$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: JXOz/xEP3cpmnJx4X/knlAhWXRACJ198gvlCal/7+JI= Subject key identifier: 67:2B:8F:81:3C:B9:4A:31:EE:7C:AA:21:1D:57:AB:6C:D1:77:ED:EF Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 355D Signing time: Tue 16 Jun 2026 14:28:35 +0000 Manifest this update: Tue 16 Jun 2026 14:28:35 +0000 Manifest next update: Tue 23 Jun 2026 14:28:35 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: CoM1VKgWwWmI1O4TmR+AkyR4MspfiTrErstzrY2hi+M=) 2: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 8: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 9: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jun 16 14:28:35 2026 GMT Not After : Jun 23 14:28:35 2026 GMT Subject: CN=6a315d93-a0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7d:eb:4e:5a:30:c9:79:f3:51:02:e1:df:a7: d3:ac:6c:b1:db:f8:68:6c:63:50:1e:a3:2d:98:c4: 31:aa:72:4f:79:ab:cf:64:f6:ee:bc:72:a4:34:77: 45:71:68:9f:77:d5:72:84:66:e2:1f:e2:29:96:ed: e9:47:5a:bd:d5:ba:3f:c0:0c:cf:2f:99:ba:88:42: 02:30:83:9e:f1:85:7c:c6:26:95:ae:84:84:53:c0: ae:d7:1c:cc:17:44:b2:47:8a:be:4b:97:57:b5:cd: 32:c8:23:f3:37:d1:58:cd:92:6a:59:dc:39:24:51: 92:91:e4:1a:76:a4:d7:fc:f9:52:55:32:be:94:83: cd:82:99:57:bb:43:a5:e6:63:50:80:fe:64:26:00: 21:7c:5c:3b:d5:1a:10:9f:63:98:28:00:df:cc:53: ad:12:47:ea:ba:86:5d:ce:ac:43:e3:c8:a0:f8:1c: b7:87:8e:42:96:4d:23:20:9c:26:72:42:8b:55:52: 07:3d:7b:1e:3d:41:99:91:15:ef:85:e6:53:c5:a5: 32:34:97:01:89:f2:37:5b:0d:66:3b:83:09:7b:69: 9f:e1:81:de:4a:57:c9:e7:2a:e6:e3:fc:b3:b4:85: eb:3b:92:22:65:4a:e3:03:fd:2d:07:37:00:8b:87: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2B:8F:81:3C:B9:4A:31:EE:7C:AA:21:1D:57:AB:6C:D1:77:ED:EF X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:69:a9:91:fd:54:16:1c:22:12:0e:fe:0d:78:ed:c9:63:d0: a6:97:91:9e:2d:ec:76:5c:cc:87:b4:7b:e3:73:de:63:d1:8e: 88:68:16:20:cc:bc:e9:5e:0e:2f:7f:56:67:75:20:1d:80:ba: 51:16:43:12:e3:cc:46:2b:ef:0c:6e:80:b8:4f:8d:7e:97:1e: 35:11:1b:f3:6a:e8:5a:04:f3:d7:39:65:51:aa:b5:70:85:ac: 4d:c6:67:82:fa:ee:2a:bd:bb:27:a7:be:f6:d4:e6:55:56:7f: 20:a6:c5:d9:72:9b:e1:7f:a5:c6:80:87:e5:31:a1:7c:33:b8: a9:73:e2:cf:1b:45:dd:4f:b5:19:d6:4c:6d:c1:84:68:f2:fb: fe:01:44:15:95:ee:79:46:69:fd:bb:df:c8:02:13:b0:1b:c5: c5:78:af:51:5b:7c:df:41:c6:63:b8:01:9d:ea:81:87:ac:29: 8d:60:43:0c:31:3e:81:16:b1:f0:fa:ee:6e:6c:10:8f:6f:a6: 47:67:3a:d7:a0:bb:fd:6c:37:d3:0d:97:e3:95:5e:35:2b:89: 22:47:ad:21:9b:16:48:a3:55:f3:c4:d4:5d:9f:d2:05:22:96: da:f1:a8:53:a8:3c:b3:93:5d:31:0b:76:88:35:36:12:d4:d0: cd:13:bc:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNjE2MTQyODM1WhcNMjYwNjIzMTQyODM1WjAYMRYwFAYD VQQDEw02YTMxNWQ5My1hMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8H3rTlowyXnzUQLh36fTrGyx2/hobGNQHqMtmMQxqnJPeavPZPbuvHKkNHdF cWifd9VyhGbiH+Iplu3pR1q91bo/wAzPL5m6iEICMIOe8YV8xiaVroSEU8Cu1xzM F0SyR4q+S5dXtc0yyCPzN9FYzZJqWdw5JFGSkeQadqTX/PlSVTK+lIPNgplXu0Ol 5mNQgP5kJgAhfFw71RoQn2OYKADfzFOtEkfquoZdzqxD48ig+By3h45Clk0jIJwm ckKLVVIHPXsePUGZkRXvheZTxaUyNJcBifI3Ww1mO4MJe2mf4YHeSlfJ5yrm4/yz tIXrO5IiZUrjA/0tBzcAi4erzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcrj4E8 uUox7nyqIR1Xq2zRd+3vMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWGmpkf1UFhwiEg7+DXjtyWPQppeRni3sdlzMh7R743PeY9GOiGgWIMy86V4O L39WZ3UgHYC6URZDEuPMRivvDG6AuE+NfpceNREb82roWgTz1zllUaq1cIWsTcZn gvruKr27J6e+9tTmVVZ/IKbF2XKb4X+lxoCH5TGhfDO4qXPizxtF3U+1GdZMbcGE aPL7/gFEFZXueUZp/bvfyAITsBvFxXivUVt830HGY7gBneqBh6wpjWBDDDE+gRax 8PrubmwQj2+mR2c616C7/Ww30w2X45VeNSuJIketIZsWSKNV88TUXZ/SBSKW2vGo U6g8s5NdMQt2iDU2EtTQzRO8nQ== -----END CERTIFICATE-----Generated at Tue Jun 16 22:24:06 2026 by rpki-client