$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: FVjuGWjZmBBJElDVjO0KyiMxI++bxeQT7fpSp2oDizs= Subject key identifier: A7:C6:24:AD:64:25:4C:C5:53:42:ED:F3:B4:21:C5:D7:EC:1F:E6:27 Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 0551 Signing time: Thu 24 Apr 2025 23:12:51 +0000 Manifest this update: Thu 24 Apr 2025 23:12:50 +0000 Manifest next update: Thu 01 May 2025 23:12:50 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: l15hygqTmDRp7lCwe5Uylz4NaY0KLqc5LuFMIhW+xgk=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: Apr 24 23:12:50 2025 GMT Not After : May 1 23:12:50 2025 GMT Subject: CN=680ac572-c209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:8d:d1:a7:19:ae:50:8f:ed:e0:07:82:6d: 49:05:43:f6:2b:f2:a6:dc:32:72:fb:8f:c3:5a:c9: 13:f2:a1:89:20:5b:6a:65:85:e1:4b:e8:27:66:68: 68:74:d1:b2:69:6e:a0:6c:1f:d5:24:3a:5c:09:24: 7d:61:98:e6:d2:43:b5:31:7a:57:43:d1:33:8a:b9: 78:2e:56:45:f1:b2:0a:a9:95:b6:48:82:9c:6a:4b: 21:9b:77:45:a1:10:ec:d3:dc:34:85:d2:19:34:a4: bb:81:59:6b:a2:68:46:66:2a:36:09:68:5f:28:67: e4:7b:92:36:8d:1e:f9:ea:b9:48:de:92:69:47:07: 40:c2:a3:c9:9a:07:7e:5e:9f:85:21:3e:72:51:ed: ee:3d:9e:06:ea:65:e5:8f:b3:dd:de:90:9b:c9:db: b0:60:9d:d3:62:45:20:7b:1d:47:28:68:c5:cb:3f: bc:48:52:e0:a2:1e:ca:aa:1d:1e:54:60:f8:98:54: f4:19:2e:51:b1:50:da:ef:9c:7d:ae:20:7b:1e:d9: 87:19:c7:1e:99:d3:2a:0d:50:e8:fb:f5:0d:8f:33: a0:38:ab:b1:ca:89:9b:82:36:8a:07:64:70:9f:ea: 62:90:da:19:e4:87:2a:92:52:8b:4f:6a:5c:22:73: 4a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C6:24:AD:64:25:4C:C5:53:42:ED:F3:B4:21:C5:D7:EC:1F:E6:27 X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ae:26:2c:5a:6a:95:88:c6:41:60:03:7a:33:27:8c:b4:89: 53:f6:fc:71:c1:bd:df:e3:23:5a:25:ec:4f:c4:5d:e7:91:8e: f4:e3:01:65:79:ed:ce:06:0b:3c:c4:3c:e3:85:d3:46:75:e9: 44:01:8c:e8:ac:7a:58:dc:00:21:a8:0f:7e:46:0b:07:c3:cd: b6:94:fa:89:a7:09:5b:ae:77:bc:e9:40:e1:35:30:51:95:bd: 98:61:f7:4b:18:ea:34:23:0d:05:ce:7f:49:81:99:80:f1:96: c7:ef:26:14:c9:0c:60:4c:4e:c1:f3:65:15:4e:0f:a6:8d:c5: 91:5e:72:54:97:1e:df:dc:80:89:dd:ac:e2:db:1e:9f:93:2d: 4a:e6:2b:ad:a2:39:cd:2e:b6:18:1d:4c:97:d6:21:2d:78:da: 3a:6e:73:62:ce:59:df:ba:60:7c:d0:b7:87:f2:fd:08:84:59: cf:51:1e:aa:b0:c8:66:11:58:50:51:21:19:4b:a8:ea:4c:67: 66:53:93:62:20:1f:99:80:57:e5:e7:84:9f:51:9e:28:34:8d: 87:3f:a1:db:2b:62:eb:bd:47:ca:a6:a4:d1:df:39:e1:bb:4f: 63:58:a8:c9:56:85:ff:43:a3:bd:2d:95:f6:94:83:f7:9e:dd: df:3d:b9:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjUwNDI0MjMxMjUwWhcNMjUwNTAxMjMxMjUwWjAYMRYwFAYD VQQDEw02ODBhYzU3Mi1jMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14eN0acZrlCP7eAHgm1JBUP2K/Km3DJy+4/DWskT8qGJIFtqZYXhS+gnZmho dNGyaW6gbB/VJDpcCSR9YZjm0kO1MXpXQ9Ezirl4LlZF8bIKqZW2SIKcakshm3dF oRDs09w0hdIZNKS7gVlromhGZio2CWhfKGfke5I2jR756rlI3pJpRwdAwqPJmgd+ Xp+FIT5yUe3uPZ4G6mXlj7Pd3pCbyduwYJ3TYkUgex1HKGjFyz+8SFLgoh7Kqh0e VGD4mFT0GS5RsVDa75x9riB7HtmHGccemdMqDVDo+/UNjzOgOKuxyombgjaKB2Rw n+pikNoZ5IcqklKLT2pcInNKVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfGJK1k JUzFU0Lt87QhxdfsH+YnMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/riYsWmqViMZBYAN6MyeMtIlT9vxxwb3f4yNaJexPxF3nkY704wFl ee3OBgs8xDzjhdNGdelEAYzorHpY3AAhqA9+RgsHw822lPqJpwlbrne86UDhNTBR lb2YYfdLGOo0Iw0Fzn9JgZmA8ZbH7yYUyQxgTE7B82UVTg+mjcWRXnJUlx7f3ICJ 3azi2x6fky1K5iutojnNLrYYHUyX1iEteNo6bnNizlnfumB80LeH8v0IhFnPUR6q sMhmEVhQUSEZS6jqTGdmU5NiIB+ZgFfl54SfUZ4oNI2HP6HbK2LrvUfKpqTR3znh u09jWKjJVoX/Q6O9LZX2lIP3nt3fPblG -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:37 2025 by rpki-client