$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: gdwrHt1D1ntflihWeUNLhIU+PM5nk+YYc6PVi/fpChI= Subject key identifier: 68:E7:90:05:A0:B3:53:7D:48:78:83:A2:FA:A8:E0:3C:2A:B1:DD:C2 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 03A2 Signing time: Mon 02 Mar 2026 02:40:26 +0000 Manifest this update: Mon 02 Mar 2026 02:40:25 +0000 Manifest next update: Mon 09 Mar 2026 02:40:25 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: k9URPriFa9JQsv0fKjJsOXm6AaXWDVAbJ5e+k8/RsxA=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: 026Knq2plOiwx6Tgn+z3o0GLCGWM3BV7YvB6QTBoT/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Mar 2 02:40:25 2026 GMT Not After : Mar 9 02:40:25 2026 GMT Subject: CN=69a4f89a-374d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:4f:af:09:82:2a:53:e6:92:58:b8:3d:80: e5:89:f6:03:53:5d:79:6f:27:65:0f:e3:9e:b6:5e: f4:0c:a9:a5:f2:dd:c2:b2:32:e8:a7:22:ee:d0:49: 60:e9:62:25:c8:49:ae:ef:d4:86:07:c1:12:2d:f9: 38:50:7c:e3:ce:07:11:cf:59:44:0a:c6:58:cf:f6: f5:ff:d3:76:2e:8a:20:e3:35:26:ec:45:45:68:37: 1b:94:47:29:66:1d:b7:a2:d9:15:d7:0c:86:b7:42: cb:21:10:f3:e4:50:51:ad:52:74:f1:34:fd:9c:28: b4:3d:b2:ed:65:cb:a8:33:86:e2:da:f5:1a:c7:33: 3f:a7:f7:e6:25:24:1d:e3:6d:e7:b5:d2:ce:b1:50: ee:43:19:66:76:dc:40:b7:fb:d1:d8:31:a8:2e:d8: 82:71:44:53:19:7d:83:b6:e3:b3:df:87:52:12:a4: 27:de:3d:a7:55:96:0e:c5:4d:77:c2:f3:67:48:2b: 22:09:b0:b0:a5:10:fb:58:cf:56:77:0d:af:2f:d2: 5d:41:4f:65:8c:8a:47:38:c1:a0:b8:4e:41:7d:ff: 7c:b3:68:f0:9a:70:7c:e1:c4:05:21:e1:65:45:ed: 9c:11:26:9e:8f:32:82:57:84:de:04:bb:29:ee:9b: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E7:90:05:A0:B3:53:7D:48:78:83:A2:FA:A8:E0:3C:2A:B1:DD:C2 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0c:68:f0:48:26:1f:cf:1a:88:ce:8a:e1:70:ee:42:f4:fa: 93:0e:43:d1:2d:c6:e7:fe:a6:37:9a:ae:cc:d8:a9:be:3e:f1: 51:10:89:fc:8e:8a:2d:c2:2f:97:b0:1f:05:d8:81:16:15:75: 1c:64:3d:9c:cb:31:65:6c:62:62:65:70:80:cb:c8:11:4d:64: e8:d7:2a:96:ca:40:d6:09:fd:9a:a6:0a:22:0e:53:e3:3c:66: d1:53:1e:8c:1a:81:ca:60:1b:3a:58:f1:d0:68:84:2e:88:51: 8a:ce:7c:40:01:84:60:90:c0:0c:ed:5e:9e:60:8c:0d:20:26: a4:9b:b4:b5:ea:33:a0:48:91:f5:b0:de:4d:d0:3c:52:24:e3: b7:d1:32:de:31:aa:27:b2:7f:c5:9e:9e:0c:75:5f:30:c4:c3: 9e:e8:d0:6c:8c:24:05:4c:0a:17:7d:d3:6c:f5:a0:9d:49:38: 95:75:53:11:19:9b:9d:94:45:3d:cc:24:d6:f7:7c:47:85:6b: 3f:d8:ea:71:00:6e:a4:71:80:f3:09:63:b5:59:4e:29:4f:b3: 88:6d:07:9f:c9:12:b5:48:8e:58:d6:88:90:ae:db:bc:d0:db: 69:64:85:52:64:99:7b:09:bd:b7:6f:ea:17:f1:c5:f4:16:16: 27:66:53:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjYwMzAyMDI0MDI1WhcNMjYwMzA5MDI0MDI1WjAYMRYwFAYD VQQDEw02OWE0Zjg5YS0zNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVxPrwmCKlPmkli4PYDlifYDU115bydlD+Oetl70DKml8t3CsjLopyLu0Elg 6WIlyEmu79SGB8ESLfk4UHzjzgcRz1lECsZYz/b1/9N2Loog4zUm7EVFaDcblEcp Zh23otkV1wyGt0LLIRDz5FBRrVJ08TT9nCi0PbLtZcuoM4bi2vUaxzM/p/fmJSQd 423ntdLOsVDuQxlmdtxAt/vR2DGoLtiCcURTGX2DtuOz34dSEqQn3j2nVZYOxU13 wvNnSCsiCbCwpRD7WM9Wdw2vL9JdQU9ljIpHOMGguE5Bff98s2jwmnB84cQFIeFl Re2cESaejzKCV4TeBLsp7pu1PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjnkAWg s1N9SHiDovqo4Dwqsd3CMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAwxo8EgmH88aiM6K4XDuQvT6kw5D0S3G5/6mN5quzNipvj7xURCJ/I6KLcIv l7AfBdiBFhV1HGQ9nMsxZWxiYmVwgMvIEU1k6NcqlspA1gn9mqYKIg5T4zxm0VMe jBqBymAbOljx0GiELohRis58QAGEYJDADO1enmCMDSAmpJu0teozoEiR9bDeTdA8 UiTjt9Ey3jGqJ7J/xZ6eDHVfMMTDnujQbIwkBUwKF33TbPWgnUk4lXVTERmbnZRF Pcwk1vd8R4VrP9jqcQBupHGA8wljtVlOKU+ziG0Hn8kStUiOWNaIkK7bvNDbaWSF UmSZewm9t2/qF/HF9BYWJ2ZTBQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:24:02 2026 by rpki-client