$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: T0qmQX68IZkQkySUVYmD2znqg49itjm54wt3jkmZMfg= Subject key identifier: 5A:9A:C1:C0:A6:A6:44:7D:73:BD:9D:5F:B3:BC:F6:17:7F:62:AC:17 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 0418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 0410 Signing time: Tue 29 Sep 2026 00:29:46 +0000 Manifest this update: Tue 29 Sep 2026 00:29:46 +0000 Manifest next update: Tue 06 Oct 2026 00:29:46 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: iaOdLH01ZkmJQQ/UsAqA3SvOVh8cfZACZOujr2cny1A=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: fpRcMlKlCDYWLBuuGFtAiAF3XNUyl+/W9RNW0drMAfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 00:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Sep 29 00:29:46 2026 GMT Not After : Oct 6 00:29:46 2026 GMT Subject: CN=6abb067a-ad1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:4b:a1:80:3c:f6:ea:5a:23:2e:2f:0a:63: 73:af:94:fc:5d:de:42:69:3a:82:e6:79:40:61:da: 0d:87:91:a9:10:5d:78:1b:6f:9d:e8:5a:66:2b:22: 47:65:f5:e4:a7:3b:ab:de:6c:38:cd:af:30:2b:9e: 84:19:14:1d:da:40:66:bf:60:4d:0c:d0:2a:91:a8: 51:be:1f:a7:ac:a1:89:bd:d4:fd:85:76:2f:f6:17: 01:5e:b0:21:db:fa:fe:14:c8:ee:9b:a6:a0:7e:41: 3d:2a:62:4b:4d:ff:f9:7e:0d:97:f0:4e:45:25:ba: 50:96:ee:bd:f2:b8:c7:2a:8d:0a:f0:38:cb:4e:80: 87:5c:e3:23:bc:72:e8:02:90:f6:c4:83:fc:01:2a: de:77:08:9d:5c:1f:16:1d:ff:0c:c2:4f:2b:7a:14: cd:d6:18:7b:16:d1:29:9a:d4:d7:ef:87:6c:32:e2: 74:6b:7e:5f:da:3e:a4:e6:3e:b6:b0:4e:46:d8:0e: 3d:20:71:f2:46:03:7c:a6:f4:b5:f7:7c:2a:a4:3d: 82:1f:ef:2f:8e:37:d6:6d:d8:cc:b1:2b:87:b1:99: 87:52:a0:f4:e8:2c:4a:6a:61:4d:08:97:b0:83:e1: e9:c0:9b:39:bd:32:5f:63:b4:33:48:5c:c5:d8:8f: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9A:C1:C0:A6:A6:44:7D:73:BD:9D:5F:B3:BC:F6:17:7F:62:AC:17 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b6:c3:48:a8:1f:b5:9f:8c:cf:31:1d:83:0f:6e:30:44:8b: 94:34:9d:e0:33:af:ae:29:3c:6a:76:04:38:6b:68:07:1f:90: a9:cd:fb:fb:86:95:ee:6d:3e:05:77:29:26:4b:62:83:c5:32: fa:bf:1a:91:41:2a:82:ba:eb:a6:74:84:fd:ae:ad:f5:bb:46: a9:11:02:0f:fc:67:9a:68:be:a1:d9:a8:5a:b3:cb:63:2d:07: 1f:4c:f1:ed:60:df:c5:32:18:88:4d:6e:a7:f3:4e:a9:5e:5f: 5d:b3:da:04:10:6e:12:71:d9:df:33:cf:92:f2:4d:d9:35:e2: 0f:42:6a:ed:41:d1:37:3f:d2:85:f1:e1:92:2c:53:8d:0a:39: 4a:98:a6:dc:52:92:3e:db:8a:3d:44:8a:2e:0c:78:78:99:9c: d9:da:a7:5d:c5:a8:c7:66:a0:ae:55:bb:d3:22:66:84:f9:f3: 0e:f5:88:a6:70:0f:28:79:a1:48:1b:d3:f6:04:b8:6f:07:02: 96:b7:40:ef:6a:0e:f8:5a:27:c8:7f:5f:f3:c2:92:f7:79:90: f7:d4:44:5a:a1:0a:49:b3:80:31:25:e1:23:20:c6:7c:6d:00: 1e:7d:56:57:47:89:05:f8:29:cd:0c:db:29:e1:50:8d:91:8f: 25:6e:f3:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjYwOTI5MDAyOTQ2WhcNMjYxMDA2MDAyOTQ2WjAYMRYwFAYD VQQDEw02YWJiMDY3YS1hZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ5LoYA89upaIy4vCmNzr5T8Xd5CaTqC5nlAYdoNh5GpEF14G2+d6FpmKyJH ZfXkpzur3mw4za8wK56EGRQd2kBmv2BNDNAqkahRvh+nrKGJvdT9hXYv9hcBXrAh 2/r+FMjum6agfkE9KmJLTf/5fg2X8E5FJbpQlu698rjHKo0K8DjLToCHXOMjvHLo ApD2xIP8ASredwidXB8WHf8Mwk8rehTN1hh7FtEpmtTX74dsMuJ0a35f2j6k5j62 sE5G2A49IHHyRgN8pvS193wqpD2CH+8vjjfWbdjMsSuHsZmHUqD06CxKamFNCJew g+HpwJs5vTJfY7QzSFzF2I9mXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqawcCm pkR9c72dX7O89hd/YqwXMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm7bDSKgftZ+MzzEdgw9uMESLlDSd4DOvrik8anYEOGtoBx+Qqc37+4aV7m0+ BXcpJktig8Uy+r8akUEqgrrrpnSE/a6t9btGqRECD/xnmmi+odmoWrPLYy0HH0zx 7WDfxTIYiE1up/NOqV5fXbPaBBBuEnHZ3zPPkvJN2TXiD0Jq7UHRNz/ShfHhkixT jQo5Spim3FKSPtuKPUSKLgx4eJmc2dqnXcWox2agrlW70yJmhPnzDvWIpnAPKHmh SBvT9gS4bwcClrdA72oO+FonyH9f88KS93mQ99REWqEKSbOAMSXhIyDGfG0AHn1W V0eJBfgpzQzbKeFQjZGPJW7zcw== -----END CERTIFICATE-----Generated at Tue Sep 29 15:42:25 2026 by rpki-client