$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: 4yEWquaOP0TrLp8ZssERCbJQ6rpn7Fs1yxquclMqBWc= Subject key identifier: 2E:FE:CE:D8:07:24:94:73:67:D1:DA:A9:35:18:31:42:E8:75:F3:30 Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 3E Signing time: Sat 03 May 2025 06:46:53 +0000 Manifest this update: Sat 03 May 2025 06:46:53 +0000 Manifest next update: Sat 10 May 2025 06:46:53 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: wxQMK27RHcp/jXrleXNflgP2c0TXekwMGWdrqroEZSw=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: May 3 06:46:53 2025 GMT Not After : May 10 06:46:53 2025 GMT Subject: CN=6815bbdd-c202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:59:da:c0:43:05:9d:c8:92:bb:a3:0c:92: 35:fd:7d:73:62:74:2b:f8:1e:68:69:59:9e:c8:1f: f3:43:15:45:5f:f5:36:fd:6a:50:69:fa:3d:29:b9: db:66:f0:3d:bf:85:d5:a5:44:1b:19:a2:27:88:c7: e2:94:1e:4d:1c:b7:c8:eb:1d:e0:e3:12:44:ed:54: 6e:6c:fe:38:d4:1d:42:fb:04:97:93:5e:fd:b7:c3: 91:c2:12:6a:10:52:21:de:02:77:25:70:4a:28:8b: 05:db:50:23:22:42:be:8e:06:96:f8:d7:23:7c:b5: 25:23:8a:e0:63:11:01:be:da:b2:de:2e:2f:3c:e8: cb:e5:29:46:f0:6f:11:95:9a:c4:e3:d5:75:95:eb: dc:59:9b:d5:f5:e7:c5:6c:48:65:0f:25:55:9b:55: 33:2b:f6:09:f1:4a:0e:76:ba:aa:82:02:af:18:cf: 4a:f5:7e:5a:60:bf:0c:e2:92:b0:d4:87:e4:2c:69: 03:db:87:38:e2:31:dd:2a:e0:5c:cc:80:bb:0c:7b: bb:13:6b:03:54:a9:10:0a:7a:57:c2:2a:c5:2d:42: 5a:7f:6a:ac:46:81:2a:17:e0:93:43:56:17:9d:7c: 40:b7:f7:2f:8a:fa:1d:16:e0:74:2c:5a:68:a7:1e: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FE:CE:D8:07:24:94:73:67:D1:DA:A9:35:18:31:42:E8:75:F3:30 X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:a8:00:c5:dc:52:27:b3:94:f4:82:56:48:d2:26:e9:74:8d: c9:4a:eb:de:70:f0:84:82:d8:29:10:45:2d:10:43:ff:ea:02: 6c:be:d9:b0:fb:96:ce:c5:2f:da:bb:28:9e:92:15:e8:13:bd: b4:93:7a:53:0a:d8:76:92:b1:4b:e9:7d:0e:38:f3:a5:c9:34: 22:6d:8b:14:dc:8f:ff:03:d1:98:f4:0f:97:26:fe:14:78:bb: 0b:6d:97:6f:24:80:d7:82:50:9b:04:d1:e0:17:ca:e9:2f:c4: f3:2c:a9:a5:c9:b0:5e:da:7a:af:af:ea:c1:92:e3:5c:11:a5: 87:52:53:a1:6f:d6:f3:c8:6a:83:c7:87:0b:e4:c7:fe:20:a4: 56:79:1e:90:b3:27:69:24:52:31:01:51:4a:48:0a:69:5c:7d: 20:96:b6:cd:cf:12:3e:dd:d5:1e:e4:b8:1c:a0:14:c0:16:8f: ec:03:af:2d:6b:22:57:53:a4:9b:d1:65:ef:0c:32:26:c4:68: 12:7c:21:9f:9d:96:39:db:20:20:dd:e2:78:7c:bf:39:57:36: 21:46:7c:c9:81:67:c2:ab:30:75:e5:2e:40:65:8a:22:f1:47: 25:3a:13:2b:90:f5:8c:30:dd:9e:7f:57:f2:11:ba:69:2d:c2: da:55:f0:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoMzdEQzYxNjgyOTQ0RjBGMzE3NEZBMDg1NUI5QUNFNDcz RkRFOUQyNjAeFw0yNTA1MDMwNjQ2NTNaFw0yNTA1MTAwNjQ2NTNaMBgxFjAUBgNV BAMTDTY4MTViYmRkLWMyMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKuVnawEMFnciSu6MMkjX9fXNidCv4HmhpWZ7IH/NDFUVf9Tb9alBp+j0pudtm 8D2/hdWlRBsZoieIx+KUHk0ct8jrHeDjEkTtVG5s/jjUHUL7BJeTXv23w5HCEmoQ UiHeAnclcEooiwXbUCMiQr6OBpb41yN8tSUjiuBjEQG+2rLeLi886MvlKUbwbxGV msTj1XWV69xZm9X158VsSGUPJVWbVTMr9gnxSg52uqqCAq8Yz0r1flpgvwzikrDU h+QsaQPbhzjiMd0q4FzMgLsMe7sTawNUqRAKelfCKsUtQlp/aqxGgSoX4JNDVhed fEC39y+K+h0W4HQsWminHnf/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULv7O2Ack lHNn0dqpNRgxQuh18zAwHwYDVR0jBBgwFoAUN9xhaClE8PMXT6CFW5rORz/enSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzQzNjZFQkI2Q0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5T WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjl4aGFDbEU4UE1YVDZDRlc1ck9Sel9lblNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzQzNjZFQkI2Q0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBN WFQ2Q0ZXNXJPUnpfZW5TWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKqoAMXcUiezlPSCVkjSJul0jclK695w8ISC2CkQRS0QQ//qAmy+2bD7 ls7FL9q7KJ6SFegTvbSTelMK2HaSsUvpfQ4486XJNCJtixTcj/8D0Zj0D5cm/hR4 uwttl28kgNeCUJsE0eAXyukvxPMsqaXJsF7aeq+v6sGS41wRpYdSU6Fv1vPIaoPH hwvkx/4gpFZ5HpCzJ2kkUjEBUUpICmlcfSCWts3PEj7d1R7kuBygFMAWj+wDry1r IldTpJvRZe8MMibEaBJ8IZ+dljnbICDd4nh8vzlXNiFGfMmBZ8KrMHXlLkBliiLx RyU6EyuQ9Yww3Z5/V/IRumktwtpV8J4= -----END CERTIFICATE-----Generated at Mon May 5 03:17:32 2025 by rpki-client