$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: qufn8/6/QSiT74r6mhLN+0YkZBKE7XjRqBP19sJsXp4= Subject key identifier: 5F:A6:17:7E:85:D0:BE:AF:34:F9:59:43:88:A4:0E:AC:1D:BA:43:6E Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: EC Signing time: Sun 05 Apr 2026 05:46:42 +0000 Manifest this update: Sun 05 Apr 2026 05:46:41 +0000 Manifest next update: Sun 12 Apr 2026 05:46:41 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: puWWAQPe9ngTXVbKJG3ekKcm9XzfJmqKdNbZwbSGcNI=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: VXJPLa2QkwTK9qAfsf4K4gTbZZAIxfCK2fVcEe5zOgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: Apr 5 05:46:41 2026 GMT Not After : Apr 12 05:46:41 2026 GMT Subject: CN=69d1f742-feec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:43:f9:dc:df:ac:50:4e:8a:07:32:22:57: cc:26:08:66:38:94:47:f6:1d:e5:f8:1c:f3:dd:52: 38:0b:dc:6c:6c:cf:bb:16:e6:97:b8:55:1d:7c:84: 85:b2:1e:fa:a8:19:dc:cd:a5:dd:a2:c6:6f:0a:29: 21:f5:3b:18:ca:5f:0e:8c:a0:22:af:98:c0:ec:e0: b7:71:66:02:18:6a:94:e5:40:d3:48:ec:78:06:8f: 97:fc:ac:a5:09:9e:ae:f4:55:9a:00:36:31:9e:88: 7e:9d:8f:07:05:57:6a:4d:6b:1d:36:9b:e1:46:11: b0:e4:b0:09:20:39:21:8a:1a:34:b2:ab:b6:e9:f4: 48:90:d8:a1:db:be:20:25:9b:45:b1:9b:65:27:13: 16:12:02:55:bf:cc:17:08:17:09:21:c5:41:68:d9: f7:e5:f1:e3:e5:79:10:ab:44:dc:3a:1b:90:ca:65: 3b:69:ef:e8:69:57:32:28:04:be:ba:9b:58:96:bc: 4f:93:fc:6b:b8:e9:6d:b5:db:6a:27:0b:4e:fa:37: c3:cd:a7:4d:92:74:01:f8:5b:9f:b4:d2:c2:c7:77: 61:32:ff:74:06:12:05:13:c5:c6:0c:8a:3f:54:97: 6c:5f:0f:65:70:a6:93:49:77:da:dd:52:fb:f6:2d: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:17:7E:85:D0:BE:AF:34:F9:59:43:88:A4:0E:AC:1D:BA:43:6E X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0d:bb:19:ec:07:a4:b9:f6:e2:8e:e8:4f:19:f1:61:80:a6: e6:cc:f4:fa:ff:25:db:66:eb:c1:32:80:b0:f7:6d:70:f5:f9: 54:cb:f0:e2:3f:99:66:e8:28:0b:70:47:44:6a:b6:64:0b:3d: f0:06:0b:bc:9a:e4:83:47:88:19:14:54:eb:12:d6:bb:de:3c: c2:8b:79:9f:2f:eb:b6:57:85:5c:43:af:08:3c:65:63:ce:46: 42:de:b7:24:71:07:d7:68:93:87:e7:9a:f3:e7:ba:75:e4:f2: 9a:3e:ef:f8:68:7e:c3:97:57:7b:ff:06:d5:7d:12:64:23:f4: 7d:c2:4e:e4:99:4b:a8:8e:c6:08:2f:47:33:17:0b:c8:ff:54: 2c:af:ba:90:bc:64:9f:88:b6:d5:00:14:4b:55:0a:fd:e8:a9: 95:fc:81:1c:d4:d4:be:3f:4e:92:a7:a1:31:2d:2b:51:b4:88: 1e:a6:18:ec:7c:38:7c:f1:a9:e0:fa:2f:ff:69:12:d7:94:6d: e1:26:3f:1b:28:73:19:1f:a3:0a:c8:a7:1f:21:9e:08:29:d9: 20:d6:3a:23:5f:9f:2b:20:81:72:d6:92:56:1a:1b:ce:37:12: e1:72:21:e8:bb:85:b9:1d:a1:20:21:77:d4:4c:c5:38:59:84: b8:b4:81:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RTIxMTAvBgNVBAUTKDM3REM2MTY4Mjk0NEYwRjMxNzRGQTA4NTVCOUFDRTQ3 M0ZERTlEMjYwHhcNMjYwNDA1MDU0NjQxWhcNMjYwNDEyMDU0NjQxWjAYMRYwFAYD VQQDEw02OWQxZjc0Mi1mZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf5D+dzfrFBOigcyIlfMJghmOJRH9h3l+Bzz3VI4C9xsbM+7FuaXuFUdfISF sh76qBnczaXdosZvCikh9TsYyl8OjKAir5jA7OC3cWYCGGqU5UDTSOx4Bo+X/Kyl CZ6u9FWaADYxnoh+nY8HBVdqTWsdNpvhRhGw5LAJIDkhiho0squ26fRIkNih274g JZtFsZtlJxMWEgJVv8wXCBcJIcVBaNn35fHj5XkQq0TcOhuQymU7ae/oaVcyKAS+ uptYlrxPk/xruOlttdtqJwtO+jfDzadNknQB+FuftNLCx3dhMv90BhIFE8XGDIo/ VJdsXw9lcKaTSXfa3VL79i2lXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+mF36F 0L6vNPlZQ4ikDqwdukNuMB8GA1UdIwQYMBaAFDfcYWgpRPDzF0+ghVuazkc/3p0m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi80MzY2RUJCNkNC M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9OOXhoYUNsRThQTVhUNkNGVzVyT1J6X2Vu U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5TWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzZFMi80MzY2RUJCNkNCM0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9OOXhoYUNsRThQ TVhUNkNGVzVyT1J6X2VuU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQA27GewHpLn24o7oTxnxYYCm5sz0+v8l22brwTKAsPdtcPX5VMvw4j+ZZugo C3BHRGq2ZAs98AYLvJrkg0eIGRRU6xLWu948wot5ny/rtleFXEOvCDxlY85GQt63 JHEH12iTh+ea8+e6deTymj7v+Gh+w5dXe/8G1X0SZCP0fcJO5JlLqI7GCC9HMxcL yP9ULK+6kLxkn4i21QAUS1UK/eiplfyBHNTUvj9OkqehMS0rUbSIHqYY7Hw4fPGp 4Pov/2kS15Rt4SY/GyhzGR+jCsinHyGeCCnZINY6I1+fKyCBctaSVhobzjcS4XIh 6LuFuR2hICF31EzFOFmEuLSBmg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:08 2026 by rpki-client