$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: DjnxoH7AcZqqJE/gVNyaaP7knk0SyG935mEffk7cems= Subject key identifier: E9:C9:8F:5E:13:F3:7B:23:51:31:84:5F:A9:D0:E5:EC:38:62:B1:95 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 0314 Signing time: Sat 31 May 2025 01:23:17 +0000 Manifest this update: Sat 31 May 2025 01:23:17 +0000 Manifest next update: Sat 07 Jun 2025 01:23:17 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: h5yo0eXGdX9mesBa3cdCRg8G73xYUOB6z12ejpdccmw=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: May 31 01:23:17 2025 GMT Not After : Jun 7 01:23:17 2025 GMT Subject: CN=683a5a05-5f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6a:18:94:64:a7:9b:58:35:b0:45:ca:b2:c7: d9:67:8b:12:83:35:f5:8a:bd:91:11:00:4e:c4:c5: bb:2b:3a:a2:5d:b4:f1:dc:d9:50:46:01:e8:8e:1d: e6:e4:2f:2b:99:b0:0d:84:c6:70:2a:b5:3e:ce:ea: 30:58:e7:81:d7:a1:0b:05:27:c4:38:55:e6:7f:b1: 59:ed:8b:e3:5c:e1:9c:63:ae:f1:d9:55:2c:27:5f: ce:3f:55:17:a2:fb:1b:b4:38:9b:a9:ab:81:33:0b: 1e:21:d9:61:5b:65:15:60:ae:d4:0b:92:8c:ee:36: 8c:9e:2c:0e:88:2a:69:78:4c:9d:8f:c8:72:29:c7: 00:ce:20:60:19:5f:0d:80:24:d3:6a:08:f4:13:37: 43:9e:b4:b0:92:bf:c8:03:4a:42:55:08:2d:6e:72: eb:9b:cc:86:6d:a7:2f:da:e4:28:dd:31:ee:89:14: 19:0c:78:3a:c1:80:c5:40:9f:57:0d:59:59:14:ed: 8f:f5:e9:7a:ba:ee:b9:da:3b:08:de:5f:5a:69:e5: fd:7f:81:cc:d3:6d:7d:22:3c:d6:4c:44:b8:9f:5c: 71:75:6a:fe:32:3a:40:e4:ed:05:03:42:6b:d9:af: b4:78:28:b2:41:0a:9e:21:f6:14:e8:43:b8:d4:e5: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C9:8F:5E:13:F3:7B:23:51:31:84:5F:A9:D0:E5:EC:38:62:B1:95 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e9:d5:a1:e5:e6:52:82:7f:60:7d:78:0b:04:ab:cf:0e:fc: a3:5d:9c:8a:7a:01:5d:4a:4a:d7:39:0c:5d:b6:77:42:8f:24: d2:7f:30:00:63:a2:fc:0f:46:29:64:41:53:80:ab:21:d9:1d: 77:ab:8e:1b:d7:3d:2d:e4:97:34:2b:a7:ea:e1:94:94:1c:28: 1a:16:66:be:7c:79:cf:88:66:2c:89:91:cc:ff:3a:17:56:20: 01:04:af:56:05:28:75:97:bd:8f:2b:4e:f7:07:2e:27:ee:08: 1f:43:9a:eb:19:a2:76:fe:ee:6f:00:51:c1:5f:a5:46:15:b0: e1:df:a6:08:85:6d:23:ba:b2:a3:0b:d6:bf:ea:3a:41:f8:5a: 43:70:61:05:0c:24:6f:fc:95:57:15:ec:07:f0:38:46:18:98: 7a:78:fd:85:b5:f4:ac:30:b1:43:d9:eb:9e:46:2a:28:05:55: 10:e9:49:73:c1:3a:21:72:67:3c:22:1b:c9:76:f5:73:1e:37: ef:0d:80:e2:c4:bb:cc:a4:bb:05:57:4e:50:2a:cf:c1:44:45: ef:65:1c:70:1d:59:18:cd:9a:b2:9b:f2:9b:15:6d:2e:a7:d3: a6:df:ed:00:79:2b:aa:45:dd:ec:f7:c1:64:6b:44:8e:62:ee: a4:1f:31:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUwNTMxMDEyMzE3WhcNMjUwNjA3MDEyMzE3WjAYMRYwFAYD VQQDEw02ODNhNWEwNS01ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WoYlGSnm1g1sEXKssfZZ4sSgzX1ir2REQBOxMW7KzqiXbTx3NlQRgHojh3m 5C8rmbANhMZwKrU+zuowWOeB16ELBSfEOFXmf7FZ7YvjXOGcY67x2VUsJ1/OP1UX ovsbtDibqauBMwseIdlhW2UVYK7UC5KM7jaMniwOiCppeEydj8hyKccAziBgGV8N gCTTagj0EzdDnrSwkr/IA0pCVQgtbnLrm8yGbacv2uQo3THuiRQZDHg6wYDFQJ9X DVlZFO2P9el6uu652jsI3l9aaeX9f4HM0219IjzWTES4n1xxdWr+MjpA5O0FA0Jr 2a+0eCiyQQqeIfYU6EO41OWmQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnJj14T 83sjUTGEX6nQ5ew4YrGVMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ6dWh5eZSgn9gfXgLBKvPDvyjXZyKegFdSkrXOQxdtndCjyTSfzAA Y6L8D0YpZEFTgKsh2R13q44b1z0t5Jc0K6fq4ZSUHCgaFma+fHnPiGYsiZHM/zoX ViABBK9WBSh1l72PK073By4n7ggfQ5rrGaJ2/u5vAFHBX6VGFbDh36YIhW0jurKj C9a/6jpB+FpDcGEFDCRv/JVXFewH8DhGGJh6eP2FtfSsMLFD2eueRiooBVUQ6Ulz wTohcmc8IhvJdvVzHjfvDYDixLvMpLsFV05QKs/BREXvZRxwHVkYzZqym/KbFW0u p9Om3+0AeSuqRd3s98Fka0SOYu6kHzEP -----END CERTIFICATE-----Generated at Sat May 31 17:45:06 2025 by rpki-client