$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: nunWM2+lrXDHzWX2+RALijH6mdMuN46lymhX/8+oB4M= Subject key identifier: E7:89:AB:B0:5D:86:CC:EA:A7:89:11:55:FD:AD:5D:E2:08:01:A6:5F Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 35A7 Signing time: Wed 28 Oct 2026 14:29:05 +0000 Manifest this update: Wed 28 Oct 2026 14:29:04 +0000 Manifest next update: Wed 04 Nov 2026 14:29:04 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: h2cTUrTDt4RuDbWl6FEaxcRAlTTBn4iLIVPIlz2wJ8k=) 2: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 4: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 8: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 9: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13789 (0x35dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Oct 28 14:29:04 2026 GMT Not After : Nov 4 14:29:04 2026 GMT Subject: CN=6ae206b0-b2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:cb:4c:3e:a2:ac:ea:5c:19:5b:5c:72:a9: f6:21:49:56:3b:7f:40:1a:cf:20:b8:8a:68:c1:90: dc:67:44:88:92:94:8c:7d:13:80:a6:28:74:9d:30: 5d:d9:d8:52:d6:21:76:b6:18:f2:dc:d2:16:51:8c: 3d:54:77:12:41:b7:01:8c:a0:2c:88:2b:01:1f:e9: fa:f2:c0:8b:2b:9d:68:ed:58:c5:02:eb:98:02:f2: 5e:16:10:64:02:96:b2:30:78:4c:81:b8:ac:14:f0: a3:fc:4f:71:7a:f5:c3:27:15:7f:b0:14:69:b8:e1: 75:16:fb:a4:62:b4:4b:4a:54:7f:18:28:6f:59:0f: fe:1f:7f:e3:0e:54:94:b8:14:5b:99:74:3d:fc:d8: 86:24:37:f9:f2:0f:a8:05:dc:b4:bf:96:72:ae:76: d6:99:3c:d9:d5:5c:33:12:49:ea:37:37:7e:79:ab: 99:e4:44:7a:3e:7e:af:03:74:85:65:a8:8e:fc:33: 3d:d9:57:4c:c1:f1:3a:e8:b4:70:64:e7:66:12:47: ac:1b:c6:12:6a:22:8b:fa:bf:d7:4e:a3:28:79:22: 55:57:a6:ce:75:a2:56:55:30:d7:19:c4:e2:66:a7: 90:ca:5d:8a:71:4a:ff:ad:c9:e0:a6:9b:b7:f5:2e: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:AB:B0:5D:86:CC:EA:A7:89:11:55:FD:AD:5D:E2:08:01:A6:5F X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ce:3b:6b:ed:25:22:49:c6:a2:4f:1e:13:c1:8e:c1:4b:47: 89:b9:73:df:d4:c6:05:ca:3e:50:72:5c:37:4b:f8:f6:00:af: c4:10:0e:aa:6f:e0:3d:56:1b:55:5f:62:20:2a:c6:bb:91:25: b8:85:c6:ad:8d:1a:a7:98:c9:90:e7:e5:dc:8e:ae:9a:3b:6c: 79:97:a9:7b:57:24:58:a9:2e:9c:dd:a1:47:1c:40:49:5b:2b: f4:58:55:d6:e1:e1:9b:e8:2a:f1:e5:ae:de:86:ef:6b:11:62: af:f8:5f:08:b8:db:9e:32:15:07:79:e9:60:9b:81:87:7b:4d: f2:4e:b2:78:c7:d9:dd:d3:55:79:e0:33:71:44:15:98:7c:e7: 35:be:e5:84:ce:f0:4a:a4:e2:f2:a4:45:26:d9:26:aa:c9:7b: 39:4a:e0:71:68:34:c2:df:7e:d3:b9:2a:d3:43:e8:e8:d0:49: 40:5e:50:1e:2f:7e:c6:bc:8b:9e:b9:74:d3:a9:0a:34:51:bc: 70:ec:f6:7e:a9:78:35:43:69:25:f6:f6:26:09:83:c8:e2:8b: a8:55:aa:a7:c7:08:78:72:b1:2b:0b:71:ab:61:bd:a5:24:89: e8:3d:61:e7:c3:7a:de:26:c2:9b:c2:f5:a4:e2:19:01:ba:a8: 96:31:c9:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYxMDI4MTQyOTA0WhcNMjYxMTA0MTQyOTA0WjAYMRYwFAYD VQQDEw02YWUyMDZiMC1iMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxabLTD6irOpcGVtccqn2IUlWO39AGs8guIpowZDcZ0SIkpSMfROApih0nTBd 2dhS1iF2thjy3NIWUYw9VHcSQbcBjKAsiCsBH+n68sCLK51o7VjFAuuYAvJeFhBk ApayMHhMgbisFPCj/E9xevXDJxV/sBRpuOF1FvukYrRLSlR/GChvWQ/+H3/jDlSU uBRbmXQ9/NiGJDf58g+oBdy0v5ZyrnbWmTzZ1VwzEknqNzd+eauZ5ER6Pn6vA3SF ZaiO/DM92VdMwfE66LRwZOdmEkesG8YSaiKL+r/XTqMoeSJVV6bOdaJWVTDXGcTi ZqeQyl2KcUr/rcngppu39S6qsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOeJq7Bd hszqp4kRVf2tXeIIAaZfMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlc47a+0lIknGok8eE8GOwUtHiblz39TGBco+UHJcN0v49gCvxBAOqm/gPVYb VV9iICrGu5EluIXGrY0ap5jJkOfl3I6umjtseZepe1ckWKkunN2hRxxASVsr9FhV 1uHhm+gq8eWu3obvaxFir/hfCLjbnjIVB3npYJuBh3tN8k6yeMfZ3dNVeeAzcUQV mHznNb7lhM7wSqTi8qRFJtkmqsl7OUrgcWg0wt9+07kq00Po6NBJQF5QHi9+xryL nrl006kKNFG8cOz2fql4NUNpJfb2JgmDyOKLqFWqp8cIeHKxKwtxq2G9pSSJ6D1h 58N63ibCm8L1pOIZAbqoljHJfA== -----END CERTIFICATE-----Generated at Thu Oct 29 01:53:57 2026 by rpki-client