$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: RzdzBczBWzU7PeUesEWkgUELBb07K7T1/OQ8xBBw9M4= Subject key identifier: 26:67:D7:F3:85:73:5A:05:6D:AC:06:97:BD:AA:6A:FB:42:AA:C6:7C Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 359F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3571 Signing time: Sat 18 Jul 2026 14:28:57 +0000 Manifest this update: Sat 18 Jul 2026 14:28:57 +0000 Manifest next update: Sat 25 Jul 2026 14:28:57 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: kCkSmyI6siK5wDJSB9/JjWya4P95IH1V7tUTYehQqb4=) 2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 7: A05116766B2311F1965223AA8747A888.roa (hash: FjxodfmopqbPlzog3jfw0EAZ9HHXwsMpESjOWoQMzg4=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 14:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13727 (0x359f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jul 18 14:28:57 2026 GMT Not After : Jul 25 14:28:57 2026 GMT Subject: CN=6a5b8da9-bff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:58:e7:75:1c:93:a6:2c:50:59:4e:18:02: 94:d8:03:33:48:8b:d5:6b:72:57:8d:3f:ed:04:a5: 44:a6:52:12:1a:2c:1b:bf:e3:32:99:d0:20:ea:c5: 6a:8b:61:ff:d6:fb:e6:c0:c2:48:94:76:55:a9:cf: 3a:9f:d3:a9:8f:63:41:a7:b8:ed:d4:e3:23:96:e7: e7:b1:46:ce:e2:60:fe:04:dd:9f:da:81:e8:80:14: 5a:83:92:c8:4b:ee:f9:fa:03:0f:12:55:26:3b:4a: 75:eb:fb:de:f4:d9:df:f2:c9:05:21:9b:e3:6a:bf: 31:c3:cf:30:c0:fe:c9:1c:15:ae:a1:9b:74:4b:55: 34:80:5d:c5:47:b2:b5:33:44:1f:45:c0:0b:61:a0: c3:db:48:09:e6:9d:ac:16:84:00:8f:40:21:9a:0c: a9:22:d8:a4:13:3f:ad:38:4e:a2:44:4d:8c:94:c0: 6a:68:e7:e8:60:be:74:b2:b5:d7:7d:58:ad:42:d7: dc:d9:0b:b9:e5:97:c2:33:89:e5:86:84:ea:17:b7: 6a:16:ae:94:be:be:48:2b:e2:a5:df:a4:24:41:e5: 79:c9:8b:92:73:92:34:a4:61:5d:5b:e6:11:11:28: 07:56:00:80:0c:5f:f9:0f:ef:39:8b:5f:73:90:45: 30:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:67:D7:F3:85:73:5A:05:6D:AC:06:97:BD:AA:6A:FB:42:AA:C6:7C X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:df:e0:4e:49:6a:0a:25:83:82:0a:1c:62:c5:bd:1d:06:3b: 8d:06:1a:08:a7:94:52:f5:aa:3a:55:80:fe:eb:2b:a6:d5:ac: dc:14:dc:41:e3:7f:e9:07:2b:52:f0:1d:f5:64:9e:e0:6c:64: 4f:e6:78:12:08:b0:e7:c8:9b:3f:df:0f:60:02:b7:ec:43:88: 2f:b1:a3:d5:13:40:df:c5:a0:69:56:5c:f8:44:6c:b3:3d:13: 5b:73:4e:11:bd:c5:72:86:89:58:6e:b7:13:11:c1:bf:6b:b3: cf:8d:53:2a:11:df:2b:ab:1a:ad:8c:e8:b7:35:ca:f3:2b:6b: a4:57:86:dc:90:ac:96:7a:58:81:8a:6a:ea:ab:7e:b3:ca:91: ef:d0:2e:c9:d5:58:98:c7:e7:db:7f:16:f5:44:59:fc:1c:bd: 94:5b:31:35:54:5e:be:c4:f0:40:4e:42:a9:89:51:c5:86:24: 02:69:46:71:84:05:20:75:16:e1:12:13:94:51:09:de:02:de: da:3e:44:d9:5a:a2:aa:3a:48:70:04:d0:4d:80:6b:b1:9b:18: 88:13:26:99:23:b1:c7:99:80:6a:16:64:91:12:77:e8:be:18: b4:c9:96:21:29:fe:14:4a:d4:ba:9f:8d:aa:9b:49:50:c6:84: 3c:c8:2a:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNzE4MTQyODU3WhcNMjYwNzI1MTQyODU3WjAYMRYwFAYD VQQDEw02YTViOGRhOS1iZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+9Y53Uck6YsUFlOGAKU2AMzSIvVa3JXjT/tBKVEplISGiwbv+MymdAg6sVq i2H/1vvmwMJIlHZVqc86n9Opj2NBp7jt1OMjlufnsUbO4mD+BN2f2oHogBRag5LI S+75+gMPElUmO0p16/ve9Nnf8skFIZvjar8xw88wwP7JHBWuoZt0S1U0gF3FR7K1 M0QfRcALYaDD20gJ5p2sFoQAj0AhmgypItikEz+tOE6iRE2MlMBqaOfoYL50srXX fVitQtfc2Qu55ZfCM4nlhoTqF7dqFq6Uvr5IK+Kl36QkQeV5yYuSc5I0pGFdW+YR ESgHVgCADF/5D+85i19zkEUw+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCZn1/OF c1oFbawGl72qavtCqsZ8MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcd/gTklqCiWDggocYsW9HQY7jQYaCKeUUvWqOlWA/usrptWs3BTcQeN/6Qcr UvAd9WSe4GxkT+Z4Egiw58ibP98PYAK37EOIL7Gj1RNA38WgaVZc+ERssz0TW3NO Eb3FcoaJWG63ExHBv2uzz41TKhHfK6sarYzotzXK8ytrpFeG3JCslnpYgYpq6qt+ s8qR79AuydVYmMfn238W9URZ/By9lFsxNVRevsTwQE5CqYlRxYYkAmlGcYQFIHUW 4RITlFEJ3gLe2j5E2VqiqjpIcATQTYBrsZsYiBMmmSOxx5mAahZkkRJ36L4YtMmW ISn+FErUup+NqptJUMaEPMgqdg== -----END CERTIFICATE-----Generated at Mon Jul 20 07:57:05 2026 by rpki-client