$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: KoX45/rIJA0X4NkiSjAC/rKkYhh7oDb8xYv85rw7mU0= Subject key identifier: 83:52:8A:A3:A0:BA:E5:E0:43:21:93:65:3C:69:F8:54:A0:91:DE:39 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3546 Signing time: Sat 02 May 2026 14:28:40 +0000 Manifest this update: Sat 02 May 2026 14:28:40 +0000 Manifest next update: Sat 09 May 2026 14:28:40 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: tTg9YjDenGxGSCS8hOn03IDttkK3I/0w8UL2Yc+LMTM=) 2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 6: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 7: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 9: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 14:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: May 2 14:28:40 2026 GMT Not After : May 9 14:28:40 2026 GMT Subject: CN=69f60a18-a302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:d7:bf:b6:cc:55:b9:6b:93:46:39:0e:1e: cf:fd:c4:7a:6d:74:94:d0:f9:b4:cb:d9:ea:8f:f7: f2:94:41:24:a6:1f:b4:d3:c5:19:73:be:3f:72:4a: fd:04:65:c2:12:b6:ab:d1:c7:d2:7a:00:76:33:69: 3f:6d:e1:43:01:b6:06:7c:73:9f:78:52:e3:40:cb: 46:2e:7f:78:db:42:28:b7:26:ca:5b:69:4b:86:1e: 14:0a:81:95:73:d1:f8:00:4a:6c:ec:b0:69:c4:21: f1:22:7e:32:6c:5a:3a:e2:a1:2d:1d:28:0b:b6:e5: 03:4b:0e:a6:6b:68:da:53:9c:6e:66:f7:d3:3b:b1: d3:01:95:5f:be:ab:84:c5:e4:f5:0e:65:52:eb:8f: c0:cc:1a:bd:40:f5:cc:4e:41:b7:2e:e1:28:3c:73: 7b:08:d9:75:d4:79:f0:50:e9:9f:05:09:14:ed:28: 25:3d:95:b4:1e:64:b3:63:85:28:c5:22:19:cd:d6: 4b:7d:2c:3b:24:07:d0:f3:cb:27:2c:54:4e:5e:2b: b4:bb:a9:9a:fa:fa:73:d6:f2:ac:4e:a9:26:0e:00: 11:13:80:8c:5c:0a:c5:0a:a5:e1:37:c5:52:ab:7f: 8d:61:24:51:2a:5b:d3:13:bd:96:9c:d9:6e:52:aa: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:52:8A:A3:A0:BA:E5:E0:43:21:93:65:3C:69:F8:54:A0:91:DE:39 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:99:a4:2c:79:74:1b:14:b7:3a:39:f3:fa:8c:f2:6f:23:fb: 01:28:90:ee:4e:38:e0:4f:e0:db:46:2b:0a:01:4e:4b:66:7e: d7:04:0a:63:37:ed:30:5a:f5:70:30:a0:70:31:da:d9:94:60: 7a:a1:ec:ec:72:a3:ee:36:95:3f:ed:c5:61:11:b0:8c:21:c2: 9f:db:37:cf:3e:18:c2:88:fe:76:66:35:bf:a7:4a:66:b2:2e: 44:a9:c5:fa:c1:0f:aa:91:d9:c8:48:fe:a5:5d:f6:66:75:aa: 38:1e:de:92:c2:a7:23:cd:7b:1c:09:c0:c1:01:fd:23:68:85: c0:e9:3a:1b:ed:db:32:5c:3f:c8:6a:79:41:8f:66:be:4f:1a: 96:83:07:b5:88:76:3b:bb:4c:7c:bd:a9:ba:51:f9:56:6e:e3: 69:86:91:50:df:fd:19:3a:81:4e:6f:3c:61:3a:bb:07:a6:6e: 27:5e:ae:2f:73:e8:4f:ec:3f:39:d4:97:5c:ee:4f:92:f5:f5: fd:13:de:d1:67:39:13:89:9b:4b:3a:62:74:12:25:39:b9:b6: 5f:cc:02:b6:51:cd:2c:e9:01:c5:f8:05:3d:3d:49:4c:fb:d6: c2:e1:48:a1:d2:fa:a3:0f:b2:48:c7:a5:0a:ef:da:7b:19:5d: 8e:96:ae:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNTAyMTQyODQwWhcNMjYwNTA5MTQyODQwWjAYMRYwFAYD VQQDEw02OWY2MGExOC1hMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2fXv7bMVblrk0Y5Dh7P/cR6bXSU0Pm0y9nqj/fylEEkph+008UZc74/ckr9 BGXCErar0cfSegB2M2k/beFDAbYGfHOfeFLjQMtGLn9420IotybKW2lLhh4UCoGV c9H4AEps7LBpxCHxIn4ybFo64qEtHSgLtuUDSw6ma2jaU5xuZvfTO7HTAZVfvquE xeT1DmVS64/AzBq9QPXMTkG3LuEoPHN7CNl11HnwUOmfBQkU7SglPZW0HmSzY4Uo xSIZzdZLfSw7JAfQ88snLFROXiu0u6ma+vpz1vKsTqkmDgARE4CMXArFCqXhN8VS q3+NYSRRKlvTE72WnNluUqrbHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINSiqOg uuXgQyGTZTxp+FSgkd45MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABJmkLHl0GxS3Ojnz+ozybyP7ASiQ7k444E/g20YrCgFOS2Z+1wQKYzftMFr1 cDCgcDHa2ZRgeqHs7HKj7jaVP+3FYRGwjCHCn9s3zz4Ywoj+dmY1v6dKZrIuRKnF +sEPqpHZyEj+pV32ZnWqOB7eksKnI817HAnAwQH9I2iFwOk6G+3bMlw/yGp5QY9m vk8aloMHtYh2O7tMfL2pulH5Vm7jaYaRUN/9GTqBTm88YTq7B6ZuJ16uL3PoT+w/ OdSXXO5PkvX1/RPe0Wc5E4mbSzpidBIlObm2X8wCtlHNLOkBxfgFPT1JTPvWwuFI odL6ow+ySMelCu/aexldjpau4w== -----END CERTIFICATE-----Generated at Mon May 4 01:57:56 2026 by rpki-client