$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: 4zeQOsERQNAbuctMXaQ6Yf98jeMGTn2p8osU8DT6S9I= Subject key identifier: F6:80:1B:DC:BC:D1:E0:E0:88:E7:E7:3C:30:8B:E0:8D:86:F0:D7:54 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 357B Signing time: Sun 02 Aug 2026 14:28:47 +0000 Manifest this update: Sun 02 Aug 2026 14:28:46 +0000 Manifest next update: Sun 09 Aug 2026 14:28:46 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: UfsvzMf5NT2Bdzd0ORQe+1/gnyiQaFJ26cxKqmonhK4=) 2: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 3: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 5: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 9: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 14:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13745 (0x35b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 2 14:28:46 2026 GMT Not After : Aug 9 14:28:46 2026 GMT Subject: CN=6a6f541e-6dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:6e:40:9e:ea:e1:82:6e:98:91:2d:82:01: 03:e1:27:ff:9e:fa:06:e7:5b:ee:fb:4a:75:75:a2: e7:ed:83:58:e1:bd:a7:6d:41:e4:ff:12:02:78:84: 71:cf:32:e2:d8:9d:ca:2c:8b:4b:44:0d:2c:7e:6e: e7:9a:12:4f:ba:32:52:bd:e1:a7:0e:b6:f4:c4:3a: 6e:82:0e:ae:7f:a6:e9:c2:e8:7b:69:cf:34:c5:30: 82:b5:e7:0a:af:34:6f:e5:32:cf:d2:46:94:98:b4: bd:47:97:f1:c9:78:a5:65:cc:e0:ef:3f:0d:87:ca: bd:e2:c6:08:20:17:a9:ad:d1:9a:dd:15:c9:7e:cc: 48:83:e6:07:a0:3c:ac:03:1b:ae:2b:ed:00:fe:00: a9:25:d6:17:cf:ea:c0:73:b2:ca:73:b3:17:db:67: 8d:47:6c:8f:50:fa:18:2e:9f:4b:32:4e:f5:34:97: df:94:38:1c:f6:2d:ce:ab:f8:ee:a3:61:99:8b:c2: 16:cc:4a:6f:b6:1c:b1:7f:d7:6c:cb:38:b5:10:39: e9:ce:b3:2c:f7:e3:e6:c9:82:28:c4:89:20:71:9a: e8:45:7c:e8:5f:4b:49:64:1b:c8:f6:d7:92:4e:34: f3:2e:5f:19:03:46:65:02:14:b0:7f:c3:f1:b4:18: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:80:1B:DC:BC:D1:E0:E0:88:E7:E7:3C:30:8B:E0:8D:86:F0:D7:54 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:da:2f:0d:5a:a9:84:81:5f:eb:fd:c8:e4:d0:a7:d9:f4:bb: a1:28:34:86:78:e5:49:9b:29:b5:cc:16:7c:86:37:bb:94:8a: 23:46:64:d6:1b:9b:86:4c:55:eb:5b:9c:dc:cf:4b:dd:64:4d: ea:9c:cc:d5:00:7c:3d:fc:4e:0b:74:40:68:3a:c6:31:a7:29: 38:55:10:9d:ae:98:e4:7a:9d:9d:85:17:32:71:96:24:63:46: 01:0e:c0:0f:f0:fd:1d:3c:df:27:05:17:7f:0d:cd:b5:a6:c0: 58:b3:60:28:3d:70:b7:43:b2:01:d0:80:72:ae:66:a9:f6:ee: f0:be:b7:0c:15:40:16:85:63:fd:cd:93:f0:3d:f9:4c:fe:6c: a4:81:eb:fb:d2:0d:d4:50:10:e7:74:68:d8:e3:99:6f:fd:5d: 04:0a:f4:a7:ab:8b:db:f2:f1:a8:47:cc:08:22:6f:68:23:c2: 40:c7:9d:ba:c2:17:89:1b:e4:be:2e:ca:b5:40:cc:7f:da:9f: a6:55:92:aa:63:a1:24:a0:9c:fb:5c:9f:55:2e:7f:82:74:6f: a7:f3:cf:a5:44:e1:51:43:44:49:e2:f9:8c:f1:95:f1:37:18: 36:81:6e:7b:c9:f1:ae:8d:19:43:43:85:0a:cb:1d:97:f0:1c: 0a:bf:32:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwODAyMTQyODQ2WhcNMjYwODA5MTQyODQ2WjAYMRYwFAYD VQQDEw02YTZmNTQxZS02ZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucRuQJ7q4YJumJEtggED4Sf/nvoG51vu+0p1daLn7YNY4b2nbUHk/xICeIRx zzLi2J3KLItLRA0sfm7nmhJPujJSveGnDrb0xDpugg6uf6bpwuh7ac80xTCCtecK rzRv5TLP0kaUmLS9R5fxyXilZczg7z8Nh8q94sYIIBeprdGa3RXJfsxIg+YHoDys AxuuK+0A/gCpJdYXz+rAc7LKc7MX22eNR2yPUPoYLp9LMk71NJfflDgc9i3Oq/ju o2GZi8IWzEpvthyxf9dsyzi1EDnpzrMs9+PmyYIoxIkgcZroRXzoX0tJZBvI9teS TjTzLl8ZA0ZlAhSwf8PxtBhMwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaAG9y8 0eDgiOfnPDCL4I2G8NdUMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABdovDVqphIFf6/3I5NCn2fS7oSg0hnjlSZsptcwWfIY3u5SKI0Zk1hubhkxV 61uc3M9L3WRN6pzM1QB8PfxOC3RAaDrGMacpOFUQna6Y5HqdnYUXMnGWJGNGAQ7A D/D9HTzfJwUXfw3NtabAWLNgKD1wt0OyAdCAcq5mqfbu8L63DBVAFoVj/c2T8D35 TP5spIHr+9IN1FAQ53Ro2OOZb/1dBAr0p6uL2/LxqEfMCCJvaCPCQMedusIXiRvk vi7KtUDMf9qfplWSqmOhJKCc+1yfVS5/gnRvp/PPpUThUUNESeL5jPGV8TcYNoFu e8nxro0ZQ0OFCssdl/AcCr8yzA== -----END CERTIFICATE-----Generated at Tue Aug 4 11:25:38 2026 by rpki-client