$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: bde801feNJ0+UqAM2T+xbWGKo/j3SjjtoaIolLVF/+g= Subject key identifier: 58:F0:BD:E9:04:99:AD:96:8D:D9:8B:31:F9:4E:62:C1:79:0F:97:C1 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 35A3 Signing time: Tue 20 Oct 2026 14:28:19 +0000 Manifest this update: Tue 20 Oct 2026 14:28:19 +0000 Manifest next update: Tue 27 Oct 2026 14:28:19 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: nii6IYlf+lX/2twwRy/j0U9IPNJKFQXTi34BfODZZSM=) 2: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 4: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 5: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 6: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 7: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 9: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 14:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13785 (0x35d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Oct 20 14:28:19 2026 GMT Not After : Oct 27 14:28:19 2026 GMT Subject: CN=6ad77a83-081b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7d:ff:26:2e:b8:8a:4a:ab:44:e8:fa:c5:28: d4:90:50:45:58:e4:66:bf:73:24:de:01:0f:a5:7c: 41:74:c6:44:ef:22:a3:7c:9f:78:c4:6d:f5:97:3d: 3d:1e:f1:3b:04:ae:d8:4c:33:f0:42:7e:91:e1:5b: 1a:9f:25:f6:b8:e2:40:7c:5c:87:e5:a8:6b:ae:6f: d1:ac:25:a3:ad:8a:e2:0c:43:93:a9:d0:af:8b:44: fe:9e:9b:ea:ce:bd:68:9f:6c:ad:0d:f1:fe:bb:ce: 71:d7:fb:13:12:06:39:6a:bd:66:69:5a:e5:c5:d6: ac:ee:5c:f4:8a:87:90:e7:34:48:13:c1:ea:3c:67: 45:b0:f0:06:84:06:06:ca:0f:69:2a:b7:3c:7c:a5: 3d:60:81:11:ba:d5:53:65:c0:0c:31:21:ea:83:0a: f7:70:8c:e1:6b:f8:f4:de:8d:14:7c:16:59:80:d5: 73:c6:f6:13:8d:24:48:3a:0b:30:d6:7b:ca:1a:7e: a5:a0:57:b4:ca:73:e1:7f:96:85:60:13:08:94:b8: 89:d8:9c:e1:27:bd:b6:f0:37:77:0b:f4:bb:1b:09: 48:1a:f9:0a:8f:19:07:e9:dc:8d:a2:c7:6e:41:ce: 07:a9:58:2d:d8:e1:90:47:65:c4:a7:ea:5e:2e:d0: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F0:BD:E9:04:99:AD:96:8D:D9:8B:31:F9:4E:62:C1:79:0F:97:C1 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:89:dc:26:95:f2:f8:7c:3c:8a:33:5a:1f:9c:c8:8e:d1:9b: 17:65:a8:d6:92:95:c2:5b:17:e4:df:13:66:5c:5e:f6:dc:6a: 31:8d:b6:12:16:0c:16:76:c7:77:56:96:7c:80:7a:07:ee:ba: 13:27:db:ac:96:a7:25:c2:3e:e2:fd:8c:f1:15:80:b5:ef:ca: 56:0f:12:5c:0b:4d:5a:52:85:73:99:2b:26:77:d3:28:6a:f8: e5:e1:cc:76:b4:65:03:08:b1:7c:9c:91:6a:b2:a3:23:88:60: ab:01:b1:ae:ff:8a:0a:43:b5:5c:43:1f:b5:e9:7b:9a:84:6d: b6:c8:69:1c:f2:15:c6:85:df:73:23:52:b1:fe:cc:35:57:a0: 71:56:60:66:54:aa:0d:c1:17:d2:d8:b0:3f:67:b9:1a:f4:64: 3c:80:34:48:b8:31:9d:88:d5:01:6f:3f:2b:70:e3:9f:ac:0e: e8:fc:1d:91:30:71:9f:4f:b3:5b:9d:2e:18:fa:df:79:b4:3a: 1d:39:fc:ba:0d:f1:1c:67:28:3f:b5:9a:1a:49:47:78:d5:45: 19:68:8b:be:0e:03:96:8a:52:78:0a:a8:d6:79:d9:db:26:b4: 0a:74:47:27:65:7d:40:fc:d0:f9:77:31:9f:e3:a2:2b:c7:6b: cb:b3:69:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYxMDIwMTQyODE5WhcNMjYxMDI3MTQyODE5WjAYMRYwFAYD VQQDEw02YWQ3N2E4My0wODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2X3/Ji64ikqrROj6xSjUkFBFWORmv3Mk3gEPpXxBdMZE7yKjfJ94xG31lz09 HvE7BK7YTDPwQn6R4VsanyX2uOJAfFyH5ahrrm/RrCWjrYriDEOTqdCvi0T+npvq zr1on2ytDfH+u85x1/sTEgY5ar1maVrlxdas7lz0ioeQ5zRIE8HqPGdFsPAGhAYG yg9pKrc8fKU9YIERutVTZcAMMSHqgwr3cIzha/j03o0UfBZZgNVzxvYTjSRIOgsw 1nvKGn6loFe0ynPhf5aFYBMIlLiJ2JzhJ7228Dd3C/S7GwlIGvkKjxkH6dyNosdu Qc4HqVgt2OGQR2XEp+peLtDpdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjwvekE ma2WjdmLMflOYsF5D5fBMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALYncJpXy+Hw8ijNaH5zIjtGbF2Wo1pKVwlsX5N8TZlxe9txqMY22EhYMFnbH d1aWfIB6B+66EyfbrJanJcI+4v2M8RWAte/KVg8SXAtNWlKFc5krJnfTKGr45eHM drRlAwixfJyRarKjI4hgqwGxrv+KCkO1XEMftel7moRttshpHPIVxoXfcyNSsf7M NVegcVZgZlSqDcEX0tiwP2e5GvRkPIA0SLgxnYjVAW8/K3Djn6wO6PwdkTBxn0+z W50uGPrfebQ6HTn8ug3xHGcoP7WaGklHeNVFGWiLvg4DlopSeAqo1nnZ2ya0CnRH J2V9QPzQ+Xcxn+OiK8dry7NpjA== -----END CERTIFICATE-----Generated at Tue Oct 20 22:18:09 2026 by rpki-client