$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: 0xEjLMB+bJZd2DavbkNguzr6JAjhHlSgv5OQNl9paNA= Subject key identifier: 5E:00:F3:98:32:A9:91:D5:21:E8:7D:68:27:7A:29:28:BC:FC:34:41 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 031F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 031B Signing time: Fri 13 Jun 2025 00:42:33 +0000 Manifest this update: Fri 13 Jun 2025 00:42:32 +0000 Manifest next update: Fri 20 Jun 2025 00:42:32 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: Eiqai+GGXrFueYLLfOmyQ0uilqbBfZ2WAU4j2JnVw9A=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 799 (0x31f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Jun 13 00:42:32 2025 GMT Not After : Jun 20 00:42:32 2025 GMT Subject: CN=684b73f9-75b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:c4:e2:10:84:ab:11:7b:82:22:43:11:42: 47:0e:cf:90:8b:7d:d2:74:05:cd:79:c6:19:ee:f9: 05:bc:b0:da:e8:01:3c:ab:36:9c:d1:69:2d:71:54: de:95:56:b6:eb:40:3f:7b:05:a9:99:f1:78:66:04: 6e:0d:3c:97:ec:40:fa:40:56:bb:2e:29:29:6a:47: 8c:ba:68:da:bc:be:22:59:fe:fb:fd:a9:ee:71:76: fb:f4:be:2a:c7:76:45:a5:4e:d7:ea:f7:43:67:2c: 35:44:cf:44:f5:cf:28:de:20:dd:d6:af:37:c6:2f: c2:d5:94:88:f9:86:03:25:e1:92:a7:ab:2c:b9:8f: 4b:9a:c7:15:34:f1:82:cb:61:14:e6:95:76:c8:3c: fa:7c:06:a2:92:d3:1f:db:08:40:ee:84:ce:fc:c9: ac:ac:c5:ec:ed:1c:13:8a:ce:46:82:0f:45:1b:be: a0:4d:12:11:6c:73:55:8e:b3:1b:59:c8:f4:c1:49: d1:4d:ea:d5:a9:42:8b:e8:07:15:1c:b5:d7:ae:fc: ef:68:6c:ca:3f:d2:e1:0b:5f:fc:8f:40:fe:26:7d: 29:98:47:19:d0:f2:e9:bf:54:09:e8:a8:65:2d:de: 2f:79:52:05:e9:36:6d:e1:44:04:0e:07:4f:23:06: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:00:F3:98:32:A9:91:D5:21:E8:7D:68:27:7A:29:28:BC:FC:34:41 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:fe:d4:3e:d1:cd:5d:cd:53:26:a2:5f:0d:6b:31:93:50:92: 42:a2:0a:57:d3:1d:a4:4b:68:41:17:61:c7:8d:a8:16:8e:3a: 9b:8b:d9:e0:14:31:93:b9:cc:49:dd:a5:47:e1:62:8b:b7:3b: 14:2d:0b:d7:df:02:fc:f9:f3:95:97:13:e0:77:0e:0f:0b:29: 6f:8a:65:f6:d7:0d:90:33:ed:5f:6f:bc:7b:b6:f3:1d:35:21: 1a:f0:fb:d5:32:d5:b6:7c:e3:d4:9d:46:80:89:d3:88:53:94: 9c:57:3e:b7:79:3d:4c:c5:26:bb:30:f2:c5:e1:3b:c9:0f:4d: a5:ce:1c:72:20:17:89:3c:b3:34:c4:fc:34:a9:56:49:81:0e: 7d:ef:36:1f:7a:4e:f6:02:ac:14:2d:75:46:0f:54:40:96:c4: d9:b9:e6:8d:3e:7b:67:f6:d4:22:37:99:c3:37:3b:37:90:fa: 65:57:ad:b3:5f:9e:fc:54:f5:ec:65:08:ac:53:80:09:09:50: 3f:c6:73:ca:68:4b:28:73:c4:15:4e:6e:8b:28:4f:41:71:02: cd:c3:42:d5:8a:3a:8d:6c:9c:0b:c4:3f:4e:74:fb:28:3e:f5: a1:f3:2a:4b:aa:de:05:3a:97:78:d9:df:37:5a:b7:b8:9a:f4: 28:c6:27:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUwNjEzMDA0MjMyWhcNMjUwNjIwMDA0MjMyWjAYMRYwFAYD VQQDEw02ODRiNzNmOS03NWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38vE4hCEqxF7giJDEUJHDs+Qi33SdAXNecYZ7vkFvLDa6AE8qzac0WktcVTe lVa260A/ewWpmfF4ZgRuDTyX7ED6QFa7LikpakeMumjavL4iWf77/anucXb79L4q x3ZFpU7X6vdDZyw1RM9E9c8o3iDd1q83xi/C1ZSI+YYDJeGSp6ssuY9LmscVNPGC y2EU5pV2yDz6fAaiktMf2whA7oTO/MmsrMXs7RwTis5Ggg9FG76gTRIRbHNVjrMb Wcj0wUnRTerVqUKL6AcVHLXXrvzvaGzKP9LhC1/8j0D+Jn0pmEcZ0PLpv1QJ6Khl Ld4veVIF6TZt4UQEDgdPIwZQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4A85gy qZHVIeh9aCd6KSi8/DRBMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC/tQ+0c1dzVMmol8NazGTUJJCogpX0x2kS2hBF2HHjagWjjqbi9ng FDGTucxJ3aVH4WKLtzsULQvX3wL8+fOVlxPgdw4PCylvimX21w2QM+1fb7x7tvMd NSEa8PvVMtW2fOPUnUaAidOIU5ScVz63eT1MxSa7MPLF4TvJD02lzhxyIBeJPLM0 xPw0qVZJgQ597zYfek72AqwULXVGD1RAlsTZueaNPntn9tQiN5nDNzs3kPplV62z X578VPXsZQisU4AJCVA/xnPKaEsoc8QVTm6LKE9BcQLNw0LVijqNbJwLxD9OdPso PvWh8ypLqt4FOpd42d83Wre4mvQoxica -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:16 2025 by rpki-client