$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: oiC9askP0hiuks3KotIWZ2oUr4MJgtX6rKfajttuAgY= Subject key identifier: 41:F6:A2:0B:CD:00:BF:14:E0:94:66:BB:62:4B:2B:EE:44:9B:D8:BB Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 76 Signing time: Sat 23 Aug 2025 07:00:33 +0000 Manifest this update: Sat 23 Aug 2025 07:00:33 +0000 Manifest next update: Sat 30 Aug 2025 07:00:33 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: SknmqaE9CaPfWYlua/94MtkYFl/unt81sllsOTti36k=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: Aug 23 07:00:33 2025 GMT Not After : Aug 30 07:00:33 2025 GMT Subject: CN=68a96711-a9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:0f:f7:40:db:3d:03:6c:b3:99:9f:02:f6: 00:ba:73:c1:57:d4:b8:eb:ea:f2:1f:9d:46:40:d9: 80:96:2d:32:b3:9c:ce:74:b0:96:ad:d6:b2:0a:dc: ed:c5:ef:05:f6:60:27:97:17:93:cb:95:fc:42:ac: 86:a8:99:6e:43:8a:23:a0:9c:d6:02:b5:ff:f3:7e: 71:6a:3e:c6:44:05:7f:60:a0:be:61:d5:79:88:80: 19:52:82:88:a3:8c:1c:9e:8c:a2:6a:9e:b2:11:91: c5:a0:bf:39:d2:14:0f:7f:80:ae:b7:cb:07:44:d0: 48:34:b7:46:2f:ef:42:ea:88:d8:9c:6f:c9:58:66: 38:29:85:0f:e4:2c:03:3b:49:42:4e:8d:76:63:8b: 01:d3:8a:e9:02:c2:a9:62:60:5a:24:77:21:21:7c: 40:8e:4f:ec:78:c8:b7:dc:72:dc:3c:ab:ea:e1:13: cd:fb:6a:f3:8d:29:a3:7e:c1:3f:a9:b8:80:54:f4: c7:31:b4:6d:ca:12:cc:06:72:59:04:99:bf:78:1e: 7f:0c:9e:38:4a:e7:54:64:de:2f:7d:3e:87:c0:4b: 05:16:9d:f5:ab:8f:86:32:7f:be:6c:f0:97:ba:ca: b1:41:5b:cf:89:3c:19:d6:3c:67:b8:03:db:a2:7c: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F6:A2:0B:CD:00:BF:14:E0:94:66:BB:62:4B:2B:EE:44:9B:D8:BB X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a4:fb:69:f5:6c:25:79:eb:a9:52:ee:27:21:8b:dc:a1:95: 5b:8f:83:65:1b:9a:c5:1a:c2:c6:0d:25:b6:33:d9:b1:34:50: ac:84:26:fb:5e:86:24:67:aa:e4:8b:39:b0:b8:61:eb:13:7c: 3d:c4:6b:3a:02:74:fb:54:66:2d:11:45:94:00:93:18:a5:72: 49:77:a1:40:82:1d:6d:37:86:74:58:d0:12:a1:e6:a7:d9:aa: 0b:46:43:ed:60:44:da:c3:f1:37:8a:57:7c:c0:2b:eb:4f:fd: 85:43:d2:9a:97:6f:68:e1:35:dd:1f:a7:25:c3:51:88:02:fc: 24:6e:98:dc:ca:e9:99:83:5c:f5:ba:39:a3:7f:fe:b4:95:23: 14:6f:c2:fe:a0:81:ee:33:00:11:b6:40:3a:91:85:f4:15:59: b7:fc:30:ce:35:0f:8d:67:6e:a8:6b:ee:3b:56:43:c6:67:54: 7e:15:99:96:6f:8b:c3:09:2b:6d:fa:02:57:eb:b3:00:55:94: 1c:0c:f7:d6:d8:fd:d1:95:fd:93:ef:87:0a:61:8d:c6:07:18: bd:96:ea:e3:ce:a2:89:d8:e0:f7:c3:56:ee:40:34:b0:11:75: 67:06:3a:de:0e:fd:3e:a7:04:54:84:40:44:55:be:3a:d3:df: 75:da:98:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoMzdEQzYxNjgyOTQ0RjBGMzE3NEZBMDg1NUI5QUNFNDcz RkRFOUQyNjAeFw0yNTA4MjMwNzAwMzNaFw0yNTA4MzAwNzAwMzNaMBgxFjAUBgNV BAMTDTY4YTk2NzExLWE5YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZqw/3QNs9A2yzmZ8C9gC6c8FX1Ljr6vIfnUZA2YCWLTKznM50sJat1rIK3O3F 7wX2YCeXF5PLlfxCrIaomW5DiiOgnNYCtf/zfnFqPsZEBX9goL5h1XmIgBlSgoij jByejKJqnrIRkcWgvznSFA9/gK63ywdE0Eg0t0Yv70LqiNicb8lYZjgphQ/kLAM7 SUJOjXZjiwHTiukCwqliYFokdyEhfECOT+x4yLfcctw8q+rhE837avONKaN+wT+p uIBU9McxtG3KEswGclkEmb94Hn8MnjhK51Rk3i99PofASwUWnfWrj4Yyf75s8Je6 yrFBW8+JPBnWPGe4A9uifJwJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQfaiC80A vxTglGa7Yksr7kSb2LswHwYDVR0jBBgwFoAUN9xhaClE8PMXT6CFW5rORz/enSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzQzNjZFQkI2Q0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5T WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjl4aGFDbEU4UE1YVDZDRlc1ck9Sel9lblNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzQzNjZFQkI2Q0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBN WFQ2Q0ZXNXJPUnpfZW5TWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGuk+2n1bCV566lS7ichi9yhlVuPg2UbmsUawsYNJbYz2bE0UKyEJvte hiRnquSLObC4YesTfD3EazoCdPtUZi0RRZQAkxilckl3oUCCHW03hnRY0BKh5qfZ qgtGQ+1gRNrD8TeKV3zAK+tP/YVD0pqXb2jhNd0fpyXDUYgC/CRumNzK6ZmDXPW6 OaN//rSVIxRvwv6gge4zABG2QDqRhfQVWbf8MM41D41nbqhr7jtWQ8ZnVH4VmZZv i8MJK236AlfrswBVlBwM99bY/dGV/ZPvhwphjcYHGL2W6uPOoonY4PfDVu5ANLAR dWcGOt4O/T6nBFSEQERVvjrT33XamMc= -----END CERTIFICATE-----Generated at Sat Aug 23 19:00:10 2025 by rpki-client