:87:4c:ac: aa:06:bd:64:60:c0:3c:d3:6c:3a:26:d7:8c:23:57:ff:f9:54: ea:96:2f:2f:32:14:be:c8:2c:c9:49:97:24:e5:8c:36:bd:df: 67:6d:c0:14:e9:48:38:dd:fe:db:c6:6c:d9:41:96:4b:2e:2b: e9:35:9b:45:c1:94:3f:12:26:94:59:3c:42:fb:e0:4e:b1:43: d4:aa:f5:4f:97:2c:43:25:35:51:79:25:8d:ed:21:38:4d:6d: 38:84:49:ff:08:d4:6b:d2:97:9f:f1:eb:aa:0b:8e:11:18:8e: d5:64:3a:52:f8:a6:5d:e6:c3:60:a2:70:67:8d:35:c1:04:63: 86:ee:df:b1:c6:ed:89:4e:12:1c:8a:9f:bb:f7:93:82:bc:ac: fe:6c:db:9e:7e:31:79:d7:c3:a5:fc:27:ef:ac:0f:46:5d:83: 60:8e:aa:58:f4:2a:dc:9c:1d:c5:c3:42:0b:a1:06:50:1a:2e: 07:6b:80:f3:1c:97:d5:04:02:86:ff:ae:a1:05:88:97:b2:47: 75:49:ca:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUwNTE2MjE1MTU2WhcNMjUwNTIzMjE1MTU2WjAYMRYwFAYD VQQDEw02ODI3YjM3Yy1kZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttisozS9gg1IY9OkFGWnub9ytorWOw1MY+BKx+5K5FvVoC+Y4eu2ZcUERLm5 fPOaGOR7l4r23gwH96U4t/s4n8Dfnwz0shZK3rEZLXRBxOYA/6sVxomJjV8dJPxD +Rvt4LDwtFGp7XV40sy5Go6HO2S8sU7djei3PNfuikWPGZv5zqhNwGy2Q8xvRr1c 3x+WPl1be3/tVUzHbe/zkBgF0s7x+iOt+HCvupzj9mDFaUzZOlUiU4ZkfSsn8DcY qKcGcPBaW0Yrn4pIN83we82JNepPRKJw6DkOzsCdzjDBh9nQMtCJ6SR1PDvFwfKj ugthqPqDIf7CagVBDqttJ5JWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPntsbmT LsgvSmak04GC3HZsuPu/MB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPOEGPYWRlH9UyZi9UrWty7khpi2OOTmZ7htqXyjz1CTx5mS3SFjVZ mYyHxhKN2X4d1raHTKyqBr1kYMA802w6JteMI1f/+VTqli8vMhS+yCzJSZck5Yw2 vd9nbcAU6Ug43f7bxmzZQZZLLivpNZtFwZQ/EiaUWTxC++BOsUPUqvVPlyxDJTVR eSWN7SE4TW04hEn/CNRr0pef8euqC44RGI7VZDpS+KZd5sNgonBnjTXBBGOG7t+x xu2JThIcip+795OCvKz+bNuefjF518Ol/CfvrA9GXYNgjqpY9CrcnB3Fw0ILoQZQ Gi4Ha4DzHJfVBAKG/66hBYiXskd1Scrx -----END CERTIFICATE-----Generated at Sat May 17 15:47:06 2025 by rpki-client