$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: 0fG6zm1CSrccRlPshogyNcHVVRAmM1s+TuVtPzZNq0U= Subject key identifier: 8E:9D:3A:19:2E:81:83:13:CD:AC:5B:97:08:7D:2E:B8:F6:AC:6C:BB Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 0307 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 0303 Signing time: Fri 25 Apr 2025 01:00:45 +0000 Manifest this update: Fri 25 Apr 2025 01:00:44 +0000 Manifest next update: Fri 02 May 2025 01:00:44 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: jQjm7W4wlwUxC2wVNto+5IXzumO1U2aCddMJtdGbFIg=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 775 (0x307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Apr 25 01:00:44 2025 GMT Not After : May 2 01:00:44 2025 GMT Subject: CN=680adebc-1f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6b:1e:39:13:99:ea:fe:bb:17:53:48:48:c4: b1:2d:4d:23:11:66:55:05:5a:a3:ff:02:19:50:e6: 79:a5:fc:59:0b:af:6b:4a:dc:e4:6e:a2:3e:91:35: 45:56:4b:b9:d2:ae:09:cd:d9:17:8e:27:9f:a7:a8: fd:6b:78:94:ef:63:c3:85:90:25:46:35:bd:84:d7: fe:e8:88:9a:2d:db:b6:d7:4e:39:63:ea:3b:25:d3: e5:d0:0c:4d:fe:e8:0d:40:27:3c:e9:6d:34:a8:ed: e6:3a:99:b3:3e:56:b1:27:f4:e7:17:ac:af:67:7a: e4:fb:ee:69:71:35:df:5b:fa:15:27:65:a6:2b:3c: ca:0e:d5:67:6c:8c:d9:1d:e5:f0:58:12:8a:8f:04: 4c:bf:83:5a:bf:57:15:3f:d5:1e:ba:d4:f3:68:fc: 08:f2:57:46:e7:fc:d9:68:90:8c:9c:c2:be:47:23: 62:50:47:bc:16:c4:04:f1:30:03:07:fe:36:81:c3: 13:9d:6c:29:c8:5c:2d:69:75:87:07:3c:83:83:ff: 76:c6:42:a0:4d:f4:1b:a0:21:f6:74:e8:49:17:21: b2:8d:af:43:10:4f:cd:a7:df:a7:ca:c4:a1:98:53: 1a:9b:eb:18:c9:29:1f:dd:1f:9e:5e:3c:12:cf:cd: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9D:3A:19:2E:81:83:13:CD:AC:5B:97:08:7D:2E:B8:F6:AC:6C:BB X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:be:d7:dc:9c:38:35:9e:0a:2c:ec:80:ca:80:b9:7a:3c:0d: ac:fc:fb:90:23:bc:ab:8b:08:90:33:ec:a5:eb:25:4d:a9:c3: c7:f8:e6:6d:37:b9:91:04:ec:5c:76:5b:55:46:51:09:d6:1c: 41:41:04:9e:7e:8c:cc:13:33:b8:ab:3e:9b:08:c3:c2:c3:cb: ad:0b:24:2a:7f:04:79:fd:fc:48:b6:9e:12:b1:51:f3:4a:8b: be:8a:25:47:f1:bf:2f:5b:63:8c:9b:7a:f5:ec:af:3a:6e:88: 40:8f:16:12:ef:93:f2:3d:59:69:3b:0b:78:d2:b4:75:8c:97: 83:73:80:cf:76:2e:3c:32:3c:ac:c4:aa:36:77:fc:d8:4a:66: 92:94:ed:af:b2:b0:91:8d:a4:48:ed:48:2c:91:9b:b4:9c:15: 83:57:88:dd:25:8c:22:6f:2c:aa:97:de:d6:3e:2c:a7:b3:ea: 3e:90:b5:59:c9:6e:c5:09:cd:31:3c:29:e0:4e:4f:df:f1:f0: 98:c9:3d:f7:c4:a0:4b:9c:65:f6:73:de:e0:27:ab:d9:20:4a: 66:3a:d9:cc:83:e7:25:ae:5d:ae:42:65:ff:dd:89:07:9e:da: e1:79:10:94:c8:ae:11:cc:7f:f8:f0:8f:60:52:64:1c:f0:91: cc:64:a5:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUwNDI1MDEwMDQ0WhcNMjUwNTAyMDEwMDQ0WjAYMRYwFAYD VQQDEw02ODBhZGViYy0xZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2seOROZ6v67F1NISMSxLU0jEWZVBVqj/wIZUOZ5pfxZC69rStzkbqI+kTVF Vku50q4JzdkXjiefp6j9a3iU72PDhZAlRjW9hNf+6IiaLdu21045Y+o7JdPl0AxN /ugNQCc86W00qO3mOpmzPlaxJ/TnF6yvZ3rk++5pcTXfW/oVJ2WmKzzKDtVnbIzZ HeXwWBKKjwRMv4Nav1cVP9UeutTzaPwI8ldG5/zZaJCMnMK+RyNiUEe8FsQE8TAD B/42gcMTnWwpyFwtaXWHBzyDg/92xkKgTfQboCH2dOhJFyGyja9DEE/Np9+nysSh mFMam+sYySkf3R+eXjwSz804vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6dOhku gYMTzaxblwh9Lrj2rGy7MB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQvtfcnDg1ngos7IDKgLl6PA2s/PuQI7yriwiQM+yl6yVNqcPH+OZt N7mRBOxcdltVRlEJ1hxBQQSefozMEzO4qz6bCMPCw8utCyQqfwR5/fxItp4SsVHz Sou+iiVH8b8vW2OMm3r17K86bohAjxYS75PyPVlpOwt40rR1jJeDc4DPdi48Mjys xKo2d/zYSmaSlO2vsrCRjaRI7UgskZu0nBWDV4jdJYwibyyql97WPiyns+o+kLVZ yW7FCc0xPCngTk/f8fCYyT33xKBLnGX2c97gJ6vZIEpmOtnMg+clrl2uQmX/3YkH ntrheRCUyK4RzH/48I9gUmQc8JHMZKXV -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:50 2025 by rpki-client