$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: FveKPqPZXDqaHaFMUNEBwKrtY4rnNAznjUPBPBf4v00= Subject key identifier: 66:2B:A0:F3:5D:F7:71:20:1A:FB:BB:70:CF:45:D5:24:63:75:9F:4D Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 352D Signing time: Sat 14 Mar 2026 14:27:57 +0000 Manifest this update: Sat 14 Mar 2026 14:27:56 +0000 Manifest next update: Sat 21 Mar 2026 14:27:56 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: kvgx3X20rskHrg0DGFg2BtOWT6REqxkf2NqTJuzr6Po=) 2: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 9: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 14:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13656 (0x3558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Mar 14 14:27:56 2026 GMT Not After : Mar 21 14:27:56 2026 GMT Subject: CN=69b5706d-9b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:d3:ab:43:70:7a:5f:c0:90:bd:87:e4:5d: eb:60:e6:50:6f:96:5b:e0:1e:72:fc:93:c4:2e:d2: 9b:ff:e8:37:bf:b8:55:e5:c6:77:7d:28:37:bc:3a: 24:18:53:1e:c0:2c:8e:47:d0:d4:29:02:2e:32:01: 96:1a:9c:2b:43:90:c5:32:f5:1b:be:bf:da:9f:09: 60:34:a4:eb:2c:6f:38:88:28:1b:fb:aa:43:ec:d5: f8:fb:e3:0e:80:32:b1:c5:70:1a:0c:ef:90:bb:a3: b0:84:89:90:f1:56:9d:38:e8:33:7d:27:a0:cd:ac: 5b:8e:18:2d:ba:d9:87:bd:cf:e5:d9:a4:36:d8:ee: cd:09:15:87:f8:4b:19:d2:a9:91:53:c6:7d:a8:5b: 1d:b9:58:7a:47:8b:ac:55:f8:66:2f:f4:7d:ba:d1: db:22:b2:49:2a:59:66:d0:bd:ab:77:d4:63:a8:60: 53:0c:be:5d:6a:47:3a:f7:8c:e0:09:31:52:9f:e6: e3:c2:53:db:b1:0c:0f:e2:73:20:0c:49:14:a9:0f: 17:8f:4a:1b:cf:59:73:12:ba:f0:ee:0c:b1:bf:c5: cb:a8:ac:51:91:b2:13:3f:4b:a7:5e:d8:c0:94:56: 8b:ae:b5:94:a8:1e:2c:10:cd:1d:c5:09:a1:1a:a8: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2B:A0:F3:5D:F7:71:20:1A:FB:BB:70:CF:45:D5:24:63:75:9F:4D X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e3:4e:bc:43:1c:c9:38:7a:3b:45:99:75:79:cc:4a:d8:60: 0c:6e:9c:12:d6:e7:80:fd:e0:46:e0:f8:a3:a4:a9:55:6d:33: 8a:2d:f5:73:44:b4:14:f7:d8:9b:eb:26:aa:4b:85:08:df:8c: b5:e3:09:b1:7c:cf:bc:64:00:ab:9e:d6:e9:6a:e0:a2:d3:a2: 3c:69:72:b7:4f:ce:94:e1:16:b8:f1:c2:e4:45:0c:8c:d6:21: d3:b4:00:52:ce:fe:cb:a9:bb:8a:3a:c4:4e:96:dd:d9:90:c8: 39:a3:26:12:e4:36:3f:a4:f3:33:1c:53:94:c1:96:b8:dd:b6: 7d:47:af:fb:01:a7:21:0c:02:0c:9d:3e:c6:ea:e2:22:02:f1: 03:5f:85:df:6b:d1:41:ba:64:0c:77:de:1a:7c:4b:8a:d4:96: 59:5a:ab:65:c7:ca:a4:84:29:3b:ca:2d:df:32:6e:a4:b7:d8: fd:1a:89:02:86:1b:28:93:6c:b6:b7:58:b8:62:3b:98:37:d5: 60:db:b9:62:e6:0f:96:1e:98:98:aa:f8:07:32:ef:2b:8a:6e: fc:90:78:e5:06:16:4d:90:db:f0:7f:16:cb:44:76:77:92:6c: 9e:f1:c4:44:45:d4:86:5d:4c:2b:b3:55:10:bf:fc:f6:b3:f5: 5f:59:f6:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMzE0MTQyNzU2WhcNMjYwMzIxMTQyNzU2WjAYMRYwFAYD VQQDEw02OWI1NzA2ZC05YjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN7Tq0Nwel/AkL2H5F3rYOZQb5Zb4B5y/JPELtKb/+g3v7hV5cZ3fSg3vDok GFMewCyOR9DUKQIuMgGWGpwrQ5DFMvUbvr/anwlgNKTrLG84iCgb+6pD7NX4++MO gDKxxXAaDO+Qu6OwhImQ8VadOOgzfSegzaxbjhgtutmHvc/l2aQ22O7NCRWH+EsZ 0qmRU8Z9qFsduVh6R4usVfhmL/R9utHbIrJJKllm0L2rd9RjqGBTDL5dakc694zg CTFSn+bjwlPbsQwP4nMgDEkUqQ8Xj0obz1lzErrw7gyxv8XLqKxRkbITP0unXtjA lFaLrrWUqB4sEM0dxQmhGqjUDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGYroPNd 93EgGvu7cM9F1SRjdZ9NMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmuNOvEMcyTh6O0WZdXnMSthgDG6cEtbngP3gRuD4o6SpVW0zii31c0S0FPfY m+smqkuFCN+MteMJsXzPvGQAq57W6WrgotOiPGlyt0/OlOEWuPHC5EUMjNYh07QA Us7+y6m7ijrETpbd2ZDIOaMmEuQ2P6TzMxxTlMGWuN22fUev+wGnIQwCDJ0+xuri IgLxA1+F32vRQbpkDHfeGnxLitSWWVqrZcfKpIQpO8ot3zJupLfY/RqJAoYbKJNs trdYuGI7mDfVYNu5YuYPlh6YmKr4BzLvK4pu/JB45QYWTZDb8H8Wy0R2d5JsnvHE REXUhl1MK7NVEL/89rP1X1n28w== -----END CERTIFICATE-----Generated at Mon Mar 16 04:24:25 2026 by rpki-client