$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: 6/Z4sfWWyjCCzGPRS4kf12G+vl4uZ5PLVngLauJbsQQ= Subject key identifier: 64:F9:92:4E:CF:9C:E3:10:8B:88:C6:FA:61:A5:4A:34:B9:01:FD:5D Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 5B Signing time: Tue 01 Jul 2025 07:52:02 +0000 Manifest this update: Tue 01 Jul 2025 07:52:01 +0000 Manifest next update: Tue 08 Jul 2025 07:52:01 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: igooQxcBs6r4X4nWGgYhcA8Lpuqcv8DHGrD8e9FPM/o=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: Jul 1 07:52:01 2025 GMT Not After : Jul 8 07:52:01 2025 GMT Subject: CN=686393a1-0bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:dc:55:94:3b:41:37:bb:f5:66:79:9f:09: 17:b6:80:57:ed:7c:ff:b0:00:f1:c2:1c:31:7e:57: 9a:c7:08:e5:0f:06:91:3a:37:6b:cf:3f:98:3f:5d: 48:c3:13:c8:9d:00:3d:96:22:06:9e:72:5e:6a:33: 4e:64:4b:2f:f9:31:66:ca:a2:a3:55:e2:13:b3:9d: e1:33:83:7d:43:0f:e3:14:85:46:9b:cc:51:f3:01: 50:8d:87:e6:ba:8d:42:87:a4:36:71:29:fc:40:34: fb:fc:ac:d0:12:34:9e:39:68:93:ee:d3:37:9b:58: 4f:2b:ca:20:07:bc:0f:33:63:9a:55:a3:c3:0f:f4: 91:d2:64:da:7c:7c:3a:e6:1e:84:93:28:18:a7:28: 22:d2:07:f2:ce:dc:08:87:f7:c5:02:6e:90:3a:df: 31:d5:fe:27:3e:d1:39:f8:f4:f0:aa:61:93:62:55: 89:da:aa:d3:09:7b:ff:46:29:d2:4c:1c:a0:41:f7: ec:ac:32:b2:15:fa:5b:06:d3:ca:75:65:d3:c2:96: a0:72:ba:44:8b:8d:fb:af:28:0c:1a:05:76:c3:bd: 56:09:69:60:99:65:f0:8c:f3:2e:a2:67:06:82:9c: 52:77:6c:b8:c0:76:20:d8:eb:77:0a:f9:c2:26:f1: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F9:92:4E:CF:9C:E3:10:8B:88:C6:FA:61:A5:4A:34:B9:01:FD:5D X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:11:7a:cf:c2:2d:8d:da:f4:fd:a0:37:03:7f:ae:59:0a:7a: 57:45:f2:6a:f8:92:20:75:8e:d9:f2:0c:fe:b4:99:1c:43:90: b2:36:1b:f8:d0:e5:2e:4b:bd:ce:c5:1c:6b:3f:f8:12:75:20: 9d:05:aa:11:4a:04:7c:3f:d5:12:0c:f0:fe:c4:f8:32:7e:58: e6:6e:67:9e:47:e2:4d:be:76:7a:00:4b:1e:37:79:2b:cb:a6: 1c:b0:94:00:5a:c5:b6:63:18:59:d5:76:74:35:2f:b6:c3:7d: 28:9a:ce:46:e0:10:7a:69:cf:ba:53:56:6e:5b:d3:b8:52:26: eb:ad:1e:e2:f0:32:0c:b7:bf:8d:ac:2d:91:af:1a:22:d4:4f: 4e:5e:c4:12:2b:17:d8:13:13:de:8b:d5:c4:ef:dc:50:f7:1e: b3:b4:c6:ee:d5:05:47:21:ee:c9:04:74:a3:9b:5e:68:21:d9: 44:39:dc:81:df:7c:c2:58:20:95:7b:69:e0:66:59:9c:99:1c: c7:87:e1:e4:db:77:a2:32:e8:0b:bb:78:ae:0a:57:13:5a:81: 21:f5:c5:a0:85:5c:37:9d:bf:2f:ea:1d:72:f4:8c:8c:38:ae: 79:44:a0:69:14:cc:fa:99:38:e6:de:61:6e:df:6b:03:ea:b2: 1a:3c:2e:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoMzdEQzYxNjgyOTQ0RjBGMzE3NEZBMDg1NUI5QUNFNDcz RkRFOUQyNjAeFw0yNTA3MDEwNzUyMDFaFw0yNTA3MDgwNzUyMDFaMBgxFjAUBgNV BAMTDTY4NjM5M2ExLTBiYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChb9xVlDtBN7v1ZnmfCRe2gFftfP+wAPHCHDF+V5rHCOUPBpE6N2vPP5g/XUjD E8idAD2WIgaecl5qM05kSy/5MWbKoqNV4hOzneEzg31DD+MUhUabzFHzAVCNh+a6 jUKHpDZxKfxANPv8rNASNJ45aJPu0zebWE8ryiAHvA8zY5pVo8MP9JHSZNp8fDrm HoSTKBinKCLSB/LO3AiH98UCbpA63zHV/ic+0Tn49PCqYZNiVYnaqtMJe/9GKdJM HKBB9+ysMrIV+lsG08p1ZdPClqByukSLjfuvKAwaBXbDvVYJaWCZZfCM8y6iZwaC nFJ3bLjAdiDY63cK+cIm8VpVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZPmSTs+c 4xCLiMb6YaVKNLkB/V0wHwYDVR0jBBgwFoAUN9xhaClE8PMXT6CFW5rORz/enSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzQzNjZFQkI2Q0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5T WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjl4aGFDbEU4UE1YVDZDRlc1ck9Sel9lblNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzQzNjZFQkI2Q0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBN WFQ2Q0ZXNXJPUnpfZW5TWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA8Res/CLY3a9P2gNwN/rlkKeldF8mr4kiB1jtnyDP60mRxDkLI2G/jQ 5S5Lvc7FHGs/+BJ1IJ0FqhFKBHw/1RIM8P7E+DJ+WOZuZ55H4k2+dnoASx43eSvL phywlABaxbZjGFnVdnQ1L7bDfSiazkbgEHppz7pTVm5b07hSJuutHuLwMgy3v42s LZGvGiLUT05exBIrF9gTE96L1cTv3FD3HrO0xu7VBUch7skEdKObXmgh2UQ53IHf fMJYIJV7aeBmWZyZHMeH4eTbd6Iy6Au7eK4KVxNagSH1xaCFXDedvy/qHXL0jIw4 rnlEoGkUzPqZOObeYW7fawPqsho8LhE= -----END CERTIFICATE-----Generated at Wed Jul 2 15:20:19 2025 by rpki-client