$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: /b/kKlik551QhmTr4AX392EilFHSWCfbx5YxF+5Z36o= Subject key identifier: B6:02:88:8A:C8:9D:88:33:BE:F1:1F:FE:22:FF:2F:4A:7E:3A:98:8E Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 0308 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 0304 Signing time: Sun 27 Apr 2025 00:53:12 +0000 Manifest this update: Sun 27 Apr 2025 00:53:11 +0000 Manifest next update: Sun 04 May 2025 00:53:11 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: fNwD4DhE3N+XwkrcgfWnpwA/wTSckB7MfrUKdpHogH4=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Apr 27 00:53:11 2025 GMT Not After : May 4 00:53:11 2025 GMT Subject: CN=680d7ff7-3ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:b9:d5:e9:79:41:f0:6e:49:19:b0:47:8f: 05:97:f6:23:61:da:eb:ea:ed:49:ee:c1:28:2c:8c: cd:ed:78:c4:d1:e2:50:04:e2:70:dc:8b:51:be:62: a3:6e:57:5e:24:bb:b2:92:f6:32:3a:a7:48:3b:d1: 6a:94:ea:dd:12:cf:8f:cd:67:7f:a9:9e:9f:9f:43: 75:14:7b:04:14:11:fa:68:dd:d7:93:1b:30:d7:e5: 88:53:a6:77:41:69:fd:4b:0f:d4:e3:27:e1:ae:e2: 44:0b:a1:e8:35:8e:f2:02:1c:83:07:9e:2a:ed:de: 0a:15:bc:67:8b:4a:87:c6:68:e8:ce:30:e7:51:5e: ca:ed:87:6e:7b:c0:d8:41:71:40:bd:8b:8d:8d:c3: a9:e1:82:a4:c8:32:1c:c9:4a:23:2e:6c:8d:22:c2: f1:89:06:0b:44:ba:38:c2:10:3f:e7:06:f1:aa:db: 3b:d8:30:56:9d:79:96:92:1c:3a:55:9e:14:12:24: 54:0b:aa:17:be:45:06:ca:fe:42:ab:5e:e5:52:b6: bd:b0:e4:a1:86:77:e5:1a:86:7a:91:ac:6d:75:70: 11:13:6d:9e:9a:36:2a:ca:20:9b:d6:ba:0b:f5:d7: c7:29:51:2a:d8:bd:21:98:16:0f:68:61:6e:df:28: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:02:88:8A:C8:9D:88:33:BE:F1:1F:FE:22:FF:2F:4A:7E:3A:98:8E X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:18:24:00:82:da:c4:4d:35:0e:84:55:0d:5f:54:74:5d:2e: b7:3c:b4:6d:82:c4:37:82:eb:db:65:77:e1:c9:b9:25:e9:9d: 21:f0:8d:56:53:b3:03:6c:02:eb:26:56:81:5f:e7:d0:da:bc: 4a:8c:7c:1f:8d:4b:ea:be:8d:b2:53:b8:3d:63:0c:56:ee:da: 84:a1:32:c5:66:df:d3:9b:14:db:87:89:1e:f6:6d:07:22:ba: 39:5b:80:ea:be:17:11:c5:90:4a:fc:8c:05:5b:11:db:62:d1: 45:39:f6:42:04:17:4f:c4:74:53:d3:50:91:2d:b1:85:7b:1b: 37:c6:0c:b6:73:49:86:d8:44:e2:cb:d7:20:8c:ff:06:32:db: 27:c1:1e:3e:7d:57:43:1e:5d:64:c2:41:d0:34:cd:c6:9b:fc: 38:64:0a:7b:bd:fe:89:80:4f:8c:a5:62:4e:26:c1:8a:4b:de: 23:5b:d6:ca:dc:73:03:3c:bb:e3:f4:a8:e2:ce:5e:9a:55:cf: 66:ed:f9:ef:96:6e:4f:d7:4f:eb:1e:d4:59:92:55:c6:4a:ff: af:bb:b4:bc:fe:54:38:ba:4c:00:6c:1a:ca:ca:f5:4b:23:fe: 35:6f:52:8d:0f:ef:2a:54:5c:17:c5:05:17:96:ef:ac:b7:f6: b7:12:bd:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUwNDI3MDA1MzExWhcNMjUwNTA0MDA1MzExWjAYMRYwFAYD VQQDEw02ODBkN2ZmNy0zY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVm51el5QfBuSRmwR48Fl/YjYdrr6u1J7sEoLIzN7XjE0eJQBOJw3ItRvmKj bldeJLuykvYyOqdIO9FqlOrdEs+PzWd/qZ6fn0N1FHsEFBH6aN3Xkxsw1+WIU6Z3 QWn9Sw/U4yfhruJEC6HoNY7yAhyDB54q7d4KFbxni0qHxmjozjDnUV7K7Ydue8DY QXFAvYuNjcOp4YKkyDIcyUojLmyNIsLxiQYLRLo4whA/5wbxqts72DBWnXmWkhw6 VZ4UEiRUC6oXvkUGyv5Cq17lUra9sOShhnflGoZ6kaxtdXARE22emjYqyiCb1roL 9dfHKVEq2L0hmBYPaGFu3yjxYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYCiIrI nYgzvvEf/iL/L0p+OpiOMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDGCQAgtrETTUOhFUNX1R0XS63PLRtgsQ3guvbZXfhybkl6Z0h8I1W U7MDbALrJlaBX+fQ2rxKjHwfjUvqvo2yU7g9YwxW7tqEoTLFZt/TmxTbh4ke9m0H Iro5W4DqvhcRxZBK/IwFWxHbYtFFOfZCBBdPxHRT01CRLbGFexs3xgy2c0mG2ETi y9cgjP8GMtsnwR4+fVdDHl1kwkHQNM3Gm/w4ZAp7vf6JgE+MpWJOJsGKS94jW9bK 3HMDPLvj9Kjizl6aVc9m7fnvlm5P10/rHtRZklXGSv+vu7S8/lQ4ukwAbBrKyvVL I/41b1KND+8qVFwXxQUXlu+st/a3Er2q -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:19 2025 by rpki-client on console.sobornost.net