$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: VXm7zUqvG76v1Qrr88ZZ6bkij5trY0QCSfr2kErtSAI= Subject key identifier: 58:05:12:49:D4:E9:0D:E5:A1:E3:E6:D2:B2:15:49:0F:AF:C0:F0:59 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3595 Signing time: Tue 22 Sep 2026 14:28:23 +0000 Manifest this update: Tue 22 Sep 2026 14:28:23 +0000 Manifest next update: Tue 29 Sep 2026 14:28:23 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: OPD8SgiplPJaJiUSKTtcbOOm7wYn2VmsdAq64erQZ3U=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 3: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 5: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 7: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 8: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 9: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13771 (0x35cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Sep 22 14:28:23 2026 GMT Not After : Sep 29 14:28:23 2026 GMT Subject: CN=6ab29087-dc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:f7:7c:6b:65:52:c0:d9:99:e0:99:be:c3: cd:aa:e6:cf:b6:81:5e:1d:fd:25:1d:60:da:83:64: c0:98:20:08:20:a3:f5:43:79:64:62:8b:6f:9f:a0: 8c:45:97:9d:14:7f:ed:61:d8:0c:e0:3b:bb:6b:73: e7:da:9a:d6:ff:e8:2b:3c:e3:06:55:b0:65:ab:4a: 2f:89:de:98:2e:25:5c:b2:23:c4:3c:a3:7a:75:6c: 2e:2d:0b:47:de:a5:c8:f5:86:a3:2a:8c:09:89:3e: 69:6e:13:5f:4b:d1:20:d6:50:8d:fc:39:31:37:75: 0a:13:4d:87:90:28:e7:e1:67:5d:c2:5a:5e:6e:60: 50:5e:22:de:f9:9f:9a:f8:3a:f2:76:4a:86:dc:2b: 23:82:53:38:31:ef:a6:be:25:09:e6:03:af:f2:41: 2b:bc:6f:52:bd:fc:5b:26:95:37:7c:39:d9:25:34: 4a:f9:f0:1a:8d:21:60:82:af:ee:18:ea:f2:5d:a3: 04:80:82:21:4d:cd:2b:ed:d7:ac:85:b4:05:9e:e0: d8:91:bd:7c:67:25:19:6a:9a:75:8e:a4:5e:8e:b1: dd:55:27:6f:bc:51:86:7d:0c:50:a5:15:fb:b4:ce: 5b:8d:e7:44:b1:fc:0e:1b:fa:81:c5:ca:dc:63:90: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:05:12:49:D4:E9:0D:E5:A1:E3:E6:D2:B2:15:49:0F:AF:C0:F0:59 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:fd:70:0d:ee:c0:98:2e:13:33:6a:d7:c6:ad:8a:65:2b:92: 2a:97:82:23:2a:1a:c9:9b:cf:87:1c:f7:66:a1:51:e6:4f:9e: f3:8b:33:c9:4e:3c:a5:d5:5f:90:23:26:30:f3:4e:e0:a5:78: e6:22:7b:24:d4:32:e5:b5:a8:fb:10:20:c9:6d:33:80:20:42: 02:da:9b:b0:6c:64:7e:0b:47:f7:80:7d:7c:01:5e:eb:12:eb: 96:36:ca:41:68:86:5a:16:36:75:e3:01:4d:52:ef:a8:4c:d3: f9:7a:f1:20:54:00:9f:ef:e2:08:49:6e:d7:17:86:e0:08:c3: bb:f6:29:c4:35:a2:7a:3d:31:90:2e:0c:9d:eb:74:cf:93:af: 2c:01:88:fc:6f:13:a7:d0:fc:57:03:f1:a0:9f:a4:39:2b:7b: 33:e5:2e:bb:46:22:79:96:10:37:48:5f:6c:5f:0a:30:d9:38: 99:2a:fa:e5:cf:8b:64:6b:31:f9:63:17:32:78:03:b0:f2:ce: f8:22:ed:f0:67:6b:0f:cf:9b:35:a3:c1:22:46:ab:f9:1d:37: f8:78:04:ff:32:67:67:9c:8f:56:4f:22:f7:b3:57:0f:53:f8: 59:5b:c5:cf:65:0b:56:7a:66:59:0c:09:a2:9a:41:0d:86:ca: 00:1d:b7:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwOTIyMTQyODIzWhcNMjYwOTI5MTQyODIzWjAYMRYwFAYD VQQDEw02YWIyOTA4Ny1kYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfX3fGtlUsDZmeCZvsPNqubPtoFeHf0lHWDag2TAmCAIIKP1Q3lkYotvn6CM RZedFH/tYdgM4Du7a3Pn2prW/+grPOMGVbBlq0ovid6YLiVcsiPEPKN6dWwuLQtH 3qXI9YajKowJiT5pbhNfS9Eg1lCN/DkxN3UKE02HkCjn4WddwlpebmBQXiLe+Z+a +DrydkqG3CsjglM4Me+mviUJ5gOv8kErvG9SvfxbJpU3fDnZJTRK+fAajSFggq/u GOryXaMEgIIhTc0r7deshbQFnuDYkb18ZyUZapp1jqRejrHdVSdvvFGGfQxQpRX7 tM5bjedEsfwOG/qBxcrcY5C6SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgFEknU 6Q3loePm0rIVSQ+vwPBZMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMP1wDe7AmC4TM2rXxq2KZSuSKpeCIyoayZvPhxz3ZqFR5k+e84szyU48pdVf kCMmMPNO4KV45iJ7JNQy5bWo+xAgyW0zgCBCAtqbsGxkfgtH94B9fAFe6xLrljbK QWiGWhY2deMBTVLvqEzT+XrxIFQAn+/iCElu1xeG4AjDu/YpxDWiej0xkC4Mnet0 z5OvLAGI/G8Tp9D8VwPxoJ+kOSt7M+Uuu0YieZYQN0hfbF8KMNk4mSr65c+LZGsx +WMXMngDsPLO+CLt8GdrD8+bNaPBIkar+R03+HgE/zJnZ5yPVk8i97NXD1P4WVvF z2ULVnpmWQwJoppBDYbKAB23dA== -----END CERTIFICATE-----Generated at Tue Sep 22 18:02:37 2026 by rpki-client