$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: svNKh1ofdDRGxwbjFl6Al16WFTyrl6tpjKzx2uQ33vs= Subject key identifier: D0:4E:5C:29:6C:C9:16:41:9B:50:ED:41:5D:18:E8:9A:81:35:6B:08 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 358D Signing time: Sun 06 Sep 2026 14:28:11 +0000 Manifest this update: Sun 06 Sep 2026 14:28:10 +0000 Manifest next update: Sun 13 Sep 2026 14:28:10 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: FDdWNrqJXyfvFxcROj7spee0Fezy8iO5/reO5tN67rM=) 2: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 3: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 6: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 7: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 14:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13763 (0x35c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Sep 6 14:28:10 2026 GMT Not After : Sep 13 14:28:10 2026 GMT Subject: CN=6a9d787b-dfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8f:cf:ff:da:ac:b9:cb:81:01:43:9e:5e:3b: 73:26:1b:3b:26:95:67:c5:ba:75:72:e8:35:5e:42: 55:09:9a:ce:85:9b:0c:70:44:04:14:4e:d5:e3:ac: d1:4a:c7:1b:94:af:a6:7a:1c:dc:f8:2e:30:7e:7e: 2d:e9:70:d6:35:c0:92:7f:06:9f:78:bb:85:b7:54: ce:7c:1b:db:40:cd:4e:f7:20:a4:db:9c:71:a7:a4: 03:4a:23:52:d3:15:68:e2:7f:42:b1:fc:ea:dc:09: 1e:a6:08:5d:cd:3b:57:49:91:c8:68:b7:34:cf:65: 55:83:16:22:37:ac:51:a6:ff:23:a3:c3:2c:75:4e: 1c:f7:2c:94:93:9a:ae:a2:26:81:70:7c:ef:0d:f1: a0:15:15:f8:05:63:f1:4d:db:7b:32:2d:2e:25:8a: 1f:b4:55:3d:0e:c9:ce:9c:b2:77:e1:85:e0:d2:fc: 95:ef:ae:39:1e:8c:92:6d:6f:32:0a:b6:0a:9a:06: 66:16:b0:8a:b5:77:18:5e:cb:bd:04:23:c5:c4:b8: 43:e2:dc:87:f5:57:0d:bd:d9:8a:a7:60:e9:dd:70: 11:6a:ab:f9:92:e0:b3:d1:ea:02:ea:37:37:b5:07: d6:25:a1:9d:a8:ac:10:29:f0:8c:93:a6:18:9e:93: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4E:5C:29:6C:C9:16:41:9B:50:ED:41:5D:18:E8:9A:81:35:6B:08 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ae:79:c3:6c:c4:3e:35:0f:2b:f0:0c:32:89:85:05:46:f0: 07:4f:87:d8:a0:ee:39:43:06:5f:50:49:a7:e3:13:45:0e:41: 09:dc:be:03:5f:2e:bd:26:85:90:d7:05:7c:81:66:c8:e1:e8: 2d:ec:dd:e1:3c:ee:98:ee:ab:90:b1:e7:83:5d:03:75:eb:2e: 57:4b:d7:b6:f8:b8:77:76:b3:31:a1:98:d6:b2:51:31:8c:2b: 92:fc:a1:0f:e1:e6:c4:c8:25:2b:7c:e1:8a:98:5d:2c:cb:aa: 9a:15:d0:b6:22:e8:1c:f3:4c:bb:40:39:78:6d:da:9b:7e:e6: 73:33:f4:d2:d1:73:ec:3f:0d:f8:96:30:53:52:ed:c1:88:b0: 29:42:a3:48:d3:ff:58:26:47:07:f1:98:03:17:03:e3:7f:ba: b7:95:a9:8a:af:b9:ba:ad:80:ef:90:d1:a3:35:6c:df:9d:c1: 2b:59:86:ff:7e:19:7b:ed:53:26:6a:0f:61:25:10:c0:36:46: d0:34:99:45:b6:3e:aa:59:c2:13:d4:71:3f:36:b6:b8:a4:96: 78:db:83:3c:73:66:4f:f7:29:91:ab:68:0c:32:4b:a6:0d:a8: 42:7b:53:b5:64:8b:aa:07:71:bf:e6:f2:4a:22:35:77:34:e2: ec:77:29:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwOTA2MTQyODEwWhcNMjYwOTEzMTQyODEwWjAYMRYwFAYD VQQDEw02YTlkNzg3Yi1kZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7o/P/9qsucuBAUOeXjtzJhs7JpVnxbp1cug1XkJVCZrOhZsMcEQEFE7V46zR SscblK+mehzc+C4wfn4t6XDWNcCSfwafeLuFt1TOfBvbQM1O9yCk25xxp6QDSiNS 0xVo4n9Csfzq3AkepghdzTtXSZHIaLc0z2VVgxYiN6xRpv8jo8MsdU4c9yyUk5qu oiaBcHzvDfGgFRX4BWPxTdt7Mi0uJYoftFU9DsnOnLJ34YXg0vyV7645HoySbW8y CrYKmgZmFrCKtXcYXsu9BCPFxLhD4tyH9VcNvdmKp2Dp3XARaqv5kuCz0eoC6jc3 tQfWJaGdqKwQKfCMk6YYnpPDHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBOXCls yRZBm1DtQV0Y6JqBNWsIMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGq55w2zEPjUPK/AMMomFBUbwB0+H2KDuOUMGX1BJp+MTRQ5BCdy+A18uvSaF kNcFfIFmyOHoLezd4TzumO6rkLHng10DdesuV0vXtvi4d3azMaGY1rJRMYwrkvyh D+HmxMglK3zhiphdLMuqmhXQtiLoHPNMu0A5eG3am37mczP00tFz7D8N+JYwU1Lt wYiwKUKjSNP/WCZHB/GYAxcD43+6t5Wpiq+5uq2A75DRozVs353BK1mG/34Ze+1T JmoPYSUQwDZG0DSZRbY+qlnCE9RxPza2uKSWeNuDPHNmT/cpkatoDDJLpg2oQntT tWSLqgdxv+bySiI1dzTi7HcpIQ== -----END CERTIFICATE-----Generated at Sun Sep 6 18:30:50 2026 by rpki-client