$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: ZlZcvUAyjN5sFYStYU6qZdm2cH4Mtd84Qv25VFYjhI0= Subject key identifier: CF:D1:BF:02:C0:A0:C3:30:3F:A2:5A:64:42:A4:B3:8A:DE:B9:F6:C4 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 357C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3551 Signing time: Sun 24 May 2026 14:28:31 +0000 Manifest this update: Sun 24 May 2026 14:28:31 +0000 Manifest next update: Sun 31 May 2026 14:28:31 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: Hh8Lj2cSgS9OHd84dBIKXSKpnSFt/sV2b4G1x3wHl3I=) 2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 3: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 4: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 6: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 May 2026 14:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13692 (0x357c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: May 24 14:28:31 2026 GMT Not After : May 31 14:28:31 2026 GMT Subject: CN=6a130b0f-d66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:e2:42:54:6a:0f:a0:8d:8b:4c:bc:98:2c: e5:1f:67:5f:f7:6b:f5:5d:22:3c:8c:9d:cc:e4:60: 62:1e:17:c0:22:40:7f:ae:a5:5d:22:4c:e1:eb:03: 9a:f7:7b:93:1c:22:83:a1:66:42:08:48:96:da:b5: 08:b7:f6:3b:d5:ff:01:64:39:a0:d7:47:a4:25:64: 20:fc:15:a5:b3:62:39:f1:3d:b5:a0:47:bd:66:38: cb:15:d0:e9:f6:6d:49:48:47:71:a6:b0:93:45:2e: da:13:50:ef:a8:ac:4f:d6:9a:8d:5a:3c:0a:3a:ac: 81:24:23:52:11:0a:4e:26:1c:d2:d2:5c:60:de:b7: e5:4b:86:57:8d:4f:25:01:de:ea:53:ac:20:d3:dc: 9b:c2:32:68:86:98:c3:cf:2f:cb:aa:6c:10:a7:00: b6:82:09:6c:f6:e3:17:2f:11:ad:2d:86:ea:4f:49: 45:90:b7:3c:95:c0:e4:65:cc:44:e6:8a:12:64:83: 88:a1:30:34:da:ec:f3:e3:af:0e:76:00:c1:fb:4b: 61:92:9d:4a:ca:76:9f:a4:97:b0:5c:c1:79:2c:0a: 48:4f:9c:4b:6d:0b:01:61:e3:88:b9:ac:b9:89:3a: b0:88:83:ce:86:5e:e4:50:2a:01:d6:2f:8b:ba:9a: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D1:BF:02:C0:A0:C3:30:3F:A2:5A:64:42:A4:B3:8A:DE:B9:F6:C4 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:49:dd:12:36:03:ad:f9:47:cb:ef:ff:43:e9:17:cc:0b:af: 1a:73:c1:09:82:55:ce:90:c9:6a:b4:d8:8d:44:6b:77:3d:10: c0:41:43:35:0a:7b:60:48:12:a0:9e:33:7a:15:cd:4e:9e:0b: d8:50:c3:eb:b6:58:a0:a6:07:78:82:19:ed:f8:a6:0d:dc:a9: 59:6b:f0:9b:08:a0:01:5f:ea:23:00:68:fe:2a:70:4c:31:31: 8b:45:72:ab:4f:9d:cb:77:3e:f8:5c:82:bb:94:1a:2d:39:0c: 6f:da:62:e7:cc:92:da:f1:de:10:06:e8:57:24:96:1f:4c:85: 03:db:26:38:ad:aa:58:b0:4f:39:c7:13:53:f3:48:97:c7:f8: 1b:2e:3f:b5:f8:91:2f:26:d5:35:9a:9f:20:22:c2:c1:cd:37: 4f:f3:47:44:46:59:21:7b:fc:8f:95:9c:8e:c4:46:64:fd:0b: 3e:c1:e1:a5:6f:a7:6a:be:19:a7:77:05:cd:d1:21:df:ce:c9: dd:32:8a:ed:e1:b7:db:bf:19:e6:43:31:08:70:f7:d3:b3:ab: 70:fd:5e:83:4c:c6:23:42:d8:fc:76:06:0a:cc:83:54:38:db: dc:60:0b:d2:e3:7f:c0:f5:0f:6d:cd:4d:2e:6f:a3:28:da:9f: cb:e3:2e:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNTI0MTQyODMxWhcNMjYwNTMxMTQyODMxWjAYMRYwFAYD VQQDEw02YTEzMGIwZi1kNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn3iQlRqD6CNi0y8mCzlH2df92v1XSI8jJ3M5GBiHhfAIkB/rqVdIkzh6wOa 93uTHCKDoWZCCEiW2rUIt/Y71f8BZDmg10ekJWQg/BWls2I58T21oEe9ZjjLFdDp 9m1JSEdxprCTRS7aE1DvqKxP1pqNWjwKOqyBJCNSEQpOJhzS0lxg3rflS4ZXjU8l Ad7qU6wg09ybwjJohpjDzy/LqmwQpwC2ggls9uMXLxGtLYbqT0lFkLc8lcDkZcxE 5ooSZIOIoTA02uzz468OdgDB+0thkp1KynafpJewXMF5LApIT5xLbQsBYeOIuay5 iTqwiIPOhl7kUCoB1i+Lupq9nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/RvwLA oMMwP6JaZEKks4reufbEMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEUndEjYDrflHy+//Q+kXzAuvGnPBCYJVzpDJarTYjURrdz0QwEFDNQp7YEgS oJ4zehXNTp4L2FDD67ZYoKYHeIIZ7fimDdypWWvwmwigAV/qIwBo/ipwTDExi0Vy q0+dy3c++FyCu5QaLTkMb9pi58yS2vHeEAboVySWH0yFA9smOK2qWLBPOccTU/NI l8f4Gy4/tfiRLybVNZqfICLCwc03T/NHREZZIXv8j5WcjsRGZP0LPsHhpW+nar4Z p3cFzdEh387J3TKK7eG3278Z5kMxCHD307OrcP1eg0zGI0LY/HYGCsyDVDjb3GAL 0uN/wPUPbc1NLm+jKNqfy+MuDg== -----END CERTIFICATE-----Generated at Tue May 26 08:35:33 2026 by rpki-client