$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: pmPGmmQpFF0/T72f3qofwMYZulVVQEppGNf1XzwHJu4= Subject key identifier: A1:C6:B0:D9:B3:C5:21:73:19:FC:60:A5:BA:09:93:47:F2:17:2B:90 Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 3A Signing time: Fri 25 Apr 2025 06:30:10 +0000 Manifest this update: Fri 25 Apr 2025 06:30:10 +0000 Manifest next update: Fri 02 May 2025 06:30:10 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: o9J/8a06uuGzkNwHBklfJdbBWWh/QVWrdfBKh1J0uIk=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: Apr 25 06:30:10 2025 GMT Not After : May 2 06:30:10 2025 GMT Subject: CN=680b2bf2-d674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:20:de:e4:a7:59:24:69:82:0e:d0:f6:c0: 1d:e7:c8:28:29:63:c3:3f:2a:35:59:c2:f3:56:cb: f4:16:3e:70:5b:9d:a5:a3:54:6e:3e:49:63:19:90: 57:29:e4:cc:28:20:5a:ba:04:10:96:80:c7:9d:aa: 53:38:77:5c:1c:8c:e8:2e:12:8f:dd:bb:ef:76:17: 40:c2:ea:89:e1:91:31:a7:40:bb:2a:d5:77:13:1c: 7b:dc:4b:1d:e3:dc:1c:8b:d2:da:14:c9:a1:5d:27: 00:65:dc:e2:c6:12:f7:e7:a1:3e:f1:3c:f0:92:77: ab:22:d5:ae:f2:2a:8d:81:e1:15:da:34:bb:f2:97: 65:ff:d2:02:a0:62:00:fb:34:2b:7d:75:79:e1:b4: 99:ee:71:d6:9e:0a:bd:74:19:1e:9a:4a:2d:6f:b7: 9e:5a:c8:fa:e0:8f:07:b4:32:c8:a1:25:9a:94:da: 67:d1:bb:eb:79:c6:bb:58:5a:a4:f3:6b:3f:75:81: 3e:33:88:65:38:c5:72:9b:2a:22:93:ba:14:9b:fd: 61:49:fa:7d:7a:86:a5:c4:1a:79:ad:83:21:ff:2a: b2:24:f3:95:2d:07:aa:22:68:02:2e:0c:e0:a0:80: ad:36:b8:3e:47:6f:ae:68:d5:7f:15:2b:3c:90:59: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C6:B0:D9:B3:C5:21:73:19:FC:60:A5:BA:09:93:47:F2:17:2B:90 X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:bb:18:55:44:9d:1d:32:7a:8b:07:f3:91:46:82:a2:08:52: 3a:e6:7d:e6:57:5a:0d:db:cd:13:f4:84:62:4b:74:9d:29:7f: c1:da:1c:e4:03:99:99:f8:db:d3:9e:67:a2:eb:d4:42:72:e5: fb:58:44:d5:4f:21:08:47:7c:7c:3b:42:ee:50:aa:2f:c6:e2: 63:4c:07:b0:85:2f:73:6e:37:15:a8:df:18:eb:a1:fb:a0:76: c4:d5:65:e8:5e:d8:b4:e7:d4:ed:3f:88:51:57:15:1a:49:d4: 38:73:a1:92:d8:67:08:1b:2e:28:55:0b:74:18:d4:a3:61:cb: d7:d3:cc:57:6c:9e:99:d6:a5:45:7a:99:24:5e:b9:24:f4:a2: d7:16:b9:b1:32:39:12:eb:99:1a:f2:b8:5f:ab:fd:57:78:83: 1e:d1:8d:82:78:35:67:b3:4a:1c:bb:e7:1d:c6:ec:68:da:8c: d4:1a:8b:ab:df:21:34:8e:92:38:27:58:d0:e6:e5:23:ed:61: ce:d0:7a:77:0c:ea:2e:db:da:2b:c0:02:75:e9:9f:2c:ad:65: fa:9c:c7:e7:7e:32:f6:25:39:35:58:92:79:07:dd:63:73:23: fa:0f:4d:8d:a9:5b:ae:43:c7:bb:aa:eb:24:fa:22:65:47:48: 43:28:58:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoMzdEQzYxNjgyOTQ0RjBGMzE3NEZBMDg1NUI5QUNFNDcz RkRFOUQyNjAeFw0yNTA0MjUwNjMwMTBaFw0yNTA1MDIwNjMwMTBaMBgxFjAUBgNV BAMTDTY4MGIyYmYyLWQ2NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/zyDe5KdZJGmCDtD2wB3nyCgpY8M/KjVZwvNWy/QWPnBbnaWjVG4+SWMZkFcp 5MwoIFq6BBCWgMedqlM4d1wcjOguEo/du+92F0DC6onhkTGnQLsq1XcTHHvcSx3j 3ByL0toUyaFdJwBl3OLGEvfnoT7xPPCSd6si1a7yKo2B4RXaNLvyl2X/0gKgYgD7 NCt9dXnhtJnucdaeCr10GR6aSi1vt55ayPrgjwe0MsihJZqU2mfRu+t5xrtYWqTz az91gT4ziGU4xXKbKiKTuhSb/WFJ+n16hqXEGnmtgyH/KrIk85UtB6oiaAIuDOCg gK02uD5Hb65o1X8VKzyQWUFDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUocaw2bPF IXMZ/GClugmTR/IXK5AwHwYDVR0jBBgwFoAUN9xhaClE8PMXT6CFW5rORz/enSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzQzNjZFQkI2Q0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5T WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjl4aGFDbEU4UE1YVDZDRlc1ck9Sel9lblNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzQzNjZFQkI2Q0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBN WFQ2Q0ZXNXJPUnpfZW5TWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKa7GFVEnR0yeosH85FGgqIIUjrmfeZXWg3bzRP0hGJLdJ0pf8HaHOQD mZn429OeZ6Lr1EJy5ftYRNVPIQhHfHw7Qu5Qqi/G4mNMB7CFL3NuNxWo3xjrofug dsTVZehe2LTn1O0/iFFXFRpJ1DhzoZLYZwgbLihVC3QY1KNhy9fTzFdsnpnWpUV6 mSReuST0otcWubEyORLrmRryuF+r/Vd4gx7RjYJ4NWezShy75x3G7GjajNQai6vf ITSOkjgnWNDm5SPtYc7QencM6i7b2ivAAnXpnyytZfqcx+d+MvYlOTVYknkH3WNz I/oPTY2pW65Dx7uq6yT6ImVHSEMoWNg= -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:19 2025 by rpki-client