
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json)
Hash identifier: N8t+cCZZJRyZMERInwKDPfyZd4V4DyMV8EA2iCy6RUA=
Subject key identifier: 95:B0:0B:F8:00:0A:5F:34:DA:34:80:EA:40:DD:0A:0D:70:34:3B:26
Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F
Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
Certificate serial: 040C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
Manifest number: 0404
Signing time: Sat 05 Sep 2026 00:07:31 +0000
Manifest this update: Sat 05 Sep 2026 00:07:30 +0000
Manifest next update: Sat 12 Sep 2026 00:07:30 +0000
Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: C9lBEnwM4WrLo4RWRpKYn+LDY5b5lZP28FjwSH/efBQ=)
2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: fpRcMlKlCDYWLBuuGFtAiAF3XNUyl+/W9RNW0drMAfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl
rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
Validity
Not Before: Sep 5 00:07:30 2026 GMT
Not After : Sep 12 00:07:30 2026 GMT
Subject: CN=6a9b5d43-a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:0f:24:c0:6a:87:b2:c0:b1:f5:df:a7:01:
e3:43:4b:ee:a1:5f:10:fb:88:39:13:4c:85:85:5b:
e6:52:89:74:d1:d6:c6:d6:f0:62:4b:21:72:57:ad:
26:b4:b8:dd:5c:86:3f:7d:0a:b8:36:36:53:26:61:
06:5a:b8:33:7f:07:b5:0f:75:5e:1d:98:5e:60:7b:
55:2f:35:71:f9:34:79:7c:cf:76:7b:7d:15:eb:0f:
8a:e1:c6:31:3b:6f:60:3b:40:c8:1e:94:cd:7d:bf:
d9:f5:ff:8e:c4:bd:04:4d:d1:86:84:37:45:b0:27:
a9:bb:c2:7d:bb:07:67:40:61:7b:16:a1:18:7d:47:
bc:27:2b:6f:aa:bf:58:77:27:4f:87:a3:06:7e:b9:
34:93:82:10:18:91:01:a3:c9:f4:bb:d0:91:ac:1f:
63:51:1e:ee:14:b6:e2:51:3d:4c:cc:45:43:6d:40:
e5:c3:1b:a6:77:30:53:8d:51:85:14:33:c4:3d:2c:
71:14:24:f0:ad:f7:b7:c4:a6:95:49:02:98:5c:e3:
5a:77:a9:60:3f:be:f3:7c:72:bc:14:af:4a:93:0b:
34:33:0c:03:d2:e0:0e:5a:b7:76:69:c0:da:aa:0f:
ee:31:7f:58:b2:99:2c:31:a7:94:ac:38:c9:98:05:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:0B:F8:00:0A:5F:34:DA:34:80:EA:40:DD:0A:0D:70:34:3B:26
X509v3 Authority Key Identifier:
keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:1c:cb:90:22:d8:43:4b:75:6e:48:a2:21:da:ca:84:78:47:
41:44:84:e0:85:58:ef:08:2d:ec:58:c3:cc:40:7f:52:85:08:
03:cb:a0:80:35:1a:e7:ba:a5:3e:9c:00:9d:1a:1a:35:f0:60:
90:76:fa:05:f7:e7:b0:26:1d:83:09:cf:33:bb:12:70:39:9e:
b5:06:35:c1:83:f7:c1:9a:98:e1:38:9e:47:a7:a5:25:07:f1:
dd:31:9d:8d:e0:58:b6:97:02:ed:0a:89:44:7e:84:22:ca:c5:
78:a5:71:51:66:03:37:57:95:d2:59:16:ee:8e:ab:14:f3:e1:
9b:6b:4c:51:a1:1b:8b:96:ee:fb:5b:ff:eb:e0:e1:e0:0f:6e:
6b:01:04:d4:6c:e3:ef:4f:40:58:f4:01:da:c7:89:79:e7:f7:
23:fe:92:68:57:44:c1:0e:cc:4e:85:11:18:16:f4:53:a2:3f:
a2:81:7a:71:32:41:6e:21:90:7c:9f:4b:9d:a5:c2:ad:db:5a:
2b:d3:f1:47:ab:52:68:ee:0a:ba:f3:bd:ad:3e:13:3d:e9:57:
5c:bc:55:94:9e:e6:6f:a1:cf:6c:43:e8:6f:5b:fa:07:7b:52:
68:8b:c5:b4:43:3f:b3:cf:86:40:3e:a9:1f:37:65:ee:37:7b:
1c:8f:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:08:25 2026 by rpki-client