$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: CsWUIenWe4w4FBR3ai8UO93JxzIzg0dAlaEe24UjWLE= Subject key identifier: EF:DE:A5:70:AC:46:66:6C:3A:A1:DA:EE:6E:50:46:E4:BF:8E:AB:B2 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 35A9 Signing time: Sat 31 Oct 2026 14:28:25 +0000 Manifest this update: Sat 31 Oct 2026 14:28:25 +0000 Manifest next update: Sat 07 Nov 2026 14:28:25 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 1unvNspv6zb6+hW6dVzg5o70Jchiafk/mYdDQr/NHnQ=) 2: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 3: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 4: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 7: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 8: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 9: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 14:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13791 (0x35df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Oct 31 14:28:25 2026 GMT Not After : Nov 7 14:28:25 2026 GMT Subject: CN=6ae5fb09-0471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:49:e7:10:33:61:58:37:b7:0b:e4:5f:89:16: 15:4d:af:a3:d3:26:fb:f4:6e:9b:99:9a:cb:73:de: b4:c7:bf:e6:d1:26:7a:21:63:45:3a:6a:b2:3c:46: 43:44:b2:13:c4:09:53:27:0c:36:9d:60:9e:fd:a5: 34:a6:22:44:21:57:75:3f:90:8e:cd:5b:0a:33:5e: b7:73:01:b8:08:31:f4:64:1f:53:9d:46:da:2c:ee: 60:0b:97:2d:f6:6e:52:10:b3:36:7a:1d:8b:46:67: 91:91:8a:fe:10:e6:e3:4d:31:db:32:74:6a:d8:a0: dd:8f:82:1a:fe:89:95:32:89:e8:e8:0f:9a:d9:b4: 60:37:93:77:51:a5:c5:92:79:7c:38:ac:d7:e1:15: 40:20:f4:07:44:dd:a2:ac:a1:0e:9c:64:01:57:72: 82:d2:25:7a:47:9d:6f:06:2c:b4:2a:8a:6e:8c:e8: 3e:ce:06:fc:59:b2:2b:1e:9a:cd:a4:68:42:e7:f2: 69:8e:5a:76:d9:42:c0:7b:e3:0e:b4:93:e4:4f:d0: f1:38:e4:73:6f:3c:57:63:c0:ce:d0:92:a7:82:45: a6:72:fc:6f:ad:d8:e8:34:65:e7:df:0f:ef:14:fb: 84:9d:d2:2a:a6:1e:ae:c4:5a:ea:6a:f7:2f:84:ba: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:A5:70:AC:46:66:6C:3A:A1:DA:EE:6E:50:46:E4:BF:8E:AB:B2 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e1:db:d3:09:bb:53:3a:b0:53:37:24:b2:7e:67:d4:09:dc: 19:fb:91:00:8c:db:8c:3c:e1:e5:00:21:5d:7e:4f:57:2b:52: 51:b4:9e:53:d7:22:ab:02:a0:67:87:27:95:bb:d2:fb:e0:3c: 7f:c6:1e:10:3a:9a:33:8e:a3:21:c5:45:13:e4:75:31:92:a4: b4:b0:90:d7:17:82:76:cb:be:c4:58:35:5b:de:c3:59:21:0c: 5b:71:c5:4d:52:22:b9:96:5c:07:b5:5c:e4:e3:2f:44:67:99: 09:70:60:63:e4:7b:5f:49:a7:66:66:33:bf:9e:0e:90:39:9e: a8:be:0d:30:5b:8b:a4:cc:c9:8d:cb:73:cc:52:d8:b0:65:3a: a1:d5:69:f9:85:36:99:80:ca:0c:61:43:73:e5:56:c7:03:44: b5:ae:b9:9c:23:f9:f5:09:ed:d3:4b:f5:79:a1:f7:34:05:09: e0:33:3c:34:74:df:57:0b:79:9e:e8:49:b7:dd:25:14:69:b3: 45:3f:6a:23:71:d7:39:1e:41:8b:9d:87:88:1c:5f:7f:0a:e8: 9a:3a:0b:34:4e:e5:09:30:ad:ee:61:fa:e2:00:cd:b8:d4:47: f0:ec:bf:fb:51:bd:6e:54:b5:93:eb:6e:14:c7:2b:ca:df:36: 14:5b:73:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYxMDMxMTQyODI1WhcNMjYxMTA3MTQyODI1WjAYMRYwFAYD VQQDEw02YWU1ZmIwOS0wNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6knnEDNhWDe3C+RfiRYVTa+j0yb79G6bmZrLc960x7/m0SZ6IWNFOmqyPEZD RLITxAlTJww2nWCe/aU0piJEIVd1P5COzVsKM163cwG4CDH0ZB9TnUbaLO5gC5ct 9m5SELM2eh2LRmeRkYr+EObjTTHbMnRq2KDdj4Ia/omVMono6A+a2bRgN5N3UaXF knl8OKzX4RVAIPQHRN2irKEOnGQBV3KC0iV6R51vBiy0KopujOg+zgb8WbIrHprN pGhC5/Jpjlp22ULAe+MOtJPkT9DxOORzbzxXY8DO0JKngkWmcvxvrdjoNGXn3w/v FPuEndIqph6uxFrqavcvhLoqqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/epXCs RmZsOqHa7m5QRuS/jquyMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVeHb0wm7UzqwUzcksn5n1AncGfuRAIzbjDzh5QAhXX5PVytSUbSeU9ciqwKg Z4cnlbvS++A8f8YeEDqaM46jIcVFE+R1MZKktLCQ1xeCdsu+xFg1W97DWSEMW3HF TVIiuZZcB7Vc5OMvRGeZCXBgY+R7X0mnZmYzv54OkDmeqL4NMFuLpMzJjctzzFLY sGU6odVp+YU2mYDKDGFDc+VWxwNEta65nCP59Qnt00v1eaH3NAUJ4DM8NHTfVwt5 nuhJt90lFGmzRT9qI3HXOR5Bi52HiBxffwromjoLNE7lCTCt7mH64gDNuNRH8Oy/ +1G9blS1k+tuFMcryt82FFtzMg== -----END CERTIFICATE-----Generated at Mon Nov 2 12:45:34 2026 by rpki-client