$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: eGRQsP50AJ11+lVns0TRFXPE9NrCHraWRZaOI7BvlkY= Subject key identifier: 16:41:3A:E6:04:AD:CF:D5:3E:3C:95:0B:A0:06:E0:7F:80:FE:B4:3F Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 03D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 03CD Signing time: Thu 21 May 2026 00:41:53 +0000 Manifest this update: Thu 21 May 2026 00:41:53 +0000 Manifest next update: Thu 28 May 2026 00:41:53 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: nf82cXGc9qBHnahbJOHVQbVk9MLw8UxO4ilO14z+r0Q=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: fpRcMlKlCDYWLBuuGFtAiAF3XNUyl+/W9RNW0drMAfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: May 21 00:41:53 2026 GMT Not After : May 28 00:41:53 2026 GMT Subject: CN=6a0e54d1-4180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:1e:d2:5c:74:04:36:5c:8c:23:35:ff:b4: d8:ea:d4:4a:f3:0d:2e:6b:a7:3e:2d:e8:dd:96:e3: 5a:6a:3c:ce:6f:9c:9d:2f:e8:01:b6:3f:cb:c2:0a: 6b:bc:0c:b5:70:b7:cc:34:d5:9e:73:11:2e:dd:11: f8:89:ad:b7:84:04:8e:a4:05:8d:cc:2f:cb:a9:bc: 21:f9:92:4c:a2:ec:d6:2c:bd:47:1e:a6:d5:09:4b: a4:ae:0e:95:90:93:54:92:b4:be:16:fc:56:66:6a: 4b:b9:28:59:28:ad:c0:26:2f:dd:5b:d3:7a:70:76: f1:d7:de:e1:28:66:a2:8d:d5:1a:c3:b2:ca:99:c6: c8:d4:95:d3:24:b4:13:ec:bc:da:9e:af:28:be:81: 49:90:1e:48:bc:dc:63:36:50:1f:0e:a6:d8:52:0f: 42:98:b7:18:fa:fa:06:d6:72:65:d2:0f:a9:a5:74: a7:19:ff:59:c3:bf:67:0d:bd:76:2e:0e:99:db:f8: 21:96:2c:aa:c1:a6:62:89:3d:17:73:39:4c:6e:59: 92:2c:69:2e:91:98:85:10:69:63:26:85:73:9c:8a: b2:ba:da:9a:ea:08:d0:8e:76:66:66:1e:17:88:47: 9e:73:15:a4:73:6c:b5:52:72:d5:fe:c4:cf:f8:c8: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:3A:E6:04:AD:CF:D5:3E:3C:95:0B:A0:06:E0:7F:80:FE:B4:3F X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:93:ce:ef:eb:6a:87:4d:8f:b0:32:64:26:fe:8f:2e:a9:6f: 7f:30:f9:06:41:b4:a0:df:a7:d9:7c:fb:a1:88:47:13:db:71: a3:40:94:cf:e8:1d:d1:67:d0:8d:39:82:af:1a:64:f7:e5:a0: f2:e4:f6:85:11:70:3c:f6:b3:3a:49:8e:7f:5f:13:61:62:c9: 83:5d:91:dc:4f:bf:30:c6:d1:3f:29:bf:84:17:55:71:ae:03: f1:89:b9:df:1e:b3:d1:78:83:62:bb:44:cc:06:e5:05:16:19: 5e:e3:ec:ec:ff:b5:80:f0:29:a1:bf:a3:d8:54:b6:07:a0:bd: eb:dc:d7:b2:56:1a:6d:c8:39:ee:54:53:55:a7:5f:85:8c:fd: 5d:50:59:29:ed:d1:77:b8:13:b3:58:21:78:1e:0e:c7:a7:7e: 75:da:e0:0b:68:d7:0c:38:89:f4:21:7e:35:fb:e9:51:da:26: 16:10:89:ee:36:e2:b4:60:eb:45:f3:08:19:9e:c5:5c:2e:ef: 24:a5:9d:59:ef:1a:dd:42:59:2d:cd:23:ca:05:b9:71:3c:27: 86:d2:3d:73:ed:46:53:70:d8:e8:e7:35:4e:b3:66:39:fd:ce: d3:40:68:bf:4f:20:0a:ba:c0:91:54:10:da:15:ae:88:ef:88: ff:a4:17:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjYwNTIxMDA0MTUzWhcNMjYwNTI4MDA0MTUzWjAYMRYwFAYD VQQDEw02YTBlNTRkMS00MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Boe0lx0BDZcjCM1/7TY6tRK8w0ua6c+LejdluNaajzOb5ydL+gBtj/Lwgpr vAy1cLfMNNWecxEu3RH4ia23hASOpAWNzC/Lqbwh+ZJMouzWLL1HHqbVCUukrg6V kJNUkrS+FvxWZmpLuShZKK3AJi/dW9N6cHbx197hKGaijdUaw7LKmcbI1JXTJLQT 7Lzanq8ovoFJkB5IvNxjNlAfDqbYUg9CmLcY+voG1nJl0g+ppXSnGf9Zw79nDb12 Lg6Z2/ghliyqwaZiiT0XczlMblmSLGkukZiFEGljJoVznIqyutqa6gjQjnZmZh4X iEeecxWkc2y1UnLV/sTP+MiqEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZBOuYE rc/VPjyVC6AG4H+A/rQ/MB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX5PO7+tqh02PsDJkJv6PLqlvfzD5BkG0oN+n2Xz7oYhHE9txo0CUz+gd0WfQ jTmCrxpk9+Wg8uT2hRFwPPazOkmOf18TYWLJg12R3E+/MMbRPym/hBdVca4D8Ym5 3x6z0XiDYrtEzAblBRYZXuPs7P+1gPApob+j2FS2B6C969zXslYabcg57lRTVadf hYz9XVBZKe3Rd7gTs1gheB4Ox6d+ddrgC2jXDDiJ9CF+NfvpUdomFhCJ7jbitGDr RfMIGZ7FXC7vJKWdWe8a3UJZLc0jygW5cTwnhtI9c+1GU3DY6Oc1TrNmOf3O00Bo v08gCrrAkVQQ2hWuiO+I/6QXOA== -----END CERTIFICATE-----Generated at Thu May 21 10:28:07 2026 by rpki-client