$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: B8e7NqWwdrMuly2VUiYFhAvRGr/dBbjjsDeU4cl95Oc= Subject key identifier: 63:11:A5:25:74:FB:A1:8D:A4:68:99:32:86:C5:9E:E9:7E:86:94:2C Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 056B Signing time: Mon 16 Jun 2025 22:59:42 +0000 Manifest this update: Mon 16 Jun 2025 22:59:41 +0000 Manifest next update: Mon 23 Jun 2025 22:59:41 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: vS5Fz01a4d8gAhbFm5UbwIC9gnjCxYgI0MLlq/ZjgR0=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: Jun 16 22:59:41 2025 GMT Not After : Jun 23 22:59:41 2025 GMT Subject: CN=6850a1dd-5a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:38:a1:92:1a:bd:8a:1c:60:d5:1a:00:32:7c: 58:87:11:c1:7f:56:b0:a9:c3:29:55:af:b2:86:79: 76:73:9c:c2:a1:e0:cb:17:ef:0b:42:8a:e9:80:6a: 76:f9:3c:07:8c:ab:07:6b:36:41:cc:a2:de:08:7f: f6:12:9c:4b:88:f5:d7:8e:81:0d:45:42:84:f9:9b: 41:55:11:94:55:e3:d6:3b:55:3a:d0:da:d5:d0:11: ca:21:7a:dc:74:aa:cf:0d:0a:2f:9e:b6:bc:82:c5: ac:e2:53:b8:ae:ba:2f:59:6a:06:84:4b:ff:a0:ca: 70:ba:9f:94:3f:8a:c9:2a:d5:5f:dd:28:27:50:85: a1:fe:53:3d:ab:b0:14:8e:38:e5:a8:7d:47:80:76: 71:cc:dc:fa:ec:f4:6d:6e:48:e2:3d:ee:b7:65:46: fd:b0:06:06:68:e9:fe:e8:e6:80:18:16:78:f4:fb: d8:19:f4:89:ed:d6:1f:08:c5:00:cf:c9:7b:f4:06: 61:4f:e4:e5:cd:53:d2:b6:0b:5d:57:91:d0:01:c4: f5:48:3c:3c:ef:37:15:db:fe:2f:e6:ff:db:6d:da: 13:34:c6:f9:f4:8c:2d:0e:c4:d3:4c:e0:23:c5:e3: c8:f7:24:b5:f2:99:5c:0f:94:46:40:dd:8e:24:ec: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:11:A5:25:74:FB:A1:8D:A4:68:99:32:86:C5:9E:E9:7E:86:94:2C X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0d:85:b6:53:13:4a:48:7d:6e:61:d2:f8:1b:94:74:3a:e7: 6f:2a:2c:fa:01:33:78:88:5b:27:d8:cb:ad:82:3f:38:1c:3e: a5:00:f6:59:82:a2:56:73:4f:0d:a5:00:d9:22:b1:f9:58:ae: c6:d1:1a:44:4d:fb:59:4c:b4:aa:be:19:6a:67:42:f4:03:a0: 86:02:1f:91:7c:8b:e9:19:94:ba:d3:a8:85:fa:61:f5:22:f9: 35:b9:ae:12:e2:60:4f:44:07:23:10:46:ec:7a:21:1f:90:a3: c8:7c:f1:0d:85:55:8c:3b:38:7b:5c:ee:17:50:35:8a:bb:1f: 36:29:45:b8:d9:7d:df:c0:f7:58:76:3c:e5:45:c4:f5:ba:55: ef:a1:42:b6:a5:db:e8:26:ed:93:43:fc:92:76:d6:ee:97:eb: 74:8f:64:bf:41:84:55:26:61:b8:52:dd:19:dd:8b:30:1d:ed: 2b:6b:06:7c:e3:84:1b:b7:d3:c2:ff:33:53:0c:a4:05:85:5a: 65:f6:62:bf:2a:f1:ee:a9:44:55:dc:34:4f:ed:7b:27:85:8e: 58:01:c7:ee:aa:94:ab:da:03:d5:7b:46:ae:01:75:a5:21:f2: 74:61:92:c1:d6:ea:23:42:da:b4:04:83:f4:30:99:9f:3f:57: c0:20:cd:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjUwNjE2MjI1OTQxWhcNMjUwNjIzMjI1OTQxWjAYMRYwFAYD VQQDEw02ODUwYTFkZC01YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Tihkhq9ihxg1RoAMnxYhxHBf1awqcMpVa+yhnl2c5zCoeDLF+8LQorpgGp2 +TwHjKsHazZBzKLeCH/2EpxLiPXXjoENRUKE+ZtBVRGUVePWO1U60NrV0BHKIXrc dKrPDQovnra8gsWs4lO4rrovWWoGhEv/oMpwup+UP4rJKtVf3SgnUIWh/lM9q7AU jjjlqH1HgHZxzNz67PRtbkjiPe63ZUb9sAYGaOn+6OaAGBZ49PvYGfSJ7dYfCMUA z8l79AZhT+TlzVPStgtdV5HQAcT1SDw87zcV2/4v5v/bbdoTNMb59IwtDsTTTOAj xePI9yS18plcD5RGQN2OJOzOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMRpSV0 +6GNpGiZMobFnul+hpQsMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhDYW2UxNKSH1uYdL4G5R0OudvKiz6ATN4iFsn2Mutgj84HD6lAPZZ gqJWc08NpQDZIrH5WK7G0RpETftZTLSqvhlqZ0L0A6CGAh+RfIvpGZS606iF+mH1 Ivk1ua4S4mBPRAcjEEbseiEfkKPIfPENhVWMOzh7XO4XUDWKux82KUW42X3fwPdY djzlRcT1ulXvoUK2pdvoJu2TQ/ySdtbul+t0j2S/QYRVJmG4Ut0Z3YswHe0rawZ8 44Qbt9PC/zNTDKQFhVpl9mK/KvHuqURV3DRP7XsnhY5YAcfuqpSr2gPVe0auAXWl IfJ0YZLB1uojQtq0BIP0MJmfP1fAIM0k -----END CERTIFICATE-----Generated at Wed Jun 18 04:46:01 2025 by rpki-client