$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: O5obZjVtkEhZWR02tCWi2+/1lIrm8Gyb49kDL9hOFlk= Subject key identifier: 7C:9F:25:E8:B2:70:20:79:70:D3:69:3E:57:5D:0B:D4:77:C4:11:AF Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3536 Signing time: Tue 31 Mar 2026 14:28:06 +0000 Manifest this update: Tue 31 Mar 2026 14:28:06 +0000 Manifest next update: Tue 07 Apr 2026 14:28:06 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: bNYfRI5RfcWXzyirsj0qJOu3cYI0BJ1JwqRFvCPiyuk=) 2: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 3: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 5: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 6: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 7: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 8: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 9: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13665 (0x3561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Mar 31 14:28:06 2026 GMT Not After : Apr 7 14:28:06 2026 GMT Subject: CN=69cbd9f6-e758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:3f:76:1a:f6:cf:7b:45:6e:85:cc:91:8f: 9d:86:d1:b0:aa:cb:d3:d4:57:ec:6c:23:16:f9:89: 42:73:16:a8:3e:b6:0f:d7:64:ac:98:8f:20:55:85: e6:8a:3a:0d:d3:2a:6b:22:db:d0:d8:75:cf:12:78: e8:7b:96:4b:29:38:08:83:83:bb:87:28:86:fd:17: 53:79:dc:55:cc:b1:e2:e4:0a:52:26:0d:cc:2f:a6: 75:35:a7:6e:f2:c9:c1:e7:4b:3f:c2:c6:ea:e8:2f: 25:eb:a3:7a:8a:63:e2:62:88:27:99:90:1e:72:fc: 68:7d:4d:54:95:8d:e3:46:91:84:30:2b:71:e1:53: 2c:aa:70:ec:2a:4a:2d:27:e0:0c:18:a9:1d:18:44: 78:0f:f4:5a:4c:19:a4:dc:23:90:c2:75:54:c7:fd: b1:f2:b1:eb:8e:d8:9a:f9:cf:b8:07:c3:f6:f2:8b: 46:e3:07:5b:6b:d7:0c:92:4d:dd:1f:27:68:db:7e: 8b:84:23:b5:4e:43:9d:22:5d:13:ff:d6:04:a0:9c: ff:6c:7d:d5:42:fa:20:8e:c3:58:c8:04:fc:ec:17: cb:c1:b0:31:98:c4:7a:a1:55:7e:6e:1c:c3:45:97: 87:b6:8b:ec:6c:97:52:c0:4d:4e:8b:4d:d7:b9:68: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9F:25:E8:B2:70:20:79:70:D3:69:3E:57:5D:0B:D4:77:C4:11:AF X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2f:2f:fc:e5:74:46:f8:74:f8:75:ac:ec:95:be:80:f0:79: a2:e0:9d:07:b1:4b:c2:64:7f:3d:a4:b8:95:54:27:80:36:34: 94:8d:58:db:13:94:d6:45:97:94:57:f2:39:98:cc:af:4f:72: fd:f4:57:e7:71:da:7e:c8:08:a9:72:f0:31:64:3a:86:23:f0: 19:57:a5:fc:3f:d1:14:e6:50:7d:0d:fa:81:7b:b4:ce:17:31: b9:13:fd:64:d3:6f:51:a8:3d:99:49:98:5e:a8:d9:ea:05:20: d2:43:df:7b:64:11:27:e4:99:6e:53:82:51:30:9a:85:91:b8: f6:9e:b5:b8:42:fb:cf:71:52:6e:91:be:c9:b9:b4:b4:b2:0d: 3f:81:74:b8:13:91:6f:d1:d2:e4:e2:d7:19:6e:b9:b5:d3:86: a5:4c:50:70:a8:b9:2c:ce:30:dc:45:f9:05:a5:d3:76:59:cf: a6:90:71:58:9b:a0:7c:8b:19:e8:cd:91:b1:d5:4b:77:3c:8f: 5a:e6:f4:90:27:e4:35:fa:19:15:e5:ec:21:08:62:21:1d:6f: 90:30:2b:7a:89:80:ab:b8:e2:b4:7e:3e:e2:e9:e3:a8:83:93: 55:d6:53:89:ef:27:ac:9d:f1:c9:1c:cd:1a:2d:fa:b9:98:18: ff:f8:53:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMzMxMTQyODA2WhcNMjYwNDA3MTQyODA2WjAYMRYwFAYD VQQDEw02OWNiZDlmNi1lNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRo/dhr2z3tFboXMkY+dhtGwqsvT1FfsbCMW+YlCcxaoPrYP12SsmI8gVYXm ijoN0yprItvQ2HXPEnjoe5ZLKTgIg4O7hyiG/RdTedxVzLHi5ApSJg3ML6Z1Nadu 8snB50s/wsbq6C8l66N6imPiYognmZAecvxofU1UlY3jRpGEMCtx4VMsqnDsKkot J+AMGKkdGER4D/RaTBmk3COQwnVUx/2x8rHrjtia+c+4B8P28otG4wdba9cMkk3d Hydo236LhCO1TkOdIl0T/9YEoJz/bH3VQvogjsNYyAT87BfLwbAxmMR6oVV+bhzD RZeHtovsbJdSwE1Oi03XuWgSlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyfJeiy cCB5cNNpPlddC9R3xBGvMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcC8v/OV0Rvh0+HWs7JW+gPB5ouCdB7FLwmR/PaS4lVQngDY0lI1Y2xOU1kWX lFfyOZjMr09y/fRX53HafsgIqXLwMWQ6hiPwGVel/D/RFOZQfQ36gXu0zhcxuRP9 ZNNvUag9mUmYXqjZ6gUg0kPfe2QRJ+SZblOCUTCahZG49p61uEL7z3FSbpG+ybm0 tLINP4F0uBORb9HS5OLXGW65tdOGpUxQcKi5LM4w3EX5BaXTdlnPppBxWJugfIsZ 6M2RsdVLdzyPWub0kCfkNfoZFeXsIQhiIR1vkDAreomAq7jitH4+4unjqIOTVdZT ie8nrJ3xyRzNGi36uZgY//hThQ== -----END CERTIFICATE-----Generated at Tue Mar 31 22:53:37 2026 by rpki-client