
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json)
Hash identifier: Jbj2tUxyWaIbYo9mOqLwuIzOYZd34qze70tkzQcaAJo=
Subject key identifier: E6:9E:7B:58:5D:A5:D4:F9:E1:13:1A:88:A7:82:EE:52:64:EA:ED:85
Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F
Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
Certificate serial: 03C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
Manifest number: 03BA
Signing time: Fri 17 Apr 2026 00:33:55 +0000
Manifest this update: Fri 17 Apr 2026 00:33:55 +0000
Manifest next update: Fri 24 Apr 2026 00:33:55 +0000
Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: uqX3t7y7+1cGoX77n3ME284w6ArBOYCnuysw0nU03Ug=)
2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: 026Knq2plOiwx6Tgn+z3o0GLCGWM3BV7YvB6QTBoT/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl
rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961 (0x3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F
Validity
Not Before: Apr 17 00:33:55 2026 GMT
Not After : Apr 24 00:33:55 2026 GMT
Subject: CN=69e17ff3-290c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:43:b9:99:6b:1b:4d:97:1f:91:cd:b3:d9:
78:08:11:a5:b0:08:b3:cb:38:6b:43:a0:48:3b:78:
47:23:8c:4b:c2:93:79:b9:93:2a:f9:6c:c2:9e:4a:
4a:62:16:f2:5a:12:ac:c2:db:f9:c1:80:37:11:97:
8e:1b:ab:5f:26:71:c4:6d:80:c0:d5:d4:d4:09:25:
e7:0f:4f:98:e9:11:9e:75:db:16:2e:44:f7:2c:99:
30:21:ea:8d:89:34:ac:48:61:f6:23:5b:bf:b8:d3:
e1:12:e6:13:fb:4b:3a:c6:36:46:b6:79:b3:ae:be:
fd:fe:2f:dd:fd:da:3c:d9:ab:5c:ab:b3:40:fc:1f:
b4:89:ae:94:70:07:5c:46:15:44:4a:60:31:bb:ee:
05:f2:81:85:fd:48:e5:c3:da:86:9b:99:a0:bc:0c:
0f:f4:2a:04:4a:01:33:77:c8:fa:1a:12:07:aa:b7:
3a:42:93:8a:bd:01:79:bd:5e:6d:d3:7b:fe:7e:9d:
1a:ad:25:59:06:7a:95:b1:14:1c:18:95:f9:03:68:
b6:af:de:f6:da:ca:3b:db:86:a3:e3:71:19:55:78:
10:40:9d:71:4f:90:53:83:d9:b8:dc:1c:31:50:83:
3e:98:fb:9b:29:e6:ef:2f:b1:fc:04:6e:44:a2:b6:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9E:7B:58:5D:A5:D4:F9:E1:13:1A:88:A7:82:EE:52:64:EA:ED:85
X509v3 Authority Key Identifier:
keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:f0:91:4b:98:fe:45:0e:fe:c4:5c:33:e5:2e:a8:bb:21:ae:
51:88:15:de:db:96:65:cc:23:7d:c8:5e:6e:3a:4b:4a:87:18:
5d:d8:61:6c:93:91:9f:1f:2b:98:1e:cd:a0:38:df:f1:33:26:
26:f8:a2:a3:54:20:56:33:62:0d:ef:34:22:23:dc:db:a3:03:
58:c8:8c:62:ea:dd:aa:51:92:5a:91:9b:4e:55:62:ae:5e:cd:
b9:7e:92:e8:22:5b:8e:03:99:10:e9:33:58:4b:1c:1b:f7:53:
5c:56:94:c1:e7:5b:a1:04:f8:4a:1b:b8:b8:fa:c0:ee:d5:e1:
ba:ba:47:55:f5:aa:de:a8:04:bf:07:fe:73:00:d0:f2:ff:86:
b9:c3:82:dc:78:aa:46:2e:17:f4:7d:60:51:31:d5:5d:ba:19:
7e:e3:ba:40:fa:33:f4:e2:ba:56:08:58:3d:a0:94:f5:87:15:
1b:d1:88:ee:6e:40:1f:c5:99:48:2f:c1:55:30:66:63:2f:40:
d1:02:80:d1:88:cd:e9:35:ab:c4:48:33:11:ab:5f:a2:00:22:
11:fd:a1:03:91:03:35:2b:f9:77:57:c8:8c:83:ae:51:ab:66:
a9:96:d6:1a:49:90:f4:28:21:ee:f9:63:cf:bf:89:dd:cb:c0:
9f:51:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:40 2026 by rpki-client