$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: PDMgTG5EY4v5hLu7xNKUYIXgDhjdkFDQmFi2aa2NKbc= Subject key identifier: 71:CE:D8:D0:B7:FD:36:85:8E:3A:D5:87:45:27:E0:12:D7:ED:AB:B4 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 0325 Signing time: Thu 03 Jul 2025 01:30:03 +0000 Manifest this update: Thu 03 Jul 2025 01:30:03 +0000 Manifest next update: Thu 10 Jul 2025 01:30:03 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: 94JRCixau81GzTYur99kyAUmvAQNhzjA/wPjHtEnu94=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Jul 3 01:30:03 2025 GMT Not After : Jul 10 01:30:03 2025 GMT Subject: CN=6865dd1b-2da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:b9:ed:13:ca:7c:96:fb:60:da:56:23:6c: 5d:93:a6:5a:19:5b:62:cb:a9:03:7c:aa:17:ac:74: 36:7e:aa:9d:76:18:ff:9c:e6:3c:66:e8:cf:8b:6a: 45:80:6f:f3:a5:e3:9d:48:1f:b3:2d:a8:f3:b9:e3: 42:87:41:0e:bc:48:19:b3:ed:74:da:1a:76:d3:65: 18:30:59:42:88:e3:aa:bf:53:5d:5e:ee:c5:31:a0: ff:3c:db:1e:78:28:50:bd:f4:32:83:05:89:8c:6a: c3:d2:ee:b2:23:9a:75:2f:e2:f7:32:61:34:03:a1: 9d:98:ab:bc:17:a4:04:8f:40:29:d3:6c:24:fa:96: 8b:56:1a:22:eb:df:be:3d:79:d9:6f:db:b8:33:7b: 03:ea:58:95:55:cd:ac:00:0c:b2:21:92:40:99:48: 28:4f:4c:c8:08:29:3b:35:1b:65:02:83:d9:af:75: 43:4a:27:a0:31:e9:d9:ee:f4:c1:bf:91:c9:58:2c: 92:1c:b8:12:ca:11:7c:30:70:9c:00:68:f0:34:7f: 0b:30:14:9b:c9:b6:a0:a2:66:a9:da:49:82:5b:ec: fd:47:8d:4e:1a:78:27:88:72:78:65:49:6d:d2:e0: 1e:f1:a0:97:22:22:1a:a5:6d:37:fb:52:f9:33:fc: 10:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:D8:D0:B7:FD:36:85:8E:3A:D5:87:45:27:E0:12:D7:ED:AB:B4 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:63:a2:2e:92:9b:5c:33:68:51:71:72:73:6d:57:31:d7:e0: b4:f9:16:89:ee:d2:64:a4:c0:5e:10:82:e7:e6:f9:14:ef:06: 4b:55:cc:7c:ce:22:75:bb:73:a1:26:a4:6d:e4:e4:95:49:7c: 61:6c:4a:1e:44:f5:02:51:85:d1:dd:c7:a4:70:75:3f:18:b8: cf:8f:92:b9:d7:aa:c9:58:6c:1e:c4:bf:f9:26:69:7a:13:2b: 52:05:04:b8:12:1f:1d:5d:7b:21:ec:2a:b7:f3:1f:19:01:2f: 7f:0d:a6:35:23:c5:14:78:52:a3:b3:5a:46:1b:3d:1d:76:bb: 64:46:30:c9:39:88:ea:49:62:dc:43:64:05:b9:e9:b6:4b:37: 1c:0e:a6:30:9b:13:62:44:af:76:e6:76:73:b1:85:0f:e2:fd: 61:05:02:e9:c5:9e:13:96:d8:9a:0a:e5:ef:b9:f6:f0:e8:df: 8a:50:4d:cc:9f:a6:6c:d9:ed:0c:36:56:39:b4:fd:6a:5b:8a: d8:2e:a8:71:73:e4:58:b8:1c:23:a0:8c:12:b2:86:b3:69:82: f6:f7:5f:3a:7d:3a:42:33:5a:e5:ce:7e:4b:3c:1a:16:1e:22: 44:e0:ef:97:10:31:c4:22:a8:f5:7f:13:c1:38:a1:75:17:83: f6:0c:f5:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUwNzAzMDEzMDAzWhcNMjUwNzEwMDEzMDAzWjAYMRYwFAYD VQQDEw02ODY1ZGQxYi0yZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyO57RPKfJb7YNpWI2xdk6ZaGVtiy6kDfKoXrHQ2fqqddhj/nOY8ZujPi2pF gG/zpeOdSB+zLajzueNCh0EOvEgZs+102hp202UYMFlCiOOqv1NdXu7FMaD/PNse eChQvfQygwWJjGrD0u6yI5p1L+L3MmE0A6GdmKu8F6QEj0Ap02wk+paLVhoi69++ PXnZb9u4M3sD6liVVc2sAAyyIZJAmUgoT0zICCk7NRtlAoPZr3VDSiegMenZ7vTB v5HJWCySHLgSyhF8MHCcAGjwNH8LMBSbybagomap2kmCW+z9R41OGngniHJ4ZUlt 0uAe8aCXIiIapW03+1L5M/wQvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHO2NC3 /TaFjjrVh0Un4BLX7au0MB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcY6IukptcM2hRcXJzbVcx1+C0+RaJ7tJkpMBeEILn5vkU7wZLVcx8 ziJ1u3OhJqRt5OSVSXxhbEoeRPUCUYXR3cekcHU/GLjPj5K516rJWGwexL/5Jml6 EytSBQS4Eh8dXXsh7Cq38x8ZAS9/DaY1I8UUeFKjs1pGGz0ddrtkRjDJOYjqSWLc Q2QFuem2SzccDqYwmxNiRK925nZzsYUP4v1hBQLpxZ4TltiaCuXvufbw6N+KUE3M n6Zs2e0MNlY5tP1qW4rYLqhxc+RYuBwjoIwSsoazaYL29186fTpCM1rlzn5LPBoW HiJE4O+XEDHEIqj1fxPBOKF1F4P2DPWA -----END CERTIFICATE-----Generated at Thu Jul 3 15:00:40 2025 by rpki-client