$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: 694+2nWeB0lvncOuX1hJXo2myXBYuzoJU9Nel7itq3I= Subject key identifier: 7F:83:CF:11:47:22:51:FA:4C:DF:04:BF:7D:92:90:A9:5B:0B:CA:09 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 035C Signing time: Sun 19 Oct 2025 02:59:47 +0000 Manifest this update: Sun 19 Oct 2025 02:59:46 +0000 Manifest next update: Sun 26 Oct 2025 02:59:46 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: WafuYzkrOJxSE4GajzuXSyud86hgwx5ZhFoX0rYKrcA=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Oct 19 02:59:46 2025 GMT Not After : Oct 26 02:59:46 2025 GMT Subject: CN=68f45423-e5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b2:89:4b:72:da:f6:b3:ac:e7:77:9c:8a:9d: 7f:fd:11:72:37:d6:18:a8:66:42:c5:2d:af:8d:c8: 77:56:3c:68:95:81:64:ce:56:a9:56:bc:7c:46:d7: 0b:9a:83:af:94:0e:d8:07:c0:03:9e:fa:2b:5c:e2: ac:1e:02:9f:05:0c:9c:61:ec:db:b7:5b:cc:b6:3b: 85:b5:76:ac:7e:f7:26:6d:4b:85:36:27:8b:53:8d: 77:40:28:37:65:f5:3f:9b:83:34:35:f1:1f:4c:22: b4:a3:bf:0d:67:4a:ae:2d:67:87:9b:67:82:5d:73: c9:23:2c:18:a6:4f:27:29:18:32:67:3b:6f:d2:20: 55:dc:6a:13:df:0c:41:7a:d1:08:16:bf:9a:41:83: 3a:82:ec:54:1d:5b:06:d2:5e:eb:29:b9:f5:c8:eb: a2:2e:50:4c:53:6d:95:ea:7f:15:7e:95:db:c4:e3: c4:bf:9f:f5:97:f1:eb:2d:37:8b:75:92:48:e8:14: 2f:33:77:3d:63:06:ff:25:d8:51:15:85:56:06:23: 78:e7:51:ee:85:29:84:d3:18:81:fd:7d:cc:c5:e2: 9f:a2:7f:cf:02:71:7e:18:91:d6:17:c6:7e:7c:54: f9:52:fc:8b:c6:ab:39:04:d5:50:31:fc:15:0b:0c: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:83:CF:11:47:22:51:FA:4C:DF:04:BF:7D:92:90:A9:5B:0B:CA:09 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:3e:1c:d5:20:68:70:58:f7:e8:09:d4:cc:5a:3f:5a:a0:00: 3b:e2:42:67:6d:00:7f:ad:3b:43:0e:19:43:6e:f0:3b:56:56: c2:89:dd:c4:be:b7:3e:07:f2:8b:01:d2:5b:86:18:81:ed:3c: 66:21:9c:a1:91:ce:2a:74:76:77:7a:8a:eb:6c:18:86:43:0b: 10:36:0d:af:09:4d:88:4a:9e:67:3f:f8:da:81:3d:e8:21:04: e9:77:0c:98:32:54:c7:26:47:77:c4:a1:0f:bd:4f:ed:cb:46: 77:77:96:87:b1:1a:98:90:e7:84:f2:8f:82:28:69:a5:f8:06: 34:d6:66:bf:24:29:ab:94:03:a3:6d:49:7e:3e:d2:06:57:99: 8d:f5:2e:46:6b:0d:3d:d5:af:c1:7a:2d:ff:d6:e0:63:0b:bf: 8d:bf:f2:07:53:51:8c:72:e0:fb:e9:c7:59:03:f1:fe:3f:e0: 22:95:2b:2c:e9:d7:26:32:bf:b0:48:fc:76:33:d6:bd:73:55: cf:ed:36:a9:71:0c:6b:47:5a:30:f7:9b:d2:f5:0d:6f:71:b0: a6:4d:f1:10:9c:d1:be:07:57:94:ac:0b:c2:45:62:4f:08:f6: 99:4d:cf:5f:1a:49:05:85:07:3c:7c:ef:03:ee:21:9b:d4:cb: 9c:46:f5:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUxMDE5MDI1OTQ2WhcNMjUxMDI2MDI1OTQ2WjAYMRYwFAYD VQQDEw02OGY0NTQyMy1lNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67KJS3La9rOs53ecip1//RFyN9YYqGZCxS2vjch3VjxolYFkzlapVrx8RtcL moOvlA7YB8ADnvorXOKsHgKfBQycYezbt1vMtjuFtXasfvcmbUuFNieLU413QCg3 ZfU/m4M0NfEfTCK0o78NZ0quLWeHm2eCXXPJIywYpk8nKRgyZztv0iBV3GoT3wxB etEIFr+aQYM6guxUHVsG0l7rKbn1yOuiLlBMU22V6n8VfpXbxOPEv5/1l/HrLTeL dZJI6BQvM3c9Ywb/JdhRFYVWBiN451HuhSmE0xiB/X3MxeKfon/PAnF+GJHWF8Z+ fFT5UvyLxqs5BNVQMfwVCwwv9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+DzxFH IlH6TN8Ev32SkKlbC8oJMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJPhzVIGhwWPfoCdTMWj9aoAA74kJnbQB/rTtDDhlDbvA7VlbCid3E vrc+B/KLAdJbhhiB7TxmIZyhkc4qdHZ3eorrbBiGQwsQNg2vCU2ISp5nP/jagT3o IQTpdwyYMlTHJkd3xKEPvU/ty0Z3d5aHsRqYkOeE8o+CKGml+AY01ma/JCmrlAOj bUl+PtIGV5mN9S5Gaw091a/Bei3/1uBjC7+Nv/IHU1GMcuD76cdZA/H+P+AilSss 6dcmMr+wSPx2M9a9c1XP7TapcQxrR1ow95vS9Q1vcbCmTfEQnNG+B1eUrAvCRWJP CPaZTc9fGkkFhQc8fO8D7iGb1MucRvWc -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:19 2025 by rpki-client