$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: 3LDGVaoWIOGc2NjbvEnRr2DiXySuxRrzVFa27rZFtwA= Subject key identifier: A8:AE:A2:0A:87:51:1B:64:BC:D7:4F:B5:49:C9:42:49:E3:B4:00:10 Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 05AA Signing time: Sun 19 Oct 2025 00:49:41 +0000 Manifest this update: Sun 19 Oct 2025 00:49:40 +0000 Manifest next update: Sun 26 Oct 2025 00:49:40 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: fiMQ9QdqughzI07c0rnyliP1mOd8m8FEmXts+XFlrqc=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: Oct 19 00:49:40 2025 GMT Not After : Oct 26 00:49:40 2025 GMT Subject: CN=68f435a5-f093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:5d:65:fe:a9:fe:7d:b6:f2:ef:e7:e0:23: 1e:cc:c7:60:43:79:1c:56:1f:64:51:17:09:80:ba: 3d:22:ad:28:6c:a3:5a:5d:49:76:ac:27:d6:7d:91: 12:83:02:aa:7e:ea:50:f0:ee:b4:09:e7:6f:2b:50: 6f:13:18:e7:3f:90:d8:22:f5:ea:13:fb:84:95:6d: e3:73:4d:4b:4e:df:6d:be:77:66:e1:37:f3:ab:c2: cd:2a:33:63:ed:40:08:e3:43:9d:be:03:e8:98:32: 07:92:65:a7:f0:e1:c2:43:62:f1:b3:9d:8c:87:03: a7:77:a1:e5:72:b8:68:6c:07:a1:fe:2f:88:ec:1c: 0f:f5:7e:0f:6c:c9:0a:39:d8:4b:4a:e4:f7:f2:07: 38:91:c0:b6:c2:58:01:16:e1:43:49:2f:62:52:47: 49:6f:d5:e2:11:74:e8:0e:65:e1:f5:e4:55:77:e7: a7:76:04:ea:62:7f:e3:7c:f4:c6:d3:c4:6a:56:25: 1c:f7:29:06:39:5a:2d:cf:81:9b:d3:2e:82:0a:3f: 85:80:c7:2e:0e:87:5d:14:ec:c2:f6:08:80:cb:0b: e1:00:4d:20:94:47:33:75:e2:f8:a9:62:54:39:6d: 78:ac:f7:94:b6:62:8d:78:79:32:29:d7:b7:b8:76: e0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AE:A2:0A:87:51:1B:64:BC:D7:4F:B5:49:C9:42:49:E3:B4:00:10 X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:51:70:1b:db:02:62:9d:69:b2:04:33:7d:22:dc:ea:a8:49: 85:5c:66:b3:0d:2b:5e:0c:3d:98:a0:51:52:5d:fe:2e:8d:1e: 54:54:41:89:3e:5d:ea:39:8c:dc:a6:09:28:b7:64:13:2b:af: c7:0e:cb:03:1d:ab:56:ab:0c:ab:0e:93:06:44:1e:76:5f:85: 06:8c:8a:9f:5d:ea:0a:4e:b5:f6:7d:69:be:19:a6:4c:9f:53: 8f:1f:c6:4d:21:25:11:3c:35:ab:ab:a0:00:95:c2:3b:91:34: c9:76:84:a9:2c:83:31:b3:d6:a2:ef:46:d1:0a:b1:17:03:82: be:a4:75:da:42:a6:c9:a1:93:e2:c7:31:e8:12:9a:82:e5:48: fd:45:e6:1a:d9:16:61:0a:bf:e2:4b:12:b4:17:3a:7d:9d:76: d4:f1:3a:84:01:ab:54:27:07:01:6c:19:71:fd:5d:08:c5:21: ae:d8:a5:71:f1:13:5a:c9:99:dd:c1:27:eb:f1:2c:93:4e:f9: 4e:d2:02:2b:9e:31:52:90:7a:11:c5:ff:84:02:57:70:ab:77: a2:c8:40:21:df:ae:2d:b2:c1:98:e3:b0:59:be:fd:08:5f:2d: 04:69:a1:86:77:35:f2:fc:74:62:4c:cb:9e:0d:3f:4a:fe:e0: 58:93:c2:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjUxMDE5MDA0OTQwWhcNMjUxMDI2MDA0OTQwWjAYMRYwFAYD VQQDEw02OGY0MzVhNS1mMDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OpdZf6p/n228u/n4CMezMdgQ3kcVh9kURcJgLo9Iq0obKNaXUl2rCfWfZES gwKqfupQ8O60CedvK1BvExjnP5DYIvXqE/uElW3jc01LTt9tvndm4Tfzq8LNKjNj 7UAI40OdvgPomDIHkmWn8OHCQ2Lxs52MhwOnd6HlcrhobAeh/i+I7BwP9X4PbMkK OdhLSuT38gc4kcC2wlgBFuFDSS9iUkdJb9XiEXToDmXh9eRVd+endgTqYn/jfPTG 08RqViUc9ykGOVotz4Gb0y6CCj+FgMcuDoddFOzC9giAywvhAE0glEczdeL4qWJU OW14rPeUtmKNeHkyKde3uHbgVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiuogqH URtkvNdPtUnJQknjtAAQMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaUXAb2wJinWmyBDN9ItzqqEmFXGazDSteDD2YoFFSXf4ujR5UVEGJ Pl3qOYzcpgkot2QTK6/HDssDHatWqwyrDpMGRB52X4UGjIqfXeoKTrX2fWm+GaZM n1OPH8ZNISURPDWrq6AAlcI7kTTJdoSpLIMxs9ai70bRCrEXA4K+pHXaQqbJoZPi xzHoEpqC5Uj9ReYa2RZhCr/iSxK0Fzp9nXbU8TqEAatUJwcBbBlx/V0IxSGu2KVx 8RNayZndwSfr8SyTTvlO0gIrnjFSkHoRxf+EAldwq3eiyEAh364tssGY47BZvv0I Xy0EaaGGdzXy/HRiTMueDT9K/uBYk8L+ -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:27 2025 by rpki-client