$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: Z3n/C1W6PErO9SDOK+Z1M0Ow6nSjHhs/MzdMJ0RaHWk= Subject key identifier: C5:B9:87:C1:7B:8E:CF:DD:23:84:1F:C3:33:A2:E8:CD:92:B2:07:CA Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 93 Signing time: Sun 19 Oct 2025 09:39:46 +0000 Manifest this update: Sun 19 Oct 2025 09:39:45 +0000 Manifest next update: Sun 26 Oct 2025 09:39:45 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: Z8tSzzx5rQXbZ8AbNdZ4veSOGKjxK7ZSanXVaQpFR0Y=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: Oct 19 09:39:45 2025 GMT Not After : Oct 26 09:39:45 2025 GMT Subject: CN=68f4b1e1-5375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:6a:4d:41:83:70:9a:82:88:46:16:9d:48: ff:85:19:c2:34:a3:75:ac:7c:85:7e:d8:5b:5d:14: b3:84:cc:59:e6:02:a7:33:02:26:58:d3:2b:81:b4: 7b:ea:38:b2:2c:d9:9b:36:54:d9:61:e3:f9:75:84: c3:0f:79:89:50:e0:4f:f7:00:b7:67:6a:1b:87:96: cd:ce:26:0e:46:0a:fb:e1:0d:f8:08:f5:b9:6f:56: a5:4b:5e:4b:c8:58:48:d8:84:73:3e:79:f6:e2:39: c9:af:63:a9:c9:b8:7e:e8:a2:fa:81:46:b5:3e:75: 82:da:fa:4e:64:d8:0a:89:b4:d4:a5:40:8c:8b:ba: 8e:56:08:c0:8b:3d:33:3c:a6:3d:e0:16:9d:04:bb: b9:45:89:7b:b1:45:94:f4:4f:d6:c3:a4:6b:67:6a: 2e:15:71:12:99:2c:5c:42:bc:80:7e:fb:27:29:eb: bc:f9:a2:d0:c7:5d:31:9b:61:05:b1:3f:f1:26:de: 12:1d:61:b8:55:50:f3:a9:e4:cf:39:c3:51:c9:82: dc:4b:97:9d:19:52:78:36:87:73:32:48:17:92:8b: 79:37:68:d9:8a:b7:ba:13:39:72:b3:fa:31:12:d4: 69:a3:ca:7d:83:bf:97:ed:33:54:af:f2:51:45:f7: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B9:87:C1:7B:8E:CF:DD:23:84:1F:C3:33:A2:E8:CD:92:B2:07:CA X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c0:68:97:39:dd:36:b7:3e:3f:ac:85:8b:7b:fa:28:dc:75: ee:51:dd:35:95:27:61:7d:a4:71:06:c9:1a:60:da:b3:42:c2: 88:e7:3f:a2:e7:37:54:a0:da:f0:40:ed:1b:5a:df:b6:e1:66: 35:6b:5d:68:e3:e7:ba:37:9c:f9:08:a6:3d:85:46:9d:89:37: 2b:7c:9c:69:06:57:e7:1a:22:89:6c:57:48:17:bb:72:6f:75: ca:79:8f:af:8f:b4:53:d3:6e:a4:ba:42:eb:17:55:d0:48:5a: b7:a6:41:e1:f6:87:83:6c:14:6b:82:49:60:3d:24:a2:0a:2c: bf:3f:7d:a3:33:d7:0d:e3:8a:34:1d:fc:9b:3d:eb:00:af:85: b9:13:fc:db:9b:16:6b:c4:0a:ac:0c:23:6d:58:f2:8a:cd:5f: df:ce:f6:54:16:f8:84:de:11:e6:c8:81:ce:d8:46:43:db:3e: d7:56:f7:13:79:87:f1:a9:29:44:5f:a2:56:40:e7:e0:9b:04: 2d:0d:b0:42:c1:4d:98:1d:9b:f8:31:8a:06:ee:85:7d:bc:48: d0:1d:8f:ec:26:a7:68:79:74:ce:0e:1a:25:9b:fb:3b:1d:4b: 27:84:88:04:02:c8:be:10:14:a5:c4:10:05:a5:2b:7d:1f:cf: fe:6a:39:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RTIxMTAvBgNVBAUTKDM3REM2MTY4Mjk0NEYwRjMxNzRGQTA4NTVCOUFDRTQ3 M0ZERTlEMjYwHhcNMjUxMDE5MDkzOTQ1WhcNMjUxMDI2MDkzOTQ1WjAYMRYwFAYD VQQDEw02OGY0YjFlMS01Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqC1qTUGDcJqCiEYWnUj/hRnCNKN1rHyFfthbXRSzhMxZ5gKnMwImWNMrgbR7 6jiyLNmbNlTZYeP5dYTDD3mJUOBP9wC3Z2obh5bNziYORgr74Q34CPW5b1alS15L yFhI2IRzPnn24jnJr2Opybh+6KL6gUa1PnWC2vpOZNgKibTUpUCMi7qOVgjAiz0z PKY94BadBLu5RYl7sUWU9E/Ww6RrZ2ouFXESmSxcQryAfvsnKeu8+aLQx10xm2EF sT/xJt4SHWG4VVDzqeTPOcNRyYLcS5edGVJ4NodzMkgXkot5N2jZire6Ezlys/ox EtRpo8p9g7+X7TNUr/JRRff6UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW5h8F7 js/dI4QfwzOi6M2SsgfKMB8GA1UdIwQYMBaAFDfcYWgpRPDzF0+ghVuazkc/3p0m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi80MzY2RUJCNkNC M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9OOXhoYUNsRThQTVhUNkNGVzVyT1J6X2Vu U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5TWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzZFMi80MzY2RUJCNkNCM0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9OOXhoYUNsRThQ TVhUNkNGVzVyT1J6X2VuU1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAswGiXOd02tz4/rIWLe/oo3HXuUd01lSdhfaRxBskaYNqzQsKI5z+i 5zdUoNrwQO0bWt+24WY1a11o4+e6N5z5CKY9hUadiTcrfJxpBlfnGiKJbFdIF7ty b3XKeY+vj7RT026kukLrF1XQSFq3pkHh9oeDbBRrgklgPSSiCiy/P32jM9cN44o0 HfybPesAr4W5E/zbmxZrxAqsDCNtWPKKzV/fzvZUFviE3hHmyIHO2EZD2z7XVvcT eYfxqSlEX6JWQOfgmwQtDbBCwU2YHZv4MYoG7oV9vEjQHY/sJqdoeXTODholm/s7 HUsnhIgEAsi+EBSlxBAFpSt9H8/+ajnq -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:12 2025 by rpki-client