$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: 3sWvKJTVuu0jcCryqYpVwfnwE07DN+xzSwLax1FVTGw= Subject key identifier: 63:B7:17:2C:7B:8D:6E:4D:86:57:E8:9E:51:28:66:B0:3E:68:10:0B Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 02F6 Signing time: Thu 03 Apr 2025 01:17:18 +0000 Manifest this update: Thu 03 Apr 2025 01:17:17 +0000 Manifest next update: Thu 10 Apr 2025 01:17:17 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: Wo0mPunLDhpXyjGn1J7XnfAYFS7gl8o5BuYEAUK1uLA=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: FFZhO7+zoHshR/RjOvXtom/0MyVEmhHyk48EA2oY0UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091 Validity Not Before: Apr 3 01:17:17 2025 GMT Not After : Apr 10 01:17:17 2025 GMT Subject: CN=67ede19e-f018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:43:0a:45:d2:83:85:7f:b9:f6:43:2f:df: 63:44:3c:ac:eb:b5:ae:47:64:4b:91:c9:f4:2b:f3: ac:6a:cc:e1:a7:bc:dd:87:6d:80:b8:30:2e:96:87: 86:17:cd:88:1d:69:7e:57:9c:96:b3:ef:d9:50:20: d7:a1:b2:5f:f0:0b:d4:76:7b:e9:23:a9:4b:56:58: c5:a1:72:60:df:18:8c:bf:97:6b:83:04:8a:2d:5e: e8:5e:42:db:e0:a3:69:01:cf:67:16:d5:df:29:f6: 0f:8b:73:48:90:f1:c4:2e:73:51:eb:98:16:34:c0: 44:2a:fc:5c:bc:eb:e3:f5:c1:98:f6:22:ba:8e:51: 42:49:42:47:f8:d6:d7:b0:3a:c6:65:64:25:fa:6f: 59:3d:ba:57:f1:bb:08:5a:39:b8:50:d8:7e:74:15: 52:40:c2:6d:83:67:09:d3:70:41:a2:e3:fe:6f:67: 21:eb:e7:6a:26:34:83:6f:03:8b:91:70:24:3d:e2: eb:9d:c0:fc:8e:cd:36:ca:90:16:7a:4d:dd:fe:0c: e1:15:3a:00:79:c3:91:c8:bd:07:7d:e6:bf:a4:3f: 3d:55:36:cb:c9:c3:f5:42:3e:d8:9e:4f:23:ae:2a: b4:32:d0:bd:48:73:dc:f5:b6:9a:21:fd:79:dd:e8: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B7:17:2C:7B:8D:6E:4D:86:57:E8:9E:51:28:66:B0:3E:68:10:0B X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d2:44:eb:98:13:79:89:d3:e5:ed:84:51:1d:e0:3b:b3:37: 11:f1:d2:75:25:38:80:ca:61:72:70:2c:7c:96:1e:53:55:03: 95:7e:82:c9:e0:ea:2a:5c:c2:52:31:41:8e:98:51:39:46:75: 65:c4:75:9e:84:15:3b:53:fb:9b:fa:d9:92:ab:ec:38:ea:22: 7f:1a:96:d2:ca:ba:18:2d:9d:0f:65:31:d1:14:84:a0:f2:a1: 38:fb:17:68:01:d2:ff:2e:ad:28:fb:32:c6:e9:ae:b4:a7:dd: 6a:d5:82:07:a9:6a:a8:e3:32:90:17:8f:02:16:79:ef:a5:6d: 7c:1c:54:56:6d:d6:8a:1d:27:11:d2:93:1b:39:f1:7b:7a:67: 94:82:e1:7d:89:7e:d0:db:d6:4e:a8:51:1c:42:56:86:75:ca: 47:25:29:e5:44:7f:74:af:b8:e0:f6:2c:02:05:07:e7:ac:52: 9d:48:b1:5f:e7:06:3b:a1:90:25:85:52:ed:54:15:cd:73:f7: 05:63:3f:76:a3:6d:4d:e1:31:56:91:b0:1f:84:02:0d:d7:0f: 29:5a:ed:89:d7:01:39:71:ac:19:63:55:05:ad:04:35:c6:aa: de:2d:dc:28:7e:28:3b:31:d2:22:f7:ed:30:aa:18:a9:23:48: e4:5a:59:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUwNDAzMDExNzE3WhcNMjUwNDEwMDExNzE3WjAYMRYwFAYD VQQDEw02N2VkZTE5ZS1mMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcZDCkXSg4V/ufZDL99jRDys67WuR2RLkcn0K/Osaszhp7zdh22AuDAuloeG F82IHWl+V5yWs+/ZUCDXobJf8AvUdnvpI6lLVljFoXJg3xiMv5drgwSKLV7oXkLb 4KNpAc9nFtXfKfYPi3NIkPHELnNR65gWNMBEKvxcvOvj9cGY9iK6jlFCSUJH+NbX sDrGZWQl+m9ZPbpX8bsIWjm4UNh+dBVSQMJtg2cJ03BBouP+b2ch6+dqJjSDbwOL kXAkPeLrncD8js02ypAWek3d/gzhFToAecORyL0Hfea/pD89VTbLycP1Qj7Ynk8j riq0MtC9SHPc9baaIf153ejfOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO3Fyx7 jW5NhlfonlEoZrA+aBALMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd0kTrmBN5idPl7YRRHeA7szcR8dJ1JTiAymFycCx8lh5TVQOVfoLJ 4OoqXMJSMUGOmFE5RnVlxHWehBU7U/ub+tmSq+w46iJ/GpbSyroYLZ0PZTHRFISg 8qE4+xdoAdL/Lq0o+zLG6a60p91q1YIHqWqo4zKQF48CFnnvpW18HFRWbdaKHScR 0pMbOfF7emeUguF9iX7Q29ZOqFEcQlaGdcpHJSnlRH90r7jg9iwCBQfnrFKdSLFf 5wY7oZAlhVLtVBXNc/cFYz92o21N4TFWkbAfhAIN1w8pWu2J1wE5cawZY1UFrQQ1 xqreLdwofig7MdIi9+0wqhipI0jkWlkU -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:15 2025 by rpki-client