$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: 1M4Zy/40IgeOjq33y9PofrpI1H4H3miG3GEngfitDYg= Subject key identifier: E3:9D:0C:D5:91:AF:AD:17:26:F9:53:F3:DA:66:4F:BD:E2:EE:98:97 Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 0548 Signing time: Sun 06 Apr 2025 23:05:07 +0000 Manifest this update: Sun 06 Apr 2025 23:05:06 +0000 Manifest next update: Sun 13 Apr 2025 23:05:06 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: DwdPRPC1YXDxb9vOqOnQSnyxJ6yMFr0l87gPDUz8+d8=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 23:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9 Validity Not Before: Apr 6 23:05:06 2025 GMT Not After : Apr 13 23:05:06 2025 GMT Subject: CN=67f308a2-c4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:7a:96:10:f8:46:e5:32:14:f6:88:2a:42: 92:fd:74:7d:c0:f0:5a:8e:12:17:3b:03:ca:12:af: 39:2a:f0:01:a4:67:5d:62:36:84:ef:92:89:8e:8b: 0a:82:dc:6d:d4:43:75:d4:b7:88:47:8a:39:08:04: cd:3c:ff:ed:79:9d:81:16:01:82:04:22:20:e2:b7: 66:96:cd:d9:94:eb:3d:8b:fb:76:4f:ad:1f:9f:64: 34:e9:54:e3:90:d4:79:a5:8f:36:59:bb:06:7b:bb: cf:26:0a:f6:54:47:8f:0a:22:84:32:dd:28:17:b8: 6d:fe:10:d1:e2:b0:30:f2:95:9a:51:29:e2:96:e4: 43:8e:1d:4f:a8:d7:e1:fd:23:e8:9f:a0:86:c8:ba: ca:e7:76:23:f2:ba:f8:74:ec:01:78:c2:d3:53:f7: 67:74:04:49:13:cb:35:09:75:8c:51:9d:5a:ba:0c: f8:ae:82:f7:e2:15:9c:d1:c7:90:66:fa:41:1e:d0: f3:65:e9:be:a1:70:14:a5:7c:c2:2b:a2:70:6c:fa: 99:2e:5c:f0:27:1b:a0:a5:1a:bb:9a:f2:c7:84:2f: 21:92:95:0b:ec:e0:4d:ef:cf:a8:2a:a3:a8:74:b6: 76:2b:ff:43:37:1e:e2:27:5d:47:f5:67:d8:b7:ba: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9D:0C:D5:91:AF:AD:17:26:F9:53:F3:DA:66:4F:BD:E2:EE:98:97 X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:22:0f:88:f8:81:ef:b3:54:73:2b:f4:b9:cf:52:9d:0c:a7: 97:84:f0:f8:5f:6c:5f:1a:ba:12:73:f3:34:4e:88:3a:45:af: 45:e7:dc:27:e0:71:7d:fe:3a:b0:54:41:f1:48:01:3b:6b:92: 1f:75:5f:47:ac:54:6e:5b:25:69:27:ba:6a:60:ea:69:ab:84: a0:1f:43:8b:3e:ca:d3:0e:6d:f6:6d:cd:66:f1:df:25:10:9e: 27:b6:eb:c6:c4:4a:75:49:19:ee:b2:aa:ac:01:4d:e2:46:5c: a8:c1:5c:21:f0:b1:3f:d0:ed:2a:d9:c2:a5:22:8f:13:75:cb: 0c:36:29:ec:83:4e:db:9f:3c:0a:bf:41:c0:1b:bb:f2:6b:f4: b2:cc:5b:f2:5a:06:95:1d:e1:84:2b:ac:c8:29:41:22:f2:95: 13:8e:fc:20:d6:68:2e:68:5c:4b:19:0b:7c:27:c3:25:e1:0f: 59:ee:82:8d:31:bc:9d:b5:7c:57:73:cb:1b:e2:8c:76:5a:1d: 3e:04:2a:07:09:48:6f:8e:b5:b6:bb:a8:16:3d:79:84:79:64: 83:ca:ee:56:9f:db:a7:30:d6:f9:af:98:97:f1:c7:53:16:05: 33:0b:79:e4:97:b0:2c:c6:a6:6f:88:f9:bb:3c:12:75:9d:51: 87:59:e8:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjUwNDA2MjMwNTA2WhcNMjUwNDEzMjMwNTA2WjAYMRYwFAYD VQQDEw02N2YzMDhhMi1jNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ih6lhD4RuUyFPaIKkKS/XR9wPBajhIXOwPKEq85KvABpGddYjaE75KJjosK gtxt1EN11LeIR4o5CATNPP/teZ2BFgGCBCIg4rdmls3ZlOs9i/t2T60fn2Q06VTj kNR5pY82WbsGe7vPJgr2VEePCiKEMt0oF7ht/hDR4rAw8pWaUSniluRDjh1PqNfh /SPon6CGyLrK53Yj8rr4dOwBeMLTU/dndARJE8s1CXWMUZ1augz4roL34hWc0ceQ ZvpBHtDzZem+oXAUpXzCK6JwbPqZLlzwJxugpRq7mvLHhC8hkpUL7OBN78+oKqOo dLZ2K/9DNx7iJ11H9WfYt7pC3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOdDNWR r60XJvlT89pmT73i7piXMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHIg+I+IHvs1RzK/S5z1KdDKeXhPD4X2xfGroSc/M0Tog6Ra9F59wn 4HF9/jqwVEHxSAE7a5IfdV9HrFRuWyVpJ7pqYOppq4SgH0OLPsrTDm32bc1m8d8l EJ4ntuvGxEp1SRnusqqsAU3iRlyowVwh8LE/0O0q2cKlIo8TdcsMNinsg07bnzwK v0HAG7vya/SyzFvyWgaVHeGEK6zIKUEi8pUTjvwg1mguaFxLGQt8J8Ml4Q9Z7oKN MbydtXxXc8sb4ox2Wh0+BCoHCUhvjrW2u6gWPXmEeWSDyu5Wn9unMNb5r5iX8cdT FgUzC3nkl7AsxqZviPm7PBJ1nVGHWegK -----END CERTIFICATE-----Generated at Tue Apr 8 20:25:15 2025 by rpki-client