$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: piHsQh/VFLHHNS4LkBlgX/B5+PG3y8FRWiKAoNLQPGU= Subject key identifier: 49:B7:CD:25:96:36:F1:AA:56:87:98:34:A7:08:27:6A:B2:2F:05:2A Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3584 Signing time: Thu 20 Aug 2026 14:28:10 +0000 Manifest this update: Thu 20 Aug 2026 14:28:09 +0000 Manifest next update: Thu 27 Aug 2026 14:28:09 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: SZyFDKYQ4MYQcmNHOdr5D7tpdo/bAPOUVRwwnxydztQ=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 3: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 4: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 6: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 7: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 8: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 9: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13754 (0x35ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 20 14:28:09 2026 GMT Not After : Aug 27 14:28:09 2026 GMT Subject: CN=6a870efa-76e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:6d:57:63:58:8e:0b:09:ba:25:20:b6:73: 61:67:93:2f:43:98:7a:1e:67:0a:af:46:22:76:5a: bb:18:c4:80:cf:71:e4:08:ce:4e:80:ad:10:95:f2: 63:3a:94:e7:56:9a:80:1d:5c:df:10:30:a5:f7:d4: 75:36:a3:9e:da:34:7d:4e:ce:25:d9:2c:fe:26:2d: 4f:d9:1d:c4:60:04:09:e0:ac:91:5f:fc:85:3a:7c: dc:8b:29:8c:ce:b7:c5:c9:5e:09:23:37:74:ae:23: 69:2d:b2:3c:25:05:c0:79:b9:e6:43:a7:2b:3d:49: 22:36:0f:7c:f6:0f:0f:a2:46:66:74:7a:10:9c:9a: 0a:d7:fe:02:4e:ca:ee:8d:5c:7a:d2:2e:78:05:19: 63:7b:22:cb:2a:c4:36:8e:e4:a5:53:12:be:fe:01: a0:10:dc:13:ac:20:6c:25:4a:60:1d:18:6a:9f:98: ff:3e:cc:7c:95:18:34:84:fb:75:60:15:e1:98:a2: ca:de:32:dc:ce:15:e4:95:9f:55:87:24:15:ea:82: 87:06:3f:79:a3:60:94:90:45:5f:c3:bc:2f:75:ea: c6:6f:c2:ce:a2:0c:bf:f0:ad:b7:b7:85:7a:ee:cb: c1:68:ac:fd:11:ce:b7:f7:97:6e:20:b6:44:9d:e5: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:CD:25:96:36:F1:AA:56:87:98:34:A7:08:27:6A:B2:2F:05:2A X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b9:3e:66:fe:5d:6a:af:2a:1a:c2:a3:a4:b1:26:1c:d9:1e: 89:d9:30:47:bb:af:8f:6f:17:07:c4:14:e5:5d:77:fa:93:35: 13:fc:71:5d:aa:9c:05:9a:ee:ca:af:bf:93:91:5a:86:93:15: 74:b7:c1:1b:9b:b9:77:c9:66:8d:14:6b:a7:a0:d6:cd:67:31: 71:e3:ce:12:b2:b2:34:5a:eb:eb:fc:9f:a9:84:8f:99:4a:f2: 5f:3f:08:92:2b:b4:6c:37:99:b6:44:9d:73:71:17:40:12:84: 97:e7:c8:99:40:56:6e:23:11:2d:79:39:f2:05:35:68:87:4b: 52:b2:8a:d6:36:54:bd:08:21:ed:91:ff:03:52:07:94:4e:c3: 6f:dc:2a:ec:f5:fe:a1:d9:6b:6a:d6:d7:ba:73:0f:a7:3f:fc: b5:c4:b6:3f:d9:32:99:5d:3e:ad:e0:0d:15:64:39:36:e5:de: 6e:dd:6e:0a:66:45:e9:6b:75:08:59:fd:35:51:11:a7:d3:01: 39:fc:f9:16:38:2e:94:63:50:b3:41:a5:4f:c3:af:24:f2:73: 76:f4:f4:5e:1a:e9:f2:78:2b:70:0e:f1:9b:ae:5d:1b:2d:93: 52:e6:ba:14:12:a7:eb:f5:33:75:ec:4d:30:fe:9a:2c:1b:bc: ab:1b:46:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwODIwMTQyODA5WhcNMjYwODI3MTQyODA5WjAYMRYwFAYD VQQDEw02YTg3MGVmYS03NmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGJtV2NYjgsJuiUgtnNhZ5MvQ5h6HmcKr0Yidlq7GMSAz3HkCM5OgK0QlfJj OpTnVpqAHVzfEDCl99R1NqOe2jR9Ts4l2Sz+Ji1P2R3EYAQJ4KyRX/yFOnzciymM zrfFyV4JIzd0riNpLbI8JQXAebnmQ6crPUkiNg989g8PokZmdHoQnJoK1/4CTsru jVx60i54BRljeyLLKsQ2juSlUxK+/gGgENwTrCBsJUpgHRhqn5j/Psx8lRg0hPt1 YBXhmKLK3jLczhXklZ9VhyQV6oKHBj95o2CUkEVfw7wvderGb8LOogy/8K23t4V6 7svBaKz9Ec6395duILZEneWacwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEm3zSWW NvGqVoeYNKcIJ2qyLwUqMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKbk+Zv5daq8qGsKjpLEmHNkeidkwR7uvj28XB8QU5V13+pM1E/xxXaqcBZru yq+/k5FahpMVdLfBG5u5d8lmjRRrp6DWzWcxcePOErKyNFrr6/yfqYSPmUryXz8I kiu0bDeZtkSdc3EXQBKEl+fImUBWbiMRLXk58gU1aIdLUrKK1jZUvQgh7ZH/A1IH lE7Db9wq7PX+odlratbXunMPpz/8tcS2P9kymV0+reANFWQ5NuXebt1uCmZF6Wt1 CFn9NVERp9MBOfz5FjgulGNQs0GlT8OvJPJzdvT0Xhrp8ngrcA7xm65dGy2TUua6 FBKn6/UzdexNMP6aLBu8qxtGjA== -----END CERTIFICATE-----Generated at Sat Aug 22 14:12:07 2026 by rpki-client