$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: eY39erp/2LfIuaJ39ttEcflOJ6rOv12kz8OGaJ6jnhE= Subject key identifier: E1:EE:B4:8A:05:39:9A:72:0B:E9:B0:68:5F:4B:50:B4:1E:85:D1:14 Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 058D Signing time: Fri 22 Aug 2025 23:25:52 +0000 Manifest this update: Fri 22 Aug 2025 23:25:52 +0000 Manifest next update: Fri 29 Aug 2025 23:25:52 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: gFk5E+bGu7O3IMHbvt6TOTu3D8X/iPxsWHtSFlnCqRg=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: Aug 22 23:25:52 2025 GMT Not After : Aug 29 23:25:52 2025 GMT Subject: CN=68a8fc80-f326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:09:a4:f0:49:a5:89:90:38:69:88:3c:7a: 93:ce:b8:5e:ce:b5:b3:9f:2e:e3:82:c4:0a:3e:a5: 15:b7:0d:9a:83:db:90:9a:c9:58:b0:09:86:39:9f: a9:d2:d1:11:3b:b0:11:09:47:c4:65:fc:e7:49:e9: ec:bf:0f:97:c5:df:ba:d9:dd:5e:2d:c1:65:f4:56: 67:80:45:e4:2b:1d:c6:02:45:1a:55:89:1d:1d:db: c9:83:b2:26:d8:6e:07:19:75:a5:7e:51:86:09:50: 71:6d:c7:d8:56:eb:50:f3:87:6f:9f:19:4b:3b:09: 93:1c:f4:a6:ea:37:6f:fa:e8:9d:3f:9b:92:d4:33: 7b:21:ab:28:b3:b0:de:ee:94:4b:3c:53:fb:f3:74: 6a:1a:d7:6f:a5:d5:05:5d:e7:ba:6e:77:49:77:65: e0:86:da:f2:6d:17:c5:f1:31:31:74:4e:6f:93:c8: e3:eb:b3:3d:13:39:18:c7:e9:53:ba:29:a0:e6:8d: 07:69:78:5f:d9:19:96:ce:20:e3:a0:90:44:62:0f: bd:95:45:73:4a:fe:cb:92:a2:1e:80:ea:46:94:11: b4:62:0a:c7:89:e8:d7:84:96:f0:c0:70:fa:fc:9b: 71:1e:eb:ec:f3:09:42:b3:1b:40:66:e3:a7:e6:76: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EE:B4:8A:05:39:9A:72:0B:E9:B0:68:5F:4B:50:B4:1E:85:D1:14 X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d1:b7:b8:ae:cc:1f:d8:0c:25:eb:97:85:b2:fa:64:98:0a: 37:1f:b5:45:ba:4a:5d:47:c6:ef:45:76:1d:4c:38:99:b6:e7: 9a:48:30:bc:50:50:15:ed:c3:12:b3:51:60:60:ee:82:7d:74: 59:16:f6:34:7f:32:0b:78:de:18:30:e2:38:85:11:52:73:36: 22:a1:eb:59:51:e6:2c:d9:fc:ca:cf:42:3a:b8:52:a4:55:12: 69:e0:bd:cd:c4:8f:37:d8:bd:c4:03:31:6c:72:d9:18:81:7e: 4a:58:25:3d:5d:f3:d5:4b:d6:e5:59:16:10:34:06:b7:a2:c3: f4:94:f4:74:09:04:c7:43:c0:f8:0f:9a:0d:c9:23:54:f3:3d: e9:f4:99:e6:85:60:f3:6e:37:3f:d0:58:41:a8:fc:75:a5:8c: 5e:ba:ee:fa:59:e4:14:60:c2:94:d7:e5:3c:65:6c:8c:fb:b4: e7:d4:8d:e4:7c:2b:5a:75:8e:92:8c:ee:92:b6:1f:aa:37:87: 4d:0d:ba:ce:1e:ab:c7:00:09:b9:18:a5:ae:8a:a0:32:d6:87: 40:fa:ca:7d:0c:99:0f:e0:ab:fa:97:c4:3e:ee:1b:d2:45:01: f6:55:fe:0a:36:cf:ae:42:a9:63:46:76:81:f2:bf:9b:d7:42: 47:c6:96:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjUwODIyMjMyNTUyWhcNMjUwODI5MjMyNTUyWjAYMRYwFAYD VQQDEw02OGE4ZmM4MC1mMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dYJpPBJpYmQOGmIPHqTzrhezrWzny7jgsQKPqUVtw2ag9uQmslYsAmGOZ+p 0tERO7ARCUfEZfznSensvw+Xxd+62d1eLcFl9FZngEXkKx3GAkUaVYkdHdvJg7Im 2G4HGXWlflGGCVBxbcfYVutQ84dvnxlLOwmTHPSm6jdv+uidP5uS1DN7Iasos7De 7pRLPFP783RqGtdvpdUFXee6bndJd2XghtrybRfF8TExdE5vk8jj67M9EzkYx+lT uimg5o0HaXhf2RmWziDjoJBEYg+9lUVzSv7LkqIegOpGlBG0YgrHiejXhJbwwHD6 /JtxHuvs8wlCsxtAZuOn5nYkHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHutIoF OZpyC+mwaF9LULQehdEUMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA20be4rswf2Awl65eFsvpkmAo3H7VFukpdR8bvRXYdTDiZtueaSDC8 UFAV7cMSs1FgYO6CfXRZFvY0fzILeN4YMOI4hRFSczYioetZUeYs2fzKz0I6uFKk VRJp4L3NxI832L3EAzFsctkYgX5KWCU9XfPVS9blWRYQNAa3osP0lPR0CQTHQ8D4 D5oNySNU8z3p9JnmhWDzbjc/0FhBqPx1pYxeuu76WeQUYMKU1+U8ZWyM+7Tn1I3k fCtadY6SjO6Sth+qN4dNDbrOHqvHAAm5GKWuiqAy1odA+sp9DJkP4Kv6l8Q+7hvS RQH2Vf4KNs+uQqljRnaB8r+b10JHxpZR -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:23 2025 by rpki-client