$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: 9DfJqGFfHg2OZ3FW07rv6+2KQY8mrNrs/vbbwHICPIM= Subject key identifier: E4:6D:0E:09:F5:31:66:9A:44:40:FB:67:54:06:0C:94:DB:5B:B1:62 Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 52 Signing time: Fri 13 Jun 2025 06:07:09 +0000 Manifest this update: Fri 13 Jun 2025 06:07:09 +0000 Manifest next update: Fri 20 Jun 2025 06:07:09 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: cdUvqVhVycJG8+Nlod8GfBepPUIQVuiILCisjeA4sQE=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Validity Not Before: Jun 13 06:07:09 2025 GMT Not After : Jun 20 06:07:09 2025 GMT Subject: CN=684bc00d-7683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:9b:af:7e:f9:ab:de:27:8d:f5:c6:47:3f: 47:f8:1b:ac:01:3b:8a:7f:bd:f8:92:0a:0e:a1:43: e3:d2:23:9d:34:fe:0b:66:02:5a:f3:a1:d2:6b:53: 53:07:43:91:94:3e:35:c4:e1:a5:de:1d:39:30:49: b7:b3:08:f1:9f:2a:ca:bd:20:95:3e:01:a5:4e:d8: 15:53:77:7a:c0:f5:34:45:04:87:b3:c6:6e:df:01: 56:86:11:28:e5:d5:24:af:dc:66:3a:5d:06:96:89: 2b:f2:63:97:40:c9:ac:22:cc:34:ac:dc:92:0d:35: ea:ca:2d:e2:d2:1e:e5:c1:ee:cc:74:a1:f3:e8:79: 03:83:ec:26:c9:77:56:fe:45:aa:dd:c1:d1:1f:f1: 7e:5d:80:35:6b:62:42:d5:2d:c5:15:49:e2:1f:c5: 40:42:0e:d8:7b:d7:11:4d:4c:97:b5:93:a4:12:34: 19:e4:b7:58:02:85:05:e8:de:75:f5:95:60:9b:7d: c1:90:19:a1:ec:34:db:fc:1c:c2:85:ef:71:d0:e2: bd:7b:b9:57:88:53:a5:dc:2a:3b:c1:bf:58:80:4b: da:9d:1d:3b:a7:be:81:2f:f7:04:21:03:36:ed:ae: bb:06:5e:9a:00:93:9a:b2:3c:2c:3c:5e:7f:5f:02: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6D:0E:09:F5:31:66:9A:44:40:FB:67:54:06:0C:94:DB:5B:B1:62 X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ab:4b:ef:56:b5:af:53:4f:0a:3d:84:ba:0e:de:98:84:90: 29:41:72:c7:20:ca:d3:72:6a:60:66:4d:a7:71:a6:6f:f3:27: 12:d6:c9:c7:b1:6f:d9:6e:af:e0:92:59:6f:ec:cc:47:92:e3: 04:4e:f2:af:cd:dd:d5:9e:db:4f:e5:0d:15:9c:51:74:22:a1: 97:2d:69:fe:09:03:ec:5c:13:dd:5d:a6:7c:b3:6e:7f:98:f6: c1:c5:d7:bf:ef:be:16:e6:6b:25:47:65:92:08:da:6d:96:7c: f4:60:94:41:b3:db:c2:c8:88:8e:60:d7:58:e5:a6:ca:7a:07: f7:78:b4:66:62:df:ba:e1:08:88:75:16:53:7c:76:03:d3:14: d2:24:3f:9f:83:31:de:95:1b:c6:e5:75:d3:58:bb:91:fc:99: 6c:f6:3b:8f:44:2c:99:e6:be:ac:42:10:e8:6d:f5:c2:e4:a9: 43:90:c7:09:fb:cf:38:34:bb:9a:83:07:86:4b:fa:1d:e3:e0: 1d:f8:50:94:7c:25:01:05:2f:11:b9:6b:bc:33:f9:39:a6:be: d2:d7:a3:dd:ed:05:ed:24:d7:f9:4d:63:f7:7d:e8:f4:f3:bd: 9c:a3:45:49:93:af:d7:26:f6:45:6d:63:e7:44:52:07:fc:a4: 1a:9a:8e:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoMzdEQzYxNjgyOTQ0RjBGMzE3NEZBMDg1NUI5QUNFNDcz RkRFOUQyNjAeFw0yNTA2MTMwNjA3MDlaFw0yNTA2MjAwNjA3MDlaMBgxFjAUBgNV BAMTDTY4NGJjMDBkLTc2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDCpuvfvmr3ieN9cZHP0f4G6wBO4p/vfiSCg6hQ+PSI500/gtmAlrzodJrU1MH Q5GUPjXE4aXeHTkwSbezCPGfKsq9IJU+AaVO2BVTd3rA9TRFBIezxm7fAVaGESjl 1SSv3GY6XQaWiSvyY5dAyawizDSs3JINNerKLeLSHuXB7sx0ofPoeQOD7CbJd1b+ RardwdEf8X5dgDVrYkLVLcUVSeIfxUBCDth71xFNTJe1k6QSNBnkt1gChQXo3nX1 lWCbfcGQGaHsNNv8HMKF73HQ4r17uVeIU6XcKjvBv1iAS9qdHTunvoEv9wQhAzbt rrsGXpoAk5qyPCw8Xn9fAkW1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5G0OCfUx ZppEQPtnVAYMlNtbsWIwHwYDVR0jBBgwFoAUN9xhaClE8PMXT6CFW5rORz/enSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzQzNjZFQkI2Q0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5T WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjl4aGFDbEU4UE1YVDZDRlc1ck9Sel9lblNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzQzNjZFQkI2Q0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBN WFQ2Q0ZXNXJPUnpfZW5TWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2rS+9Wta9TTwo9hLoO3piEkClBcscgytNyamBmTadxpm/zJxLWycex b9lur+CSWW/szEeS4wRO8q/N3dWe20/lDRWcUXQioZctaf4JA+xcE91dpnyzbn+Y 9sHF17/vvhbmayVHZZII2m2WfPRglEGz28LIiI5g11jlpsp6B/d4tGZi37rhCIh1 FlN8dgPTFNIkP5+DMd6VG8blddNYu5H8mWz2O49ELJnmvqxCEOht9cLkqUOQxwn7 zzg0u5qDB4ZL+h3j4B34UJR8JQEFLxG5a7wz+TmmvtLXo93tBe0k1/lNY/d96PTz vZyjRUmTr9cm9kVtY+dEUgf8pBqajuQ= -----END CERTIFICATE-----Generated at Sun Jun 15 07:13:16 2025 by rpki-client