$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: YDw0pz7wBhc1oc1Z/hIrBPDjUPo0nP7aht0MFqO/yl8= Subject key identifier: 61:68:F2:3C:17:C8:07:AF:FB:96:C2:2E:B2:6B:39:78:73:ED:42:34 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 03B4 Signing time: Sun 05 Apr 2026 00:27:03 +0000 Manifest this update: Sun 05 Apr 2026 00:27:02 +0000 Manifest next update: Sun 12 Apr 2026 00:27:02 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: ZBeYQouMG5eB0f++bpdiLDYPswrhpJlGDDL22ymSYzQ=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: 026Knq2plOiwx6Tgn+z3o0GLCGWM3BV7YvB6QTBoT/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Apr 5 00:27:02 2026 GMT Not After : Apr 12 00:27:02 2026 GMT Subject: CN=69d1ac57-d4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:46:08:89:04:9d:11:4a:81:97:42:ff:25: 12:49:01:02:fe:9b:46:6a:c5:6a:dd:17:8d:d0:61: 9e:dd:0c:91:8b:27:62:22:0c:6d:81:5a:3d:65:1d: 77:c9:d9:7a:82:b6:38:b7:c1:a0:1f:bd:ae:fc:cb: 0f:85:a5:90:04:92:be:ac:d4:21:2b:62:40:ee:89: f1:92:68:e9:1b:34:81:fc:d5:f3:d8:3b:23:f4:60: 30:1a:a8:70:9d:d6:a6:22:bf:a4:d5:66:8b:d8:7e: 97:e1:08:43:86:a3:6e:09:9e:05:e3:a1:56:0f:0e: 69:28:fb:35:08:90:16:86:18:3c:5c:47:ee:9b:ed: 10:7f:65:a8:b7:3c:66:de:3a:43:47:5f:75:89:59: 98:83:27:ac:7c:a6:cb:36:f8:62:cc:38:0d:18:66: b3:53:b3:da:69:e0:a4:21:01:07:83:1e:32:49:d9: e8:ca:03:73:1f:b0:19:1e:92:d5:24:81:73:f7:d3: fa:e8:99:5c:0f:2b:f6:7a:c1:6d:c2:9a:69:65:8c: 85:ff:04:2e:6d:25:c0:55:de:6c:ee:13:69:05:1c: 84:3d:13:5a:ed:ea:a4:ae:70:f6:bb:47:6d:f0:86: 5e:24:8b:d4:73:3a:1f:89:6d:6c:98:05:a1:ba:ba: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:68:F2:3C:17:C8:07:AF:FB:96:C2:2E:B2:6B:39:78:73:ED:42:34 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e4:37:a7:e8:da:2e:e1:fc:5f:d8:63:26:d0:ce:bd:a2:81: f2:57:3b:b3:55:36:53:76:5a:aa:15:1b:c6:45:4f:21:2d:36: 7f:97:bc:f3:b7:9d:ae:f6:f8:e4:9e:b8:6c:60:70:ed:0a:1a: 42:36:13:fd:84:0b:25:f4:ad:3f:e1:d6:3d:8f:19:09:b0:d7: ab:e9:ed:0d:73:a7:24:29:d8:17:8e:96:b8:6d:d7:08:5e:f4: dd:2c:72:a3:c8:86:86:40:a3:ab:59:4a:65:2a:54:b7:f2:b6: 3d:c0:61:46:37:1e:d7:8d:eb:76:3d:a0:fa:6d:4a:52:1b:32: ae:bd:d6:a6:9a:c1:51:a9:b9:f1:de:93:68:b8:e4:e5:cb:e0: 7c:1f:23:5e:a1:ff:4c:46:85:90:66:6e:16:35:3c:ac:31:1f: 7e:4d:b4:7c:2a:28:b6:99:84:03:1a:b6:77:a6:01:e2:42:f4: 30:f3:53:d0:a6:df:6d:b1:94:b9:27:a1:3d:da:d0:a0:87:1a: e6:a7:0a:c1:53:f5:fa:d3:72:97:34:c0:62:9d:f3:d4:5d:66: d3:02:09:81:88:a5:48:aa:09:93:36:c6:3a:ca:94:51:e1:21: ab:55:2c:2b:c7:0a:3e:e1:08:ed:44:be:e0:c4:2c:8d:56:f8: 17:18:f4:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjYwNDA1MDAyNzAyWhcNMjYwNDEyMDAyNzAyWjAYMRYwFAYD VQQDEw02OWQxYWM1Ny1kNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQlGCIkEnRFKgZdC/yUSSQEC/ptGasVq3ReN0GGe3QyRiydiIgxtgVo9ZR13 ydl6grY4t8GgH72u/MsPhaWQBJK+rNQhK2JA7onxkmjpGzSB/NXz2Dsj9GAwGqhw ndamIr+k1WaL2H6X4QhDhqNuCZ4F46FWDw5pKPs1CJAWhhg8XEfum+0Qf2Wotzxm 3jpDR191iVmYgyesfKbLNvhizDgNGGazU7PaaeCkIQEHgx4ySdnoygNzH7AZHpLV JIFz99P66JlcDyv2esFtwpppZYyF/wQubSXAVd5s7hNpBRyEPRNa7eqkrnD2u0dt 8IZeJIvUczofiW1smAWhurrUFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFo8jwX yAev+5bCLrJrOXhz7UI0MB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATOQ3p+jaLuH8X9hjJtDOvaKB8lc7s1U2U3ZaqhUbxkVPIS02f5e887edrvb4 5J64bGBw7QoaQjYT/YQLJfStP+HWPY8ZCbDXq+ntDXOnJCnYF46WuG3XCF703Sxy o8iGhkCjq1lKZSpUt/K2PcBhRjce143rdj2g+m1KUhsyrr3WpprBUam58d6TaLjk 5cvgfB8jXqH/TEaFkGZuFjU8rDEffk20fCootpmEAxq2d6YB4kL0MPNT0KbfbbGU uSehPdrQoIca5qcKwVP1+tNylzTAYp3z1F1m0wIJgYilSKoJkzbGOsqUUeEhq1Us K8cKPuEI7US+4MQsjVb4Fxj0UQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:02 2026 by rpki-client