$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: oaWju8R/A63xMUev/3HbCt6GXgIbtZgDzVva/zjW+78= Subject key identifier: F5:6F:75:FA:00:5F:BB:66:98:FD:8A:AC:AF:78:F2:12:F3:17:9D:A7 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3539 Signing time: Mon 06 Apr 2026 14:28:04 +0000 Manifest this update: Mon 06 Apr 2026 14:28:03 +0000 Manifest next update: Mon 13 Apr 2026 14:28:03 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: nXGpPM/y3rAlD0Sd5mvmYq7Taq0ZJvHsy6l71UnJLHg=) 2: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 3: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 7: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 8: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 9: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 14:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13668 (0x3564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Apr 6 14:28:03 2026 GMT Not After : Apr 13 14:28:03 2026 GMT Subject: CN=69d3c2f3-2414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:fc:79:b1:83:e7:15:67:95:57:b3:90:c4: 0d:9c:96:30:4b:54:a8:b3:fb:44:f5:71:09:12:8c: 3f:32:51:3a:c7:a8:49:38:67:c5:d4:7c:19:35:70: 4e:79:a4:bd:95:53:bb:b3:38:14:b0:85:b7:df:08: e5:1e:9a:5d:9a:ca:7d:04:d3:12:b4:f0:df:fe:a5: b9:38:a2:84:9e:20:bf:dd:28:85:3d:40:3f:1e:a9: 4c:f6:ad:33:07:b5:8a:dd:aa:5d:00:52:9e:22:49: e7:e6:41:ba:28:ca:8c:6a:3d:6b:2a:2d:99:d9:bf: 04:16:ce:d2:71:ce:f1:00:81:34:25:cb:60:78:62: 43:95:b6:95:55:18:e4:7e:48:36:c8:5d:6b:bf:a8: d2:e8:f8:77:2f:9a:84:99:d5:d9:c3:6a:a1:ce:9f: 1f:98:fc:62:e6:7a:3f:3f:2f:4d:a1:02:47:e1:f3: 64:f6:33:19:11:6f:39:e2:cc:22:a9:59:ea:d7:e2: 52:63:a7:1d:11:8d:29:11:ae:9f:cd:5b:d4:26:62: 83:89:67:b5:5f:c5:c5:c9:1c:e3:f9:44:30:d5:0b: 34:32:35:56:49:e3:1c:31:99:de:2c:a5:7f:26:b9: 41:4e:3f:ba:d2:a4:20:7d:5b:7c:5d:08:a7:db:86: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6F:75:FA:00:5F:BB:66:98:FD:8A:AC:AF:78:F2:12:F3:17:9D:A7 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f6:9a:4e:49:36:9e:22:c1:66:fa:71:4d:70:36:96:e7:8f: 98:d1:d6:37:12:80:b9:5a:45:c5:44:4f:0d:1e:98:f2:7d:32: bf:69:6a:35:8f:2a:0b:59:1c:8f:9a:6f:f2:05:8b:9c:c9:55: 94:33:0b:4b:7b:a8:d2:f0:b0:22:4d:43:7d:09:90:36:56:c8: 58:77:82:8b:61:b6:7e:0b:f6:aa:54:cc:2e:2b:fd:03:53:f8: 83:92:e5:96:53:0a:06:0b:9e:aa:40:ab:62:fc:bf:6e:b7:c2: 11:20:68:b7:91:b2:3d:48:0c:b9:fb:56:c8:3a:19:d2:aa:33: 98:d0:64:e3:4a:b0:5a:80:e1:90:d3:f8:12:7e:3f:cb:d0:fb: 2c:e5:a4:ed:26:16:17:87:bc:89:07:80:fa:bb:8d:2d:e9:e1: 2e:3c:22:0e:75:0c:64:84:b5:a4:8c:e8:de:c7:4a:2d:d3:3c: 4f:ea:7e:d1:99:8e:6d:11:73:6c:2a:e2:7e:cd:a1:2e:56:69: f0:1d:a5:6f:22:4a:e0:1c:e3:c5:b1:87:fc:23:d5:fb:0a:d0: c1:21:0e:a8:63:5d:31:57:c1:e9:8b:ca:14:39:d3:68:0e:e8: 75:7a:9a:07:57:fe:9f:2e:ef:2e:82:ff:f8:8a:8b:88:3b:93: 59:36:6d:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNDA2MTQyODAzWhcNMjYwNDEzMTQyODAzWjAYMRYwFAYD VQQDEw02OWQzYzJmMy0yNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraT8ebGD5xVnlVezkMQNnJYwS1Sos/tE9XEJEow/MlE6x6hJOGfF1HwZNXBO eaS9lVO7szgUsIW33wjlHppdmsp9BNMStPDf/qW5OKKEniC/3SiFPUA/HqlM9q0z B7WK3apdAFKeIknn5kG6KMqMaj1rKi2Z2b8EFs7Scc7xAIE0JctgeGJDlbaVVRjk fkg2yF1rv6jS6Ph3L5qEmdXZw2qhzp8fmPxi5no/Py9NoQJH4fNk9jMZEW854swi qVnq1+JSY6cdEY0pEa6fzVvUJmKDiWe1X8XFyRzj+UQw1Qs0MjVWSeMcMZneLKV/ JrlBTj+60qQgfVt8XQin24Z3wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVvdfoA X7tmmP2KrK948hLzF52nMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtfaaTkk2niLBZvpxTXA2luePmNHWNxKAuVpFxURPDR6Y8n0yv2lqNY8qC1kc j5pv8gWLnMlVlDMLS3uo0vCwIk1DfQmQNlbIWHeCi2G2fgv2qlTMLiv9A1P4g5Ll llMKBgueqkCrYvy/brfCESBot5GyPUgMuftWyDoZ0qozmNBk40qwWoDhkNP4En4/ y9D7LOWk7SYWF4e8iQeA+ruNLenhLjwiDnUMZIS1pIzo3sdKLdM8T+p+0ZmObRFz bCrifs2hLlZp8B2lbyJK4BzjxbGH/CPV+wrQwSEOqGNdMVfB6YvKFDnTaA7odXqa B1f+ny7vLoL/+IqLiDuTWTZt4Q== -----END CERTIFICATE-----Generated at Wed Apr 8 05:13:54 2026 by rpki-client