$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: JEWrKBPMAZGh3lnwZHTGmQcvtwdwB8J+Ll6eeQinj8I= Subject key identifier: F1:65:61:D3:E6:8A:CD:76:FD:CF:BD:F2:A8:87:F5:D6:17:8F:A7:90 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 0348 Signing time: Tue 09 Sep 2025 01:07:08 +0000 Manifest this update: Tue 09 Sep 2025 01:07:08 +0000 Manifest next update: Tue 16 Sep 2025 01:07:08 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: g0XMifYFadZtEsCu/Ma5tWEMsOhw0iph1R0+47+aRzQ=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Sep 9 01:07:08 2025 GMT Not After : Sep 16 01:07:08 2025 GMT Subject: CN=68bf7dbc-f0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:78:db:c8:d4:17:b0:2d:15:d4:ac:e9:17: 9d:fa:cf:30:dd:ac:e2:fc:6b:f1:e6:18:a8:a8:c7: ee:0d:59:71:3b:47:e0:d5:a0:0d:f8:b5:7e:b8:7f: 71:6a:86:4f:11:df:d0:84:29:57:70:db:da:ea:e8: 5c:f1:34:3c:36:83:1e:66:d3:e0:c0:55:f0:54:c0: 8c:b7:27:43:ca:25:63:31:33:c8:30:fc:79:72:31: f2:80:62:38:cc:d3:2b:1f:54:18:f2:8b:33:4c:ed: b0:49:c3:80:23:b4:88:b9:be:b9:16:de:1f:82:7f: ed:e6:bb:36:99:cf:e2:55:7f:aa:d7:61:13:8e:e9: 30:d1:af:aa:54:64:2a:04:59:60:3b:32:94:ad:61: 52:49:50:90:38:a4:40:f5:54:97:0b:f3:6f:2c:0d: 43:8b:01:1b:bc:bf:24:7d:0d:0b:ef:ef:d2:cf:c3: d4:0e:59:6f:e1:4b:7a:7c:58:2d:73:14:e0:da:2c: f3:18:95:a0:96:ac:28:fe:04:2c:dd:02:44:db:05: 1c:a2:1b:c4:6d:72:b4:34:34:05:d4:ef:78:ef:1d: fe:3d:3b:a8:d1:9e:64:3b:8c:b7:7d:ab:d0:5f:d0: a6:ce:cc:bd:3f:38:9a:5f:d9:d3:52:26:5d:c4:66: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:61:D3:E6:8A:CD:76:FD:CF:BD:F2:A8:87:F5:D6:17:8F:A7:90 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c5:9d:39:b5:8d:d9:30:90:16:ff:a4:ba:50:96:5b:ed:39: 88:46:60:7f:b2:de:48:f1:b7:20:b0:71:97:97:96:e3:a5:9e: f9:21:93:bc:08:f5:1a:1f:b5:d9:fa:82:53:f2:db:c5:3d:58: 2c:65:22:eb:70:3e:73:5e:3c:e8:b0:47:09:15:09:11:f2:47: bd:4d:8e:f3:6a:63:d7:d5:f4:5f:6e:93:1c:b8:57:83:74:b9: d9:2a:4e:37:ff:60:a5:c4:1b:eb:b3:e9:15:84:93:3b:70:98: 33:6c:0e:e2:e4:35:46:3a:fd:39:90:f5:01:d1:4a:a2:08:25: bd:3e:3e:12:53:d8:fe:04:0c:eb:77:a9:22:94:1a:8e:5d:c8: 69:7a:f6:29:95:f5:14:d1:c8:e0:2d:ac:db:e2:2a:23:e2:5a: 73:88:d6:fe:b6:08:a2:78:10:40:52:6a:87:10:41:a8:c5:a7: fd:89:92:1e:a8:00:08:f7:cc:cf:fb:f2:54:d9:26:e2:bc:87: 81:bf:0a:c1:b3:0d:93:aa:f0:84:57:40:00:54:18:33:26:30: 11:68:41:d1:af:e1:6a:a8:04:18:26:9f:cd:7c:60:5e:5f:5b: 84:63:1d:a7:d6:d3:0d:71:1e:d5:66:9c:7d:8e:c3:f1:c8:41: a8:cb:df:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUwOTA5MDEwNzA4WhcNMjUwOTE2MDEwNzA4WjAYMRYwFAYD VQQDEw02OGJmN2RiYy1mMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxB428jUF7AtFdSs6Red+s8w3azi/Gvx5hioqMfuDVlxO0fg1aAN+LV+uH9x aoZPEd/QhClXcNva6uhc8TQ8NoMeZtPgwFXwVMCMtydDyiVjMTPIMPx5cjHygGI4 zNMrH1QY8oszTO2wScOAI7SIub65Ft4fgn/t5rs2mc/iVX+q12ETjukw0a+qVGQq BFlgOzKUrWFSSVCQOKRA9VSXC/NvLA1DiwEbvL8kfQ0L7+/Sz8PUDllv4Ut6fFgt cxTg2izzGJWglqwo/gQs3QJE2wUcohvEbXK0NDQF1O947x3+PTuo0Z5kO4y3favQ X9Cmzsy9PziaX9nTUiZdxGZI0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFlYdPm is12/c+98qiH9dYXj6eQMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6xZ05tY3ZMJAW/6S6UJZb7TmIRmB/st5I8bcgsHGXl5bjpZ75IZO8 CPUaH7XZ+oJT8tvFPVgsZSLrcD5zXjzosEcJFQkR8ke9TY7zamPX1fRfbpMcuFeD dLnZKk43/2ClxBvrs+kVhJM7cJgzbA7i5DVGOv05kPUB0UqiCCW9Pj4SU9j+BAzr d6kilBqOXchpevYplfUU0cjgLazb4ioj4lpziNb+tgiieBBAUmqHEEGoxaf9iZIe qAAI98zP+/JU2SbivIeBvwrBsw2TqvCEV0AAVBgzJjARaEHRr+FqqAQYJp/NfGBe X1uEYx2n1tMNcR7VZpx9jsPxyEGoy9+3 -----END CERTIFICATE-----Generated at Tue Sep 9 07:52:20 2025 by rpki-client