$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: LGHukswY10UKKsyHRdLea9slAOZU/HO8mZziv40ajAw= Subject key identifier: 4D:7A:04:DB:EB:B4:35:EA:92:58:7B:42:70:FE:06:DE:32:91:91:E8 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 352B Signing time: Tue 10 Mar 2026 14:28:10 +0000 Manifest this update: Tue 10 Mar 2026 14:28:09 +0000 Manifest next update: Tue 17 Mar 2026 14:28:09 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: EmrUk1YYnBOYwseW+AEW7jb6CJBEn2yM28P2dxjQ3yM=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 9: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 14:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13654 (0x3556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Mar 10 14:28:09 2026 GMT Not After : Mar 17 14:28:09 2026 GMT Subject: CN=69b02a7a-08ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:bc:a7:28:c5:bb:22:e1:eb:45:a3:02:a5: a5:fd:a6:3b:9b:b9:8f:2e:f1:d8:a5:ac:fa:df:c6: 6c:86:5b:f7:b7:fb:a5:0a:06:60:de:19:65:97:e1: a7:7a:60:2c:1b:0c:c8:88:7a:09:86:ec:6b:a8:2f: ae:26:c7:59:09:d1:0f:ca:8b:a3:95:e1:cb:e4:0c: c8:53:6c:a8:59:83:b7:30:30:0f:a2:f9:22:72:54: 20:ec:ce:bf:05:12:20:ed:de:3f:9e:2b:eb:91:2e: a6:84:20:87:28:f8:52:b9:fa:3b:d2:94:9e:c9:e5: 42:d4:fb:dd:46:ae:f9:21:2e:b3:55:3c:87:16:7a: 75:07:39:5f:70:17:84:fc:2e:2d:cf:35:cb:53:d4: 9b:16:40:0c:aa:74:a7:c9:8b:1a:13:f3:c1:9d:e7: 39:ea:f4:98:24:12:08:5e:97:66:28:05:30:3e:b0: e6:3e:ad:87:75:5b:7c:34:95:04:46:d7:14:65:73: 80:d7:d7:0b:72:83:25:fd:fa:10:7e:56:39:26:b9: 3d:f3:53:5e:89:02:16:61:b7:99:f1:ff:00:b7:c9: 12:d7:44:1c:bd:94:38:d4:a8:76:f2:d2:ca:5b:6b: 33:7c:79:13:b2:54:8d:00:77:31:70:13:cc:c5:0f: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7A:04:DB:EB:B4:35:EA:92:58:7B:42:70:FE:06:DE:32:91:91:E8 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:db:8a:d7:87:69:96:88:d1:0a:56:bd:77:1e:a6:19:a0: 0b:cb:b2:c5:8a:07:cc:9a:9e:88:fe:15:4c:c8:18:8c:43:0b: 05:ac:ae:f1:1f:e9:94:aa:b4:e3:b3:07:ce:b1:4f:13:5e:8c: 13:88:67:d9:58:e2:00:51:3a:d9:17:eb:6f:c7:cd:8e:88:a3: 0d:99:f6:b5:4a:11:97:a3:9d:f9:cb:9d:92:b5:08:5f:c3:a4: cd:a4:4d:ca:e7:31:fc:39:fe:df:da:a1:b9:52:88:3e:99:c4: 19:f4:b6:29:24:ba:37:c7:0b:fe:d2:1e:3f:f9:0f:8f:38:a5: a3:c4:2e:c4:82:2c:ef:ef:8c:f6:7e:1e:2b:1f:a9:c1:0e:e4: 91:97:90:38:ac:a1:60:de:ea:53:81:67:22:e3:38:da:8e:d3: 17:26:12:1a:cf:96:29:56:29:6a:16:99:ed:d2:d5:c8:8a:65: 85:63:30:b3:6f:aa:04:04:e0:1b:4f:df:3d:f0:73:f4:c1:64: 90:e0:be:4c:6b:43:7e:f3:7f:e1:73:a1:c5:57:7d:21:c8:61: a8:11:10:eb:a3:53:24:53:81:74:50:b7:07:10:e8:46:fa:23: 26:55:60:89:17:4a:17:5c:c3:96:af:70:d3:e7:54:67:d5:f8: 9b:96:71:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMzEwMTQyODA5WhcNMjYwMzE3MTQyODA5WjAYMRYwFAYD VQQDEw02OWIwMmE3YS0wOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxym8pyjFuyLh60WjAqWl/aY7m7mPLvHYpaz638Zshlv3t/ulCgZg3hlll+Gn emAsGwzIiHoJhuxrqC+uJsdZCdEPyoujleHL5AzIU2yoWYO3MDAPovkiclQg7M6/ BRIg7d4/nivrkS6mhCCHKPhSufo70pSeyeVC1PvdRq75IS6zVTyHFnp1BzlfcBeE /C4tzzXLU9SbFkAMqnSnyYsaE/PBnec56vSYJBIIXpdmKAUwPrDmPq2HdVt8NJUE RtcUZXOA19cLcoMl/foQflY5Jrk981NeiQIWYbeZ8f8At8kS10QcvZQ41Kh28tLK W2szfHkTslSNAHcxcBPMxQ+y4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE16BNvr tDXqklh7QnD+Bt4ykZHoMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmtbbiteHaZaI0QpWvXcephmgC8uyxYoHzJqeiP4VTMgYjEMLBayu8R/plKq0 47MHzrFPE16ME4hn2VjiAFE62Rfrb8fNjoijDZn2tUoRl6Od+cudkrUIX8OkzaRN yucx/Dn+39qhuVKIPpnEGfS2KSS6N8cL/tIeP/kPjzilo8QuxIIs7++M9n4eKx+p wQ7kkZeQOKyhYN7qU4FnIuM42o7TFyYSGs+WKVYpahaZ7dLVyIplhWMws2+qBATg G0/fPfBz9MFkkOC+TGtDfvN/4XOhxVd9IchhqBEQ66NTJFOBdFC3BxDoRvojJlVg iRdKF1zDlq9w0+dUZ9X4m5Zx4Q== -----END CERTIFICATE-----Generated at Tue Mar 10 21:57:09 2026 by rpki-client