$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: YzOOWj/sG5MBtium4RoPGMEMiAyzLpN8bBcf/46v4u8= Subject key identifier: D0:9E:89:56:A6:B3:AD:6C:22:BF:67:CB:EE:90:DB:1E:23:C8:C3:53 Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 05B2 Signing time: Tue 04 Nov 2025 23:12:47 +0000 Manifest this update: Tue 04 Nov 2025 23:12:47 +0000 Manifest next update: Tue 11 Nov 2025 23:12:47 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: hZe4zZh9wpuW42dCTNO1ibzyoB0USS1kglZ/sNsHLI8=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: Nov 4 23:12:47 2025 GMT Not After : Nov 11 23:12:47 2025 GMT Subject: CN=690a886f-b2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:24:ac:31:d0:09:2d:09:fd:ea:33:98:c0: 54:79:2b:be:a1:3b:03:3f:c0:f7:7e:46:26:e3:dc: 6d:90:61:3a:b7:5e:9a:5d:6e:9b:a9:8f:4b:96:92: e8:e7:22:e3:aa:62:d7:00:7a:ae:76:e0:18:35:01: 14:bd:eb:31:ef:0c:22:11:e2:53:2d:36:dc:32:8f: cf:5b:b9:d5:69:55:8d:d1:6d:b0:52:69:98:f6:cc: f1:bc:64:09:08:a3:ab:97:9a:30:c2:e9:c0:9e:ac: 68:6a:c9:3c:30:4f:00:a1:30:ee:cf:9e:07:ae:fc: 4a:7e:76:84:9f:1b:3c:85:bd:a2:96:07:96:b3:97: 0d:e9:c6:d4:85:ea:64:88:23:89:a3:f6:61:a8:4a: 9b:31:9d:7d:1b:55:0a:bf:ad:22:f1:b4:4d:8a:4a: 36:0d:22:3c:16:b4:4b:3f:3c:8e:bc:b9:8f:79:40: 52:68:f8:93:cc:ac:a5:0e:22:6a:f5:50:7e:0c:56: a8:14:27:28:55:74:9b:be:e4:d9:e3:90:3a:f9:01: 3b:13:9a:7c:c1:06:23:11:d9:53:5d:ab:64:bd:cf: 99:fc:43:28:df:f5:a1:eb:32:fe:0a:e9:af:da:8e: 50:9e:ff:8d:3e:65:cf:29:b9:cb:bd:cd:4b:7f:dd: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9E:89:56:A6:B3:AD:6C:22:BF:67:CB:EE:90:DB:1E:23:C8:C3:53 X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:86:ac:49:6e:86:66:d3:b1:57:2a:ad:de:b1:99:03:32:51: 95:d1:bb:d0:d7:12:f0:28:e7:0a:d6:e1:04:04:b5:cb:c6:d6: ed:74:8e:84:b4:49:e6:b4:40:d9:8a:d4:b9:0b:98:e9:c3:0b: e9:d0:72:9d:0e:07:be:04:33:c6:20:cb:d5:5b:53:2b:8c:b4: 81:1a:59:fa:dc:12:1e:ec:d3:ea:2d:22:9d:f5:02:e8:a4:09: 53:4f:9f:ce:61:54:0e:db:0a:18:2d:f7:de:23:f9:4f:26:d4: 19:f3:cd:c1:55:af:75:15:6d:72:2d:b6:16:72:26:21:35:db: 7b:dd:f6:3e:e4:fd:67:36:c6:20:19:b2:10:0a:96:bb:56:0a: b2:34:31:c7:6f:65:87:20:52:10:cb:bf:cc:a1:ac:7e:6e:e2: 46:4d:68:c3:bc:b1:a9:3e:e8:91:ef:4c:a1:67:a7:8f:be:72: e3:1d:9e:e0:01:d5:2e:4d:d9:dd:95:0b:15:ad:58:95:70:01: c8:b4:74:a4:31:30:90:e0:43:41:c8:ed:13:bc:73:ef:8e:02: 9b:7f:17:1c:97:ff:ae:bc:03:0b:10:29:eb:05:65:98:78:0a: 5a:2d:c6:e2:db:3a:da:a2:8a:cc:d8:9e:c5:2d:e2:1f:b4:ae: 1e:da:cc:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjUxMTA0MjMxMjQ3WhcNMjUxMTExMjMxMjQ3WjAYMRYwFAYD VQQDEw02OTBhODg2Zi1iMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutckrDHQCS0J/eozmMBUeSu+oTsDP8D3fkYm49xtkGE6t16aXW6bqY9LlpLo 5yLjqmLXAHquduAYNQEUvesx7wwiEeJTLTbcMo/PW7nVaVWN0W2wUmmY9szxvGQJ CKOrl5owwunAnqxoask8ME8AoTDuz54HrvxKfnaEnxs8hb2ilgeWs5cN6cbUhepk iCOJo/ZhqEqbMZ19G1UKv60i8bRNiko2DSI8FrRLPzyOvLmPeUBSaPiTzKylDiJq 9VB+DFaoFCcoVXSbvuTZ45A6+QE7E5p8wQYjEdlTXatkvc+Z/EMo3/Wh6zL+Cumv 2o5Qnv+NPmXPKbnLvc1Lf93SzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCeiVam s61sIr9ny+6Q2x4jyMNTMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbhqxJboZm07FXKq3esZkDMlGV0bvQ1xLwKOcK1uEEBLXLxtbtdI6E tEnmtEDZitS5C5jpwwvp0HKdDge+BDPGIMvVW1MrjLSBGln63BIe7NPqLSKd9QLo pAlTT5/OYVQO2woYLffeI/lPJtQZ883BVa91FW1yLbYWciYhNdt73fY+5P1nNsYg GbIQCpa7VgqyNDHHb2WHIFIQy7/Moax+buJGTWjDvLGpPuiR70yhZ6ePvnLjHZ7g AdUuTdndlQsVrViVcAHItHSkMTCQ4ENByO0TvHPvjgKbfxccl/+uvAMLECnrBWWY eApaLcbi2zraoorM2J7FLeIftK4e2sy3 -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:24 2025 by rpki-client