$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: ZNGY7ka1ICB08NAWU4D00skyvYCKRtcqNyqEv3hBa/I= Subject key identifier: 1B:C9:3A:2E:27:21:72:61:C4:11:35:70:CD:4A:6D:64:48:E7:51:2C Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 0559 Signing time: Sat 10 May 2025 22:59:52 +0000 Manifest this update: Sat 10 May 2025 22:59:52 +0000 Manifest next update: Sat 17 May 2025 22:59:52 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: dd4pSmHEjyNWHMTfK8+E5fEZTAZkwDa5dIQXH9VpDWc=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: May 10 22:59:52 2025 GMT Not After : May 17 22:59:52 2025 GMT Subject: CN=681fda68-e329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:1d:ec:17:a1:7e:bb:44:09:92:68:e8:3f: ae:0b:06:5e:5f:87:b4:5f:08:d3:b4:48:bd:cb:c4: 90:fd:28:c3:c1:67:76:93:a2:a9:c0:32:41:d0:ff: a2:b0:04:ef:7f:b8:1a:8d:0b:3b:67:09:66:5c:1f: c5:78:0b:df:e5:40:b0:ba:31:7b:9e:6f:72:6b:01: 32:85:c3:a9:23:48:2b:29:a3:bb:fb:9a:03:b1:25: 65:71:c1:db:e2:b1:63:20:92:a0:84:e4:0c:93:99: 0c:e4:82:f3:29:73:27:1a:19:e0:d4:58:6d:a6:fb: df:6c:c0:3d:b3:0c:6e:ba:b1:ef:4c:df:62:f7:d4: 5f:17:48:1c:20:76:68:d2:5b:fe:d9:90:0d:79:79: 45:1f:8f:eb:4c:9c:07:14:47:d0:34:74:1c:df:48: 12:62:7b:fc:75:42:88:bb:0e:ab:5f:40:9c:26:77: 2e:66:4f:ed:cc:fc:9c:20:61:84:0b:06:2f:4c:a5: 69:1f:b5:d0:96:a0:45:51:c6:67:21:be:11:07:51: c5:31:75:e1:02:e1:88:cf:ea:11:40:2e:94:22:78: ed:c8:68:26:f0:92:12:a7:a8:5e:c1:ce:d6:43:2a: 23:41:8b:22:07:f3:2e:0b:e1:4c:c3:84:ed:76:3d: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C9:3A:2E:27:21:72:61:C4:11:35:70:CD:4A:6D:64:48:E7:51:2C X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f5:4e:cc:ed:ba:c7:65:be:04:c7:93:c5:40:01:06:65:47: c8:da:37:aa:b5:cc:47:87:78:de:5d:9d:61:51:c7:e7:d5:f2: 69:04:2e:35:bc:a4:bf:6d:e1:37:8c:dd:14:df:15:5a:30:6d: c0:82:13:c0:79:5d:9d:54:97:26:ce:b9:ef:3d:2b:6e:e8:51: 7f:02:4d:69:cc:0a:04:21:1a:99:f4:cb:dd:e0:a5:1b:25:16: 15:d6:17:4b:46:12:4d:c8:2f:4c:9b:fd:fc:40:9e:dd:89:df: c1:19:f3:90:d6:8e:25:b3:30:fd:04:4a:b1:17:e2:09:40:a5: 0a:7f:98:3c:b0:67:7f:da:21:99:8a:42:ae:b8:7e:4a:54:53: 10:a5:62:e8:fc:b2:eb:2c:0f:e0:c6:1b:cf:7e:0a:41:0c:b5: 51:15:fd:c5:4e:81:f7:b4:73:75:b1:fd:02:51:cd:38:0a:59: d5:45:17:f3:df:e6:92:be:b8:48:2d:09:11:54:2e:05:0d:c1: 81:81:ad:c3:33:49:1c:9a:2c:39:6f:f8:9b:28:10:d9:b1:f4: 2d:57:33:89:02:a2:80:cb:e8:ba:6d:c4:f0:e4:74:42:84:d7: c6:86:e0:56:55:c0:2c:e1:11:88:d3:df:df:32:50:b0:62:d9: fc:76:e5:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjUwNTEwMjI1OTUyWhcNMjUwNTE3MjI1OTUyWjAYMRYwFAYD VQQDEw02ODFmZGE2OC1lMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYEd7BehfrtECZJo6D+uCwZeX4e0XwjTtEi9y8SQ/SjDwWd2k6KpwDJB0P+i sATvf7gajQs7ZwlmXB/FeAvf5UCwujF7nm9yawEyhcOpI0grKaO7+5oDsSVlccHb 4rFjIJKghOQMk5kM5ILzKXMnGhng1FhtpvvfbMA9swxuurHvTN9i99RfF0gcIHZo 0lv+2ZANeXlFH4/rTJwHFEfQNHQc30gSYnv8dUKIuw6rX0CcJncuZk/tzPycIGGE CwYvTKVpH7XQlqBFUcZnIb4RB1HFMXXhAuGIz+oRQC6UInjtyGgm8JISp6hewc7W QyojQYsiB/MuC+FMw4Ttdj2vxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvJOi4n IXJhxBE1cM1KbWRI51EsMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG9U7M7brHZb4Ex5PFQAEGZUfI2jeqtcxHh3jeXZ1hUcfn1fJpBC41 vKS/beE3jN0U3xVaMG3AghPAeV2dVJcmzrnvPStu6FF/Ak1pzAoEIRqZ9Mvd4KUb JRYV1hdLRhJNyC9Mm/38QJ7did/BGfOQ1o4lszD9BEqxF+IJQKUKf5g8sGd/2iGZ ikKuuH5KVFMQpWLo/LLrLA/gxhvPfgpBDLVRFf3FToH3tHN1sf0CUc04ClnVRRfz 3+aSvrhILQkRVC4FDcGBga3DM0kcmiw5b/ibKBDZsfQtVzOJAqKAy+i6bcTw5HRC hNfGhuBWVcAs4RGI09/fMlCwYtn8duX0 -----END CERTIFICATE-----Generated at Mon May 12 12:55:01 2025 by rpki-client