$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: /f6/U0CkFPQvA0IFcHU7y7nYOtnTkmEo1c67ODgxNJw= Subject key identifier: 46:70:6A:8A:A0:BE:B3:DC:2D:68:21:CD:C1:A2:09:71:41:73:51:A0 Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 4B Signing time: Sat 31 May 2025 06:52:17 +0000 Manifest this update: Sat 31 May 2025 06:52:16 +0000 Manifest next update: Sat 07 Jun 2025 06:52:16 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: u/tJNoawrcLSBnruAgs8JiHrZvSFuC8DJ7I6gsZlnK0=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: May 31 06:52:16 2025 GMT Not After : Jun 7 06:52:16 2025 GMT Subject: CN=683aa720-a97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:2b:20:1d:4f:51:31:3d:12:d2:7a:f1:e0: 80:ce:76:fb:8e:11:c4:92:d8:b6:17:3e:1e:e1:98: a1:a0:46:17:ea:23:36:8a:af:6a:05:05:c6:56:b8: 13:7f:56:70:81:c9:22:eb:e5:9a:f7:5b:39:db:61: 1c:20:c0:f6:f8:71:99:48:cf:de:8f:bf:64:be:1a: eb:74:61:7d:11:0e:39:50:fd:9b:19:81:48:66:de: 42:87:c9:db:6d:c7:ea:b8:45:16:78:56:d1:75:8d: 31:ff:19:53:b0:98:c9:fe:f8:dd:77:b0:ac:35:09: 32:7b:a3:7f:58:2a:d7:8b:af:17:53:4f:77:2c:27: 02:d9:2b:25:2e:dc:d8:a7:d9:52:1e:62:ac:89:e1: 1d:3b:43:bb:28:a3:bf:a6:ae:33:b1:96:ab:37:57: 57:e3:e7:77:71:e0:66:83:35:12:09:54:39:ba:c2: 7b:c2:d7:f9:6b:27:e0:16:d5:74:89:7e:98:c2:8e: 2b:e6:17:37:3b:47:fe:fa:4b:3f:96:47:80:37:aa: 56:0a:09:42:f1:24:aa:dc:01:aa:7e:36:3d:d7:9e: 84:a4:a7:c3:5c:01:9a:f7:7d:3c:a7:71:8f:be:07: 93:c8:9f:a8:11:fd:b9:04:54:71:e9:27:80:16:c0: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:70:6A:8A:A0:BE:B3:DC:2D:68:21:CD:C1:A2:09:71:41:73:51:A0 X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d4:ad:69:54:a2:8b:14:e0:ae:e4:0a:1b:98:2f:2c:2b:35: 34:ca:6f:89:8c:94:f4:17:97:57:8a:ee:2a:a0:a0:77:0a:f5: 3a:c7:67:79:7e:57:b5:fd:81:e6:22:9d:a5:a3:02:54:a2:ae: 61:39:14:d4:d0:e2:91:11:87:91:77:95:35:21:54:74:96:45: 20:12:72:9a:7a:7e:9f:b8:5e:45:c4:b4:d3:a9:d8:db:69:1c: 85:fb:4f:c0:0c:70:ac:7c:d6:b4:02:27:be:c2:71:80:65:66: c3:18:ff:00:b1:ae:ec:16:c6:a7:da:5e:34:36:aa:26:bd:db: e2:f9:2d:a8:81:dc:f4:61:23:ed:68:88:86:7b:93:3c:91:7a: bf:82:f0:f6:cf:b0:3d:56:63:40:88:4c:34:9e:83:40:e3:3e: e0:0e:bb:d2:3d:1d:9e:53:37:b1:e0:bf:4a:52:09:e3:78:8d: 28:b4:a4:22:61:91:5c:e7:92:3e:9d:52:fb:d8:ae:64:8e:01: 37:43:70:6e:66:e1:69:03:28:fd:28:99:ba:d5:cd:8b:f3:bb: 0b:04:af:42:72:3b:08:f5:db:46:54:e5:1e:39:01:93:d4:47: bd:29:25:bc:c9:77:01:e2:ed:fe:3e:6c:76:25:8a:1d:ef:9c: c2:16:04:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoMzdEQzYxNjgyOTQ0RjBGMzE3NEZBMDg1NUI5QUNFNDcz RkRFOUQyNjAeFw0yNTA1MzEwNjUyMTZaFw0yNTA2MDcwNjUyMTZaMBgxFjAUBgNV BAMTDTY4M2FhNzIwLWE5N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTRCsgHU9RMT0S0nrx4IDOdvuOEcSS2LYXPh7hmKGgRhfqIzaKr2oFBcZWuBN/ VnCBySLr5Zr3WznbYRwgwPb4cZlIz96Pv2S+Gut0YX0RDjlQ/ZsZgUhm3kKHydtt x+q4RRZ4VtF1jTH/GVOwmMn++N13sKw1CTJ7o39YKteLrxdTT3csJwLZKyUu3Nin 2VIeYqyJ4R07Q7soo7+mrjOxlqs3V1fj53dx4GaDNRIJVDm6wnvC1/lrJ+AW1XSJ fpjCjivmFzc7R/76Sz+WR4A3qlYKCULxJKrcAap+Nj3XnoSkp8NcAZr3fTyncY++ B5PIn6gR/bkEVHHpJ4AWwAr/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURnBqiqC+ s9wtaCHNwaIJcUFzUaAwHwYDVR0jBBgwFoAUN9xhaClE8PMXT6CFW5rORz/enSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzQzNjZFQkI2Q0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5T WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjl4aGFDbEU4UE1YVDZDRlc1ck9Sel9lblNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzQzNjZFQkI2Q0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBN WFQ2Q0ZXNXJPUnpfZW5TWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIbUrWlUoosU4K7kChuYLywrNTTKb4mMlPQXl1eK7iqgoHcK9TrHZ3l+ V7X9geYinaWjAlSirmE5FNTQ4pERh5F3lTUhVHSWRSAScpp6fp+4XkXEtNOp2Ntp HIX7T8AMcKx81rQCJ77CcYBlZsMY/wCxruwWxqfaXjQ2qia92+L5LaiB3PRhI+1o iIZ7kzyRer+C8PbPsD1WY0CITDSeg0DjPuAOu9I9HZ5TN7Hgv0pSCeN4jSi0pCJh kVznkj6dUvvYrmSOATdDcG5m4WkDKP0ombrVzYvzuwsEr0JyOwj120ZU5R45AZPU R70pJbzJdwHi7f4+bHYlih3vnMIWBMc= -----END CERTIFICATE-----Generated at Sat May 31 16:43:51 2025 by rpki-client