$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: XPmSg+0rDjvJ5tU27aCzRFtvVIaoMQIW1Upm99PFS/g= Subject key identifier: 93:59:76:BF:7A:68:FE:35:B0:53:47:88:75:08:44:5C:E9:F6:D8:AE Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 075B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 0756 Signing time: Thu 24 Apr 2025 21:24:59 +0000 Manifest this update: Thu 24 Apr 2025 21:24:58 +0000 Manifest next update: Thu 01 May 2025 21:24:58 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: 2ugY3cDAtDDRm1FWL1quHZXKzt03fG6XPdA85E16/pQ=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: sPnbljaDBmWrfqdfFlvNku+IoDBHr9vsXcs9cIAu9pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599, serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Apr 24 21:24:58 2025 GMT Not After : May 1 21:24:58 2025 GMT Subject: CN=680aac2a-53e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:b1:54:49:10:dd:d1:f4:87:28:08:99:d0: 85:4b:c6:6c:f6:b9:1f:49:c4:10:8b:da:23:ec:49: 99:be:ed:71:73:0a:2c:13:1d:ec:8c:af:70:f8:25: b0:4e:81:01:9e:d0:59:0c:0b:90:eb:93:11:d9:52: 2d:f5:fb:6c:8c:44:00:f4:f7:f6:d6:5b:30:db:2d: ce:51:5d:60:16:fe:e6:72:81:7e:68:ab:ad:38:d5: c4:02:d9:60:48:32:71:d0:89:80:6d:99:2d:6c:c1: 8c:69:51:30:58:a7:50:9f:dc:28:26:4f:e5:9d:7a: 92:96:1f:e6:b0:1f:07:36:ff:72:89:47:02:1b:0d: 66:64:f3:ff:35:b0:d5:5b:f6:62:53:62:a0:11:84: 7a:b5:15:a9:6f:7c:37:f4:58:8f:ff:26:8c:1e:63: 2a:04:df:2f:56:cf:73:21:62:df:9f:53:2e:0e:0f: ea:56:a4:b1:ca:53:0a:82:b5:ad:32:ce:d1:7f:92: fb:e5:98:47:76:fd:d9:89:ce:f2:f4:7e:15:67:ed: cf:d7:12:3a:64:c7:e1:68:09:b2:2f:03:dd:eb:aa: bf:d2:c4:44:07:0d:0e:31:92:cc:0e:75:93:15:05: 3e:60:11:15:20:30:c6:f0:f5:9a:03:d4:de:64:3d: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:59:76:BF:7A:68:FE:35:B0:53:47:88:75:08:44:5C:E9:F6:D8:AE X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:b7:c3:c8:8a:e3:d3:ef:b4:ce:15:a5:89:60:ba:e3:1f:2f: 6f:f2:83:b4:56:06:f0:12:d9:48:0c:4b:c9:d0:e2:94:98:4c: 5d:d0:79:82:05:e1:2a:05:71:1d:c0:75:ca:13:6c:b7:76:0c: f7:94:07:70:e5:ae:da:d1:89:8b:16:6c:b2:37:85:27:fd:f6: d9:6a:b0:b5:80:51:67:e2:1d:79:7b:f8:9d:20:aa:e0:60:91: 58:92:ab:65:e5:76:26:0b:43:e0:0b:98:fd:d4:ce:91:d0:55: 83:c2:da:d3:ce:e5:1c:16:01:26:f0:d4:0a:f7:30:97:12:7e: ed:3a:ec:4e:94:d8:68:06:1a:73:65:0c:bf:ac:4e:d6:79:ea: 6b:fc:92:6b:6a:21:76:9f:2d:f2:56:8f:8a:aa:19:16:ad:70: bb:65:f5:fe:7c:2c:f0:88:01:d3:bf:a2:ed:60:7b:89:b8:5d: 20:c8:80:5b:fb:af:3e:0c:fc:3b:71:9d:56:94:0c:d7:c2:ed: c8:97:dd:94:75:ab:1e:fc:70:fe:57:52:5e:dd:72:2b:bc:1e: 24:22:fb:19:d6:77:ed:40:52:3d:a9:65:f2:27:48:2a:3b:02: de:50:2a:3d:52:d8:6f:11:82:03:42:19:3a:a8:8c:26:60:79: e3:d8:05:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjUwNDI0MjEyNDU4WhcNMjUwNTAxMjEyNDU4WjAYMRYwFAYD VQQDEw02ODBhYWMyYS01M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPixVEkQ3dH0hygImdCFS8Zs9rkfScQQi9oj7EmZvu1xcwosEx3sjK9w+CWw ToEBntBZDAuQ65MR2VIt9ftsjEQA9Pf21lsw2y3OUV1gFv7mcoF+aKutONXEAtlg SDJx0ImAbZktbMGMaVEwWKdQn9woJk/lnXqSlh/msB8HNv9yiUcCGw1mZPP/NbDV W/ZiU2KgEYR6tRWpb3w39FiP/yaMHmMqBN8vVs9zIWLfn1MuDg/qVqSxylMKgrWt Ms7Rf5L75ZhHdv3Zic7y9H4VZ+3P1xI6ZMfhaAmyLwPd66q/0sREBw0OMZLMDnWT FQU+YBEVIDDG8PWaA9TeZD1CTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNZdr96 aP41sFNHiHUIRFzp9tiuMB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDt8PIiuPT77TOFaWJYLrjHy9v8oO0VgbwEtlIDEvJ0OKUmExd0HmC BeEqBXEdwHXKE2y3dgz3lAdw5a7a0YmLFmyyN4Un/fbZarC1gFFn4h15e/idIKrg YJFYkqtl5XYmC0PgC5j91M6R0FWDwtrTzuUcFgEm8NQK9zCXEn7tOuxOlNhoBhpz ZQy/rE7Weepr/JJraiF2ny3yVo+KqhkWrXC7ZfX+fCzwiAHTv6LtYHuJuF0gyIBb +68+DPw7cZ1WlAzXwu3Il92Udase/HD+V1Je3XIrvB4kIvsZ1nftQFI9qWXyJ0gq OwLeUCo9UthvEYIDQhk6qIwmYHnj2AVh -----END CERTIFICATE-----Generated at Sat Apr 26 17:26:24 2025 by rpki-client