$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: w/MxLP48vX9L4nEcjMnLKepgOTfi6rCLLZ09HD8qjoM= Subject key identifier: F7:71:E2:BB:D7:F7:BF:0C:AC:A7:4B:4B:1E:9D:F1:C6:81:37:B7:5A Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 355D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3532 Signing time: Tue 24 Mar 2026 14:28:08 +0000 Manifest this update: Tue 24 Mar 2026 14:28:07 +0000 Manifest next update: Tue 31 Mar 2026 14:28:07 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: MdevEAQvXS70OVT1V90OvA37po6ZE10yWOAHdnlEn20=) 2: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 3: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 5: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 7: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 8: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 9: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13661 (0x355d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Mar 24 14:28:07 2026 GMT Not After : Mar 31 14:28:07 2026 GMT Subject: CN=69c29f78-744f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:cf:01:a8:51:65:38:24:40:c2:10:d2:dd: eb:c5:9c:1c:da:07:6f:f9:ef:ea:a9:81:76:90:52: 3e:1a:b8:e0:ca:c9:6f:c3:41:bf:8c:d4:c8:55:f8: b8:0d:a0:c2:6f:21:61:72:c8:04:52:6c:c6:48:fc: f4:6d:97:23:cc:94:7b:3f:58:07:ef:79:28:f2:aa: dd:54:57:54:9c:e1:5e:e9:0c:e5:b1:bd:63:5b:eb: c5:5d:47:8d:98:c8:67:e1:f3:9c:8f:99:7c:93:84: ac:4c:7a:1f:99:b5:f6:2b:01:5b:c2:a9:28:b9:e1: 74:20:1f:ce:ed:ae:e9:20:71:2a:f0:f5:0d:fd:4f: 0d:12:7a:3c:28:53:54:e1:4f:98:a2:fa:67:ed:9d: 1d:7b:ab:2c:df:e4:0c:f4:e7:77:4f:11:b4:ac:ea: c6:55:d3:33:a8:7c:31:15:36:f5:f3:3a:2b:cd:e4: 62:51:37:74:91:2d:31:d7:9c:2c:35:48:8a:ab:57: 52:40:95:50:56:7a:74:72:15:eb:60:e2:fe:39:01: 82:cd:59:81:f7:ea:bc:39:80:ec:d9:35:04:94:b1: 4f:d7:1d:04:f5:39:51:8f:8a:46:4a:80:e6:bd:e0: 41:5e:10:ff:a3:d7:ba:c1:6e:20:94:d2:89:d2:d1: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:71:E2:BB:D7:F7:BF:0C:AC:A7:4B:4B:1E:9D:F1:C6:81:37:B7:5A X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f2:c2:64:66:a0:ba:cc:ac:06:ba:2d:86:f0:f1:fd:1f:c6: eb:3c:4d:80:b5:d1:d4:a8:3b:41:50:bf:85:37:50:84:f2:d8: 3b:87:cc:54:86:6b:ef:5f:6d:a9:12:ec:b8:98:38:62:85:15: 0d:0c:5e:88:b2:92:ce:a5:52:9a:65:a9:39:e8:fc:70:29:66: 94:74:f6:ef:ec:bb:1b:5a:41:ab:a0:de:4e:a2:16:e2:3e:e7: 53:fb:8a:fc:e7:bc:a1:7a:93:b6:7e:4b:e5:37:85:2b:a6:26: 59:0a:f2:8f:d3:ba:2c:26:da:61:53:10:c2:29:94:9f:fe:c3: 6f:5b:89:10:ef:68:b9:58:d0:db:e8:f9:88:28:cb:c5:ed:22: d3:dd:aa:39:ae:ea:bc:36:f0:ca:9d:9f:4c:e3:cd:2d:d7:60: dd:2a:00:d9:0e:82:cd:6a:75:de:90:d0:17:48:b4:8c:95:84: da:8c:b6:e1:01:b3:a1:3e:10:cb:34:d1:aa:ac:ea:21:cf:f0: 00:18:e8:c0:5f:55:55:3f:c6:ca:04:ba:2e:7f:21:7a:e8:31: de:b7:31:f7:19:d2:ec:23:0f:92:6e:e1:d9:33:82:57:7d:7b: ab:73:04:f7:31:fd:d6:30:ad:90:13:8a:71:2a:f4:cd:1f:4a: d9:a2:84:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMzI0MTQyODA3WhcNMjYwMzMxMTQyODA3WjAYMRYwFAYD VQQDEw02OWMyOWY3OC03NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sHPAahRZTgkQMIQ0t3rxZwc2gdv+e/qqYF2kFI+Grjgyslvw0G/jNTIVfi4 DaDCbyFhcsgEUmzGSPz0bZcjzJR7P1gH73ko8qrdVFdUnOFe6Qzlsb1jW+vFXUeN mMhn4fOcj5l8k4SsTHofmbX2KwFbwqkoueF0IB/O7a7pIHEq8PUN/U8NEno8KFNU 4U+Yovpn7Z0de6ss3+QM9Od3TxG0rOrGVdMzqHwxFTb18zorzeRiUTd0kS0x15ws NUiKq1dSQJVQVnp0chXrYOL+OQGCzVmB9+q8OYDs2TUElLFP1x0E9TlRj4pGSoDm veBBXhD/o9e6wW4glNKJ0tHr8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdx4rvX 978MrKdLSx6d8caBN7daMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjPLCZGagusysBrothvDx/R/G6zxNgLXR1Kg7QVC/hTdQhPLYO4fMVIZr719t qRLsuJg4YoUVDQxeiLKSzqVSmmWpOej8cClmlHT27+y7G1pBq6DeTqIW4j7nU/uK /Oe8oXqTtn5L5TeFK6YmWQryj9O6LCbaYVMQwimUn/7Db1uJEO9ouVjQ2+j5iCjL xe0i092qOa7qvDbwyp2fTOPNLddg3SoA2Q6CzWp13pDQF0i0jJWE2oy24QGzoT4Q yzTRqqzqIc/wABjowF9VVT/GygS6Ln8heugx3rcx9xnS7CMPkm7h2TOCV317q3ME 9zH91jCtkBOKcSr0zR9K2aKEzA== -----END CERTIFICATE-----Generated at Tue Mar 24 16:59:20 2026 by rpki-client