$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: Le5scPYIDbKfIE6FbLS32aFcKUXIrhgaNAHSHGh3VWc= Subject key identifier: BE:7A:68:64:FA:AA:28:4A:B8:89:0B:86:64:35:EB:B2:9C:15:3F:81 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 358B Signing time: Wed 02 Sep 2026 14:28:32 +0000 Manifest this update: Wed 02 Sep 2026 14:28:31 +0000 Manifest next update: Wed 09 Sep 2026 14:28:31 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: BOTAvUpQiCNMOm5PD+bhNfDDdfWOmum0GpblEwN0gQs=) 2: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 3: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 7: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 8: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 9: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 14:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13761 (0x35c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Sep 2 14:28:31 2026 GMT Not After : Sep 9 14:28:31 2026 GMT Subject: CN=6a98328f-3c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:ae:0d:a1:b3:29:49:48:2b:2d:b4:3d:0d: 8a:9e:99:eb:b7:1c:19:e5:8f:b7:ee:6d:34:fe:c5: 57:bc:c8:eb:9f:f1:8f:5f:fe:c5:6b:43:c0:8d:5d: 69:31:1d:43:67:aa:be:b7:60:4d:2f:10:32:83:5e: 0b:9a:b1:b3:5f:9e:c7:c5:0f:d5:83:82:ce:07:fd: f7:29:0b:2a:c3:6d:72:49:95:88:d6:ce:c5:c2:de: f0:33:f1:4d:ee:bf:82:a8:db:39:e9:b4:01:3c:f9: 17:42:40:af:d9:26:4d:d1:74:f5:bd:02:47:13:a8: 93:6a:d4:6f:1c:76:ec:d1:bd:ad:84:9a:6b:76:40: 5c:78:01:27:d0:0f:95:c0:17:b2:0e:e3:41:c5:e2: a8:63:89:ae:b1:a5:86:1f:53:ee:af:22:b6:f6:49: 30:24:7c:a3:d0:35:f2:99:d6:f7:ce:64:63:6f:ff: 7d:0f:94:1d:69:85:a9:3d:b1:db:80:ce:26:6e:f9: 1c:ef:13:3e:cc:fd:4c:1a:40:56:a0:3a:61:24:f1: 1a:a7:9b:d3:ec:ff:da:87:fb:d0:a4:a5:25:2f:b8: b2:6f:0c:5c:51:6c:45:a4:71:f2:d9:62:e0:2e:a8: 23:b4:e2:f2:54:2c:75:b6:a4:ed:16:39:24:ba:e4: f4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7A:68:64:FA:AA:28:4A:B8:89:0B:86:64:35:EB:B2:9C:15:3F:81 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:77:e2:d9:4b:8e:1a:a8:f3:ca:2a:2c:22:35:58:87:17:ea: 9e:f3:84:43:5c:c3:cf:e3:d4:2a:79:48:af:37:eb:fb:65:2d: a0:f7:84:1c:44:11:70:71:01:8d:53:0f:27:38:5f:33:42:73: 3b:73:bb:54:20:8c:86:20:7e:35:6a:d1:7d:2e:2f:60:af:c9: 5b:fc:a5:cc:59:58:f2:52:14:79:4a:c6:aa:22:33:ec:00:79: ba:6b:df:63:ec:56:f8:10:9f:4f:4b:da:53:ab:c8:a2:6b:3d: f9:aa:8e:9b:71:a0:f9:fa:7d:7a:43:e5:c6:94:80:fa:0c:54: a5:77:f4:b4:da:71:2b:89:fd:95:df:a0:88:63:e9:13:57:94: cf:26:e8:32:00:54:9f:74:2a:ac:08:5d:c3:0e:bd:cb:fb:b8: 78:4b:78:3f:7b:b7:48:62:ef:06:fd:3c:4d:07:08:b9:6e:f4: 30:d9:81:d1:0a:1e:0e:53:c0:6a:e4:d4:16:17:34:2a:81:57: d9:9f:70:f8:aa:75:4d:48:1b:41:08:66:8c:d1:b8:c9:88:23: 1b:7c:41:15:d3:81:6e:6e:a1:82:de:e0:1a:2f:14:23:67:e0: 56:b0:3a:5c:0f:1c:ab:3c:e0:11:0a:c0:33:33:98:d9:26:0c: f5:9f:37:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwOTAyMTQyODMxWhcNMjYwOTA5MTQyODMxWjAYMRYwFAYD VQQDEw02YTk4MzI4Zi0zYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1diuDaGzKUlIKy20PQ2KnpnrtxwZ5Y+37m00/sVXvMjrn/GPX/7Fa0PAjV1p MR1DZ6q+t2BNLxAyg14LmrGzX57HxQ/Vg4LOB/33KQsqw21ySZWI1s7Fwt7wM/FN 7r+CqNs56bQBPPkXQkCv2SZN0XT1vQJHE6iTatRvHHbs0b2thJprdkBceAEn0A+V wBeyDuNBxeKoY4musaWGH1PuryK29kkwJHyj0DXymdb3zmRjb/99D5QdaYWpPbHb gM4mbvkc7xM+zP1MGkBWoDphJPEap5vT7P/ah/vQpKUlL7iybwxcUWxFpHHy2WLg LqgjtOLyVCx1tqTtFjkkuuT0QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL56aGT6 qihKuIkLhmQ167KcFT+BMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACHfi2UuOGqjzyiosIjVYhxfqnvOEQ1zDz+PUKnlIrzfr+2UtoPeEHEQRcHEB jVMPJzhfM0JzO3O7VCCMhiB+NWrRfS4vYK/JW/ylzFlY8lIUeUrGqiIz7AB5umvf Y+xW+BCfT0vaU6vIoms9+aqOm3Gg+fp9ekPlxpSA+gxUpXf0tNpxK4n9ld+giGPp E1eUzyboMgBUn3QqrAhdww69y/u4eEt4P3u3SGLvBv08TQcIuW70MNmB0QoeDlPA auTUFhc0KoFX2Z9w+Kp1TUgbQQhmjNG4yYgjG3xBFdOBbm6hgt7gGi8UI2fgVrA6 XA8cqzzgEQrAMzOY2SYM9Z83ZA== -----END CERTIFICATE-----Generated at Thu Sep 3 18:06:12 2026 by rpki-client