$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: 0fApqJJFUYeE6/7+ReO53jpBjr/Fmjfkt2ITeZCsgEw= Subject key identifier: 5C:6C:01:1E:05:B5:33:BD:58:AF:52:27:8E:D1:F9:37:0E:7C:66:D2 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 358A Signing time: Mon 31 Aug 2026 14:28:11 +0000 Manifest this update: Mon 31 Aug 2026 14:28:11 +0000 Manifest next update: Mon 07 Sep 2026 14:28:11 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: s48HE1FiUqha95aqZ3/kzr1XQrGSIAuA/MQUb8mzxk4=) 2: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 4: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 6: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 7: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 9: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 14:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13760 (0x35c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 31 14:28:11 2026 GMT Not After : Sep 7 14:28:11 2026 GMT Subject: CN=6a958f7b-7422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:38:be:b4:a9:30:7a:68:ec:cf:3d:eb:f5: bf:8c:0c:f2:ed:9c:a9:fb:e8:41:2d:2e:0c:fc:ff: 67:b1:bd:84:0d:e1:ee:a7:16:44:cb:3e:ae:39:cf: 43:f6:93:4f:d6:de:9d:d1:7c:71:e3:c8:32:07:01: a5:ff:9a:f0:fd:f9:ac:17:fd:1b:09:85:e1:77:41: f1:03:cd:4e:5d:f9:f9:99:7e:60:8b:a6:02:46:6c: 66:56:37:b4:b4:1b:0d:b6:af:cf:f0:ae:6f:db:9f: 0c:3f:cb:cc:c7:84:ba:06:f0:5b:eb:fa:c3:a8:08: c2:f0:45:5c:78:4a:95:df:2e:ab:0f:36:c6:f7:e6: 13:5a:7f:4d:de:a2:68:38:b0:02:cc:ed:9f:72:a4: 4e:1e:90:85:b7:2d:a7:ac:f5:b8:08:b1:c4:ab:25: e6:5f:b6:27:21:0a:4b:24:30:1f:4d:a6:43:9e:dc: 39:18:34:06:67:ab:01:bb:cc:03:a7:22:69:c8:7e: ef:42:0f:d6:37:55:9d:52:c9:c4:85:64:e6:a0:ee: 03:55:50:6c:94:b9:6e:de:1b:35:ad:6d:54:62:72: ad:fe:f9:aa:da:f8:19:95:8c:f0:36:04:e8:cd:2f: 4b:db:9e:11:31:ec:4f:b4:e1:a8:b6:9c:29:a6:dc: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6C:01:1E:05:B5:33:BD:58:AF:52:27:8E:D1:F9:37:0E:7C:66:D2 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:64:a5:20:1f:20:6f:c1:1d:27:96:f3:a1:53:a2:e0:af:4e: 39:5e:e0:7b:96:da:e9:60:32:b4:a4:ba:2d:94:2e:7c:b6:8f: 44:03:09:e1:74:50:ea:ee:71:ff:39:44:13:66:44:97:76:2e: 1c:9a:3b:57:4b:38:13:e7:6a:f4:ec:89:ca:92:8f:bc:23:1d: 7b:51:42:f5:62:69:4d:96:56:17:1d:47:ef:33:e3:6c:01:d5: c6:96:62:cf:29:f5:b9:7e:99:a2:7c:06:5d:29:dc:7c:ed:b6: e4:0b:18:c4:2d:d8:60:ae:93:b3:11:17:85:2b:6d:e5:1b:40: c1:73:da:80:86:89:77:30:e4:4c:72:d3:79:5e:2a:1a:8d:2a: a7:bf:01:80:a6:bb:52:47:b8:5c:39:41:f5:8e:6a:28:91:59: a6:0b:b7:b4:ad:25:04:26:8c:46:81:75:30:e8:0a:82:6c:8e: ab:56:3e:85:bc:e6:98:4f:de:25:14:95:b3:f8:ef:c6:1b:8e: b1:29:3f:4c:b8:0c:dd:75:ec:f5:2a:ef:34:98:4c:a1:c1:12: 79:92:ae:3f:17:25:74:21:32:be:6c:b5:02:77:f1:f7:c2:34: c9:76:04:90:8e:1c:b3:b3:10:5b:41:f2:1a:12:12:6d:1b:b7: f1:fd:2f:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwODMxMTQyODExWhcNMjYwOTA3MTQyODExWjAYMRYwFAYD VQQDEw02YTk1OGY3Yi03NDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQY4vrSpMHpo7M896/W/jAzy7Zyp++hBLS4M/P9nsb2EDeHupxZEyz6uOc9D 9pNP1t6d0Xxx48gyBwGl/5rw/fmsF/0bCYXhd0HxA81OXfn5mX5gi6YCRmxmVje0 tBsNtq/P8K5v258MP8vMx4S6BvBb6/rDqAjC8EVceEqV3y6rDzbG9+YTWn9N3qJo OLACzO2fcqROHpCFty2nrPW4CLHEqyXmX7YnIQpLJDAfTaZDntw5GDQGZ6sBu8wD pyJpyH7vQg/WN1WdUsnEhWTmoO4DVVBslLlu3hs1rW1UYnKt/vmq2vgZlYzwNgTo zS9L254RMexPtOGotpwpptxKLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxsAR4F tTO9WK9SJ47R+TcOfGbSMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIWSlIB8gb8EdJ5bzoVOi4K9OOV7ge5ba6WAytKS6LZQufLaPRAMJ4XRQ6u5x /zlEE2ZEl3YuHJo7V0s4E+dq9OyJypKPvCMde1FC9WJpTZZWFx1H7zPjbAHVxpZi zyn1uX6ZonwGXSncfO225AsYxC3YYK6TsxEXhStt5RtAwXPagIaJdzDkTHLTeV4q Go0qp78BgKa7Uke4XDlB9Y5qKJFZpgu3tK0lBCaMRoF1MOgKgmyOq1Y+hbzmmE/e JRSVs/jvxhuOsSk/TLgM3XXs9SrvNJhMocESeZKuPxcldCEyvmy1Anfx98I0yXYE kI4cs7MQW0HyGhISbRu38f0vDQ== -----END CERTIFICATE-----Generated at Mon Aug 31 17:26:28 2026 by rpki-client