$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: yNcxqJoR4utsOe9mG0aGZs1km+5Up9HVe7dqF2wZp4w= Subject key identifier: 94:B7:BE:5F:1A:58:B1:5B:85:D1:6E:41:8C:66:9C:B4:F8:B4:0A:98 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 0338 Signing time: Sat 09 Aug 2025 01:37:07 +0000 Manifest this update: Sat 09 Aug 2025 01:37:07 +0000 Manifest next update: Sat 16 Aug 2025 01:37:07 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: da6Lq5vYtbhQYiJrS+JhyamcN0vBT6/ZTkbpmXFli4U=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Aug 9 01:37:07 2025 GMT Not After : Aug 16 01:37:07 2025 GMT Subject: CN=6896a643-bf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:e4:16:1a:53:36:8e:3d:bd:71:6f:8d:fe: 2a:14:01:e4:3d:69:d0:cf:df:73:fb:e7:fd:ee:51: 2a:64:63:ba:db:fa:af:8b:d3:8d:72:75:c3:1a:ac: 31:92:85:97:ec:28:93:51:61:7f:cc:ff:7d:cc:32: d5:6a:8c:c3:c1:22:0e:87:b6:3b:08:82:2a:34:a2: 09:10:94:d7:c0:22:ff:5e:f5:cc:a1:bc:fb:39:32: 57:55:23:32:93:03:d8:50:d9:6d:35:42:7d:5d:3a: f9:d5:a2:09:a7:cd:1a:5c:af:9d:88:1c:48:2d:fd: 89:e2:b0:24:fe:64:c8:33:56:d5:e6:66:7d:65:9e: cc:9d:93:5e:ba:f1:1d:8f:7b:37:24:c6:96:b9:48: 5b:84:f8:78:f8:52:2b:00:47:da:4c:d0:d3:c6:91: 33:74:97:9e:4a:29:4c:b4:79:30:0c:c1:bb:2b:db: 5a:f6:9e:ba:80:df:ef:f1:7d:c4:ec:c2:ea:5e:13: c8:5b:71:dd:72:a8:41:e3:78:47:41:38:ee:5b:ff: 64:87:15:8a:5e:9f:ff:53:74:76:25:ef:fa:71:cc: ea:63:b2:b8:e9:16:80:39:a4:8b:ca:03:a0:b4:2e: 11:b6:d4:28:93:79:b1:54:7a:1a:65:92:ae:85:35: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B7:BE:5F:1A:58:B1:5B:85:D1:6E:41:8C:66:9C:B4:F8:B4:0A:98 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c1:9c:f3:69:4e:e9:d4:58:28:fe:e4:44:05:20:75:e2:11: ee:05:49:f8:4d:ae:29:10:74:04:3f:07:5a:2d:02:92:3d:a8: 3c:e8:00:9c:b2:a7:35:67:9f:87:27:5d:57:5f:b0:b7:cb:5f: c4:2c:6f:42:7b:1c:63:55:e0:a5:31:e8:aa:9e:eb:5c:53:f2: 0c:ef:f6:e6:81:0f:73:59:38:96:c1:04:4d:85:d6:cc:f3:00: 0d:bc:3f:b8:5c:54:82:b8:22:a3:c6:7f:ee:ad:c4:97:17:56: 96:1b:21:c9:8a:2a:8c:86:63:ea:57:bd:62:f9:e9:a6:cc:58: 34:e8:36:5c:54:cd:41:35:77:78:82:d8:a8:50:bb:97:48:9e: bd:f2:d1:e5:36:53:a5:b7:0e:68:20:7b:13:2f:cf:be:0a:2e: e5:32:e9:27:37:4d:50:aa:07:f3:25:19:1f:3c:98:d6:9e:d5: b9:8c:b2:35:39:c5:b1:d0:37:76:a0:41:e0:6e:10:79:be:9e: 19:6e:ec:bf:53:83:9c:8b:32:c7:37:2a:6a:2b:82:0a:6b:85: 53:21:71:75:f3:0d:06:9e:40:1c:16:a1:ff:79:24:47:1b:f8: 05:ca:0b:cd:63:e7:3a:53:a3:bd:be:80:81:39:30:5c:64:f3: 9b:a2:65:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUwODA5MDEzNzA3WhcNMjUwODE2MDEzNzA3WjAYMRYwFAYD VQQDEw02ODk2YTY0My1iZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27vkFhpTNo49vXFvjf4qFAHkPWnQz99z++f97lEqZGO62/qvi9ONcnXDGqwx koWX7CiTUWF/zP99zDLVaozDwSIOh7Y7CIIqNKIJEJTXwCL/XvXMobz7OTJXVSMy kwPYUNltNUJ9XTr51aIJp80aXK+diBxILf2J4rAk/mTIM1bV5mZ9ZZ7MnZNeuvEd j3s3JMaWuUhbhPh4+FIrAEfaTNDTxpEzdJeeSilMtHkwDMG7K9ta9p66gN/v8X3E 7MLqXhPIW3HdcqhB43hHQTjuW/9khxWKXp//U3R2Je/6cczqY7K46RaAOaSLygOg tC4RttQok3mxVHoaZZKuhTVdFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS3vl8a WLFbhdFuQYxmnLT4tAqYMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9wZzzaU7p1Fgo/uREBSB14hHuBUn4Ta4pEHQEPwdaLQKSPag86ACc sqc1Z5+HJ11XX7C3y1/ELG9CexxjVeClMeiqnutcU/IM7/bmgQ9zWTiWwQRNhdbM 8wANvD+4XFSCuCKjxn/urcSXF1aWGyHJiiqMhmPqV71i+emmzFg06DZcVM1BNXd4 gtioULuXSJ698tHlNlOltw5oIHsTL8++Ci7lMuknN01QqgfzJRkfPJjWntW5jLI1 OcWx0Dd2oEHgbhB5vp4Zbuy/U4OcizLHNypqK4IKa4VTIXF18w0GnkAcFqH/eSRH G/gFygvNY+c6U6O9voCBOTBcZPObomX0 -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:17 2025 by rpki-client