$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: HK5VEMRFot3BF2+2Q/wDSBmbqOTAqxhpdDxD/GwUc34= Subject key identifier: E6:A4:22:3E:21:99:D4:6E:52:B9:D5:FD:50:A1:9A:16:C0:6E:86:EF Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 6E Signing time: Thu 07 Aug 2025 07:28:27 +0000 Manifest this update: Thu 07 Aug 2025 07:28:27 +0000 Manifest next update: Thu 14 Aug 2025 07:28:27 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: telpKNvXSj1u2R2SGe3h69zV0+XR4bXNyZqqCvQBoZc=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: Aug 7 07:28:27 2025 GMT Not After : Aug 14 07:28:27 2025 GMT Subject: CN=6894559b-5b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:7b:c5:61:c8:95:32:06:4a:51:7d:ad:51: 92:2e:c9:a0:6f:93:c5:a6:07:b4:9e:5e:12:b7:cb: f5:73:2a:92:ce:df:6d:46:67:80:2e:c8:69:a0:78: 52:7a:de:42:2b:33:7f:73:a7:43:d1:4c:8c:64:2e: 34:19:7f:2f:6b:b6:14:d3:5b:90:a6:12:ec:5c:11: 5e:40:49:ad:2a:c3:0f:2d:06:da:e8:6b:20:f8:37: 3a:9a:63:03:fc:ab:05:2c:ba:ff:51:61:94:81:f4: 75:7b:cc:61:94:87:f0:1b:1d:b6:68:99:a1:e4:d8: fb:99:db:94:92:47:7e:5e:c4:c6:15:d4:eb:f6:11: 0b:69:b2:1d:bd:3a:37:4a:19:cc:55:99:67:46:f9: 4e:88:e7:43:b2:f5:3b:96:64:a9:d7:e1:f5:22:b5: 5d:fd:16:48:38:86:ce:06:29:62:ed:be:4f:b2:5a: ba:d5:22:77:8f:de:9c:19:eb:b1:6a:97:1d:e9:af: 46:a4:91:34:e4:a2:17:23:ab:6d:44:f0:72:d5:e3: 8e:0b:08:9c:2f:cf:6c:b7:0f:4e:6d:2d:0b:51:9f: f8:5b:1c:f3:86:2c:d4:65:6e:40:17:4b:0f:a0:33: 01:4e:d4:f5:f2:31:a0:bd:86:e6:b1:d4:71:77:de: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:22:3E:21:99:D4:6E:52:B9:D5:FD:50:A1:9A:16:C0:6E:86:EF X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:56:9f:3e:90:49:08:1a:5a:99:31:29:d4:b8:00:88:c4:b3: 8e:c5:6c:7f:78:9a:18:ac:f4:bf:5e:d5:93:0c:c4:f2:6c:35: 02:5f:42:95:01:81:46:1e:be:bb:b9:a9:76:06:24:83:9b:52: 40:e0:08:1d:17:70:42:2d:5c:2f:b7:e4:4f:c6:44:29:02:3f: 85:9c:e2:05:0d:f3:2c:c3:59:0b:6d:52:58:93:c7:b3:6d:f6: 7a:8a:03:d2:51:7b:a5:13:80:1c:de:39:2d:b2:8e:98:85:13: dd:a4:43:d8:69:84:f7:c0:3f:09:c2:f0:b2:1e:42:f6:e0:0c: e5:aa:38:8f:04:7d:4f:69:96:89:eb:86:20:41:8f:04:ec:58: 8e:31:aa:f3:7b:8e:de:e1:1a:c2:24:5f:98:b5:ed:f1:9e:9f: 7a:35:c3:67:fd:46:8a:3f:a8:b0:0e:1f:db:03:83:c8:5d:a8: a6:84:af:5c:76:0a:94:40:a0:24:1c:8e:d7:0f:ee:54:08:cd: 40:f3:a1:48:d3:33:15:b1:54:85:3d:52:18:99:82:76:a8:26: 01:71:82:1b:ac:27:8d:02:16:f0:2e:0f:0a:3f:5a:c7:b5:4e: c6:1d:e4:b2:6b:0a:51:76:23:09:a2:f9:5f:d9:0a:68:1d:27: 3f:5f:17:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoMzdEQzYxNjgyOTQ0RjBGMzE3NEZBMDg1NUI5QUNFNDcz RkRFOUQyNjAeFw0yNTA4MDcwNzI4MjdaFw0yNTA4MTQwNzI4MjdaMBgxFjAUBgNV BAMTDTY4OTQ1NTliLTViNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5xXvFYciVMgZKUX2tUZIuyaBvk8WmB7SeXhK3y/VzKpLO321GZ4AuyGmgeFJ6 3kIrM39zp0PRTIxkLjQZfy9rthTTW5CmEuxcEV5ASa0qww8tBtroayD4NzqaYwP8 qwUsuv9RYZSB9HV7zGGUh/AbHbZomaHk2PuZ25SSR35exMYV1Ov2EQtpsh29OjdK GcxVmWdG+U6I50Oy9TuWZKnX4fUitV39Fkg4hs4GKWLtvk+yWrrVIneP3pwZ67Fq lx3pr0akkTTkohcjq21E8HLV444LCJwvz2y3D05tLQtRn/hbHPOGLNRlbkAXSw+g MwFO1PXyMaC9huax1HF33u/nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5qQiPiGZ 1G5SudX9UKGaFsBuhu8wHwYDVR0jBBgwFoAUN9xhaClE8PMXT6CFW5rORz/enSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzQzNjZFQkI2Q0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5T WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjl4aGFDbEU4UE1YVDZDRlc1ck9Sel9lblNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzQzNjZFQkI2Q0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBN WFQ2Q0ZXNXJPUnpfZW5TWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9Wnz6QSQgaWpkxKdS4AIjEs47FbH94mhis9L9e1ZMMxPJsNQJfQpUB gUYevru5qXYGJIObUkDgCB0XcEItXC+35E/GRCkCP4Wc4gUN8yzDWQttUliTx7Nt 9nqKA9JRe6UTgBzeOS2yjpiFE92kQ9hphPfAPwnC8LIeQvbgDOWqOI8EfU9plonr hiBBjwTsWI4xqvN7jt7hGsIkX5i17fGen3o1w2f9Roo/qLAOH9sDg8hdqKaEr1x2 CpRAoCQcjtcP7lQIzUDzoUjTMxWxVIU9UhiZgnaoJgFxghusJ40CFvAuDwo/Wse1 TsYd5LJrClF2Iwmi+V/ZCmgdJz9fFw0= -----END CERTIFICATE-----Generated at Fri Aug 8 19:21:20 2025 by rpki-client