$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: Zbp/bAE4DWBSk8ITBHGmny9A9WtgeOTsDQIcAk2FGSo= Subject key identifier: 63:54:49:55:07:4C:2D:B7:60:2A:74:E9:6C:E5:ED:D8:CF:7B:FA:49 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3528 Signing time: Wed 04 Mar 2026 14:27:50 +0000 Manifest this update: Wed 04 Mar 2026 14:27:49 +0000 Manifest next update: Wed 11 Mar 2026 14:27:49 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 6eayarSv9kkodGJXAlziLXA5LKHXVGjfxP2LaXib1c0=) 2: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 6: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 7: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 9: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 14:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Mar 4 14:27:49 2026 GMT Not After : Mar 11 14:27:49 2026 GMT Subject: CN=69a84166-37e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:e2:cc:ed:51:93:56:16:78:87:08:b2:cf: fe:59:a1:02:59:18:7b:14:2c:74:85:a9:03:5b:ad: 5b:df:5d:f5:82:c5:2b:14:9f:54:33:23:fa:ca:3a: 73:d2:6d:6a:5c:3c:eb:71:7a:92:7c:02:52:7a:18: 2f:1d:02:24:b7:70:af:94:7e:d2:2c:8c:d8:ed:e9: 82:74:c5:88:56:29:cf:66:16:bb:b4:1d:ca:07:fc: e8:1d:71:39:e6:35:ec:00:22:3e:d9:e3:41:32:e7: a4:55:ad:dc:2d:e8:e0:62:5e:00:3d:3a:cc:69:a1: 16:91:62:2e:d8:29:3f:a0:11:f3:e4:c5:a2:32:58: ad:52:03:df:b5:cd:a8:27:31:63:6f:ba:6d:1e:ae: 1a:0f:34:f5:69:63:4d:da:3f:c9:aa:3c:5a:1a:a5: 93:ff:4d:75:f3:7d:a6:55:3d:77:5e:3f:29:4e:00: 7b:ad:72:f5:99:dd:2f:1e:ff:0f:48:04:2e:7e:75: b4:8c:03:28:1b:9c:cb:1a:99:ae:e1:ad:a2:64:0c: 6c:a2:fd:f5:24:3b:e0:93:3a:04:56:d1:b2:d9:51: 9d:e1:87:37:4e:22:bc:3b:dc:7b:e4:b6:15:37:7e: c9:f8:35:d5:eb:e0:0c:30:87:e0:8c:89:05:6b:67: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:54:49:55:07:4C:2D:B7:60:2A:74:E9:6C:E5:ED:D8:CF:7B:FA:49 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fe:3a:b3:6a:4c:6f:94:0c:f4:d2:ae:ff:d4:70:b0:c4:a4: f3:3e:a1:38:19:c7:0f:4a:e8:ed:70:86:02:a1:21:55:0b:3a: c9:45:5e:60:f2:f8:2b:39:6f:06:c4:fe:8d:b5:c8:35:41:12: 55:8f:7d:fb:3e:83:d2:0f:86:21:30:9e:09:87:31:22:ec:17: 3e:06:31:f3:78:b6:8c:73:3d:ab:d4:03:4b:f2:80:e7:7b:c7: 45:eb:9e:94:ca:9d:db:cb:b8:bf:61:23:d1:13:95:11:b5:2e: ca:1d:96:e3:ee:a1:45:1e:1c:d1:a8:8f:5e:e3:af:43:68:cf: 62:6c:c5:bf:11:a0:69:84:15:5a:2b:80:be:f7:1b:e5:6f:b8: 2a:e5:33:aa:ef:ad:e1:eb:b8:5c:c6:45:99:e9:60:99:3a:0b: 61:69:46:1c:3c:95:83:07:10:2e:68:ca:19:c2:ee:42:36:f6: 84:bf:eb:a3:7b:5d:d2:8a:5e:aa:8b:97:02:a1:31:0b:63:af: bd:a6:d2:c9:06:30:8e:d3:10:d8:ff:0a:bb:e7:17:bc:b2:37: 9a:9f:28:19:ce:82:e9:10:e7:a0:33:8f:18:5f:02:dd:01:7c: aa:89:b4:55:a9:8b:07:02:cc:a4:84:ea:12:da:53:f9:4c:d8: 54:f6:68:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMzA0MTQyNzQ5WhcNMjYwMzExMTQyNzQ5WjAYMRYwFAYD VQQDEw02OWE4NDE2Ni0zN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuW7izO1Rk1YWeIcIss/+WaECWRh7FCx0hakDW61b3131gsUrFJ9UMyP6yjpz 0m1qXDzrcXqSfAJSehgvHQIkt3CvlH7SLIzY7emCdMWIVinPZha7tB3KB/zoHXE5 5jXsACI+2eNBMuekVa3cLejgYl4APTrMaaEWkWIu2Ck/oBHz5MWiMlitUgPftc2o JzFjb7ptHq4aDzT1aWNN2j/JqjxaGqWT/011832mVT13Xj8pTgB7rXL1md0vHv8P SAQufnW0jAMoG5zLGpmu4a2iZAxsov31JDvgkzoEVtGy2VGd4Yc3TiK8O9x75LYV N37J+DXV6+AMMIfgjIkFa2eiBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNUSVUH TC23YCp06Wzl7djPe/pJMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKv46s2pMb5QM9NKu/9RwsMSk8z6hOBnHD0ro7XCGAqEhVQs6yUVeYPL4Kzlv BsT+jbXINUESVY99+z6D0g+GITCeCYcxIuwXPgYx83i2jHM9q9QDS/KA53vHReue lMqd28u4v2Ej0ROVEbUuyh2W4+6hRR4c0aiPXuOvQ2jPYmzFvxGgaYQVWiuAvvcb 5W+4KuUzqu+t4eu4XMZFmelgmToLYWlGHDyVgwcQLmjKGcLuQjb2hL/ro3td0ope qouXAqExC2OvvabSyQYwjtMQ2P8Ku+cXvLI3mp8oGc6C6RDnoDOPGF8C3QF8qom0 VamLBwLMpITqEtpT+UzYVPZouQ== -----END CERTIFICATE-----Generated at Thu Mar 5 00:12:20 2026 by rpki-client