$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: BDb3ObcCTxqjNpk2Hawiy37fznBISNKw+iOrMmdyUwk= Subject key identifier: DF:0C:BF:98:48:A6:6B:AE:47:26:3C:4B:31:B1:5E:30:B4:DA:73:2E Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 9A Signing time: Mon 03 Nov 2025 06:21:08 +0000 Manifest this update: Mon 03 Nov 2025 06:21:07 +0000 Manifest next update: Mon 10 Nov 2025 06:21:07 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: eFMbJl7MjRZ27b+VLDxtXriFiyAb+LLQ+/kBy/U9xJI=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: Nov 3 06:21:07 2025 GMT Not After : Nov 10 06:21:07 2025 GMT Subject: CN=690849d4-c6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:47:ca:a2:f0:17:82:bb:b9:73:f3:46:92:bb: 6c:40:48:71:b5:bb:4b:5f:cd:10:65:bd:d0:1a:65: ef:4a:69:55:25:94:29:18:cf:08:db:a1:49:08:0a: 70:d8:24:6a:bf:d8:2e:9d:5b:3a:37:4e:0a:92:e2: bc:fc:55:80:1e:83:14:2d:01:db:7f:5d:0b:69:80: 9c:b2:eb:de:46:9e:f5:ce:4a:4d:05:2b:37:4d:5f: cf:c8:fe:9d:1b:2b:7d:86:2b:d0:5b:93:a5:53:ba: 1a:91:2b:57:32:54:4f:0c:f0:ff:19:ee:2e:1b:5c: 16:e5:95:d0:ef:48:7a:aa:b5:0c:a0:53:78:33:21: b9:2e:9b:6a:8a:b0:cc:b4:9b:c8:67:aa:4c:09:5e: c4:ad:75:10:b9:ba:44:99:aa:77:e8:32:06:ac:fe: 31:e3:1a:8f:98:49:38:d6:9d:d8:96:22:8e:a2:43: 77:aa:8a:9e:12:85:4e:c0:76:27:fe:84:e3:ca:45: 5d:35:41:5f:a1:5a:94:fb:86:f7:b7:21:9e:24:97: 47:28:fe:aa:5e:1b:f6:df:63:b4:7a:50:98:06:99: fb:ba:34:7f:44:48:f9:c2:04:0b:c7:76:00:52:17: 76:f9:1b:a1:aa:5a:43:70:79:12:00:ad:79:63:12: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0C:BF:98:48:A6:6B:AE:47:26:3C:4B:31:B1:5E:30:B4:DA:73:2E X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:2b:77:a1:07:18:0f:55:be:8b:60:f3:3b:47:5d:c5:eb:46: dd:65:19:0c:7a:fc:ce:c4:6e:96:12:9f:06:20:a2:02:61:28: 05:82:a5:64:62:01:9d:d8:0e:53:f1:91:db:79:77:81:c5:da: 69:b8:de:ad:59:c8:f6:68:6b:cc:b5:eb:51:5b:66:97:0d:41: 9d:50:f2:cd:d7:6b:c9:57:e0:74:bf:e6:d1:4e:14:6d:05:42: 0a:76:8c:50:5f:fb:30:2b:3b:73:8e:e5:2f:ac:35:2b:46:ff: 5b:e0:66:8a:8c:a1:20:04:bd:c0:16:3a:e9:68:40:ac:2a:3b: 5e:e6:9a:3c:5a:b9:a4:82:9d:ff:7a:8b:31:56:0e:12:22:ba: a8:ae:de:cf:71:03:9f:8a:ed:98:44:27:a0:b4:c7:10:07:a9: e0:33:b2:f8:65:96:4d:86:82:55:2a:2b:68:a3:70:55:9a:51: 3f:45:51:ba:90:07:a1:54:91:6a:f1:af:8a:fa:73:2b:e3:f8: db:5f:cb:2a:97:33:b2:6a:cc:e4:ec:a5:dc:a7:f8:b3:64:7e: f3:2e:62:9f:c5:09:b9:39:50:6a:0b:5f:a6:c2:39:6a:ff:56: 28:1f:77:85:13:c8:ee:75:3d:9b:4b:f6:31:42:e3:32:bc:53: 91:ab:19:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RTIxMTAvBgNVBAUTKDM3REM2MTY4Mjk0NEYwRjMxNzRGQTA4NTVCOUFDRTQ3 M0ZERTlEMjYwHhcNMjUxMTAzMDYyMTA3WhcNMjUxMTEwMDYyMTA3WjAYMRYwFAYD VQQDEw02OTA4NDlkNC1jNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80fKovAXgru5c/NGkrtsQEhxtbtLX80QZb3QGmXvSmlVJZQpGM8I26FJCApw 2CRqv9gunVs6N04KkuK8/FWAHoMULQHbf10LaYCcsuveRp71zkpNBSs3TV/PyP6d Gyt9hivQW5OlU7oakStXMlRPDPD/Ge4uG1wW5ZXQ70h6qrUMoFN4MyG5LptqirDM tJvIZ6pMCV7ErXUQubpEmap36DIGrP4x4xqPmEk41p3YliKOokN3qoqeEoVOwHYn /oTjykVdNUFfoVqU+4b3tyGeJJdHKP6qXhv232O0elCYBpn7ujR/REj5wgQLx3YA Uhd2+RuhqlpDcHkSAK15YxIicQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8Mv5hI pmuuRyY8SzGxXjC02nMuMB8GA1UdIwQYMBaAFDfcYWgpRPDzF0+ghVuazkc/3p0m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi80MzY2RUJCNkNC M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9OOXhoYUNsRThQTVhUNkNGVzVyT1J6X2Vu U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5TWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzZFMi80MzY2RUJCNkNCM0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9OOXhoYUNsRThQ TVhUNkNGVzVyT1J6X2VuU1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnK3ehBxgPVb6LYPM7R13F60bdZRkMevzOxG6WEp8GIKICYSgFgqVk YgGd2A5T8ZHbeXeBxdppuN6tWcj2aGvMtetRW2aXDUGdUPLN12vJV+B0v+bRThRt BUIKdoxQX/swKztzjuUvrDUrRv9b4GaKjKEgBL3AFjrpaECsKjte5po8Wrmkgp3/ eosxVg4SIrqort7PcQOfiu2YRCegtMcQB6ngM7L4ZZZNhoJVKitoo3BVmlE/RVG6 kAehVJFq8a+K+nMr4/jbX8sqlzOyaszk7KXcp/izZH7zLmKfxQm5OVBqC1+mwjlq /1YoH3eFE8judT2bS/YxQuMyvFORqxna -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:12 2025 by rpki-client