$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: nTe0CdAxxIsLWdPCEdDQG96SoIcaXeoFFCSuMO2OdOg= Subject key identifier: D1:AE:3E:54:11:E8:13:17:90:31:3C:62:1C:EF:7F:D2:ED:93:9D:42 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 354D Signing time: Sat 16 May 2026 14:28:27 +0000 Manifest this update: Sat 16 May 2026 14:28:26 +0000 Manifest next update: Sat 23 May 2026 14:28:26 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: zM6xffDaW++bs+smFe2A5mvv5etrkjf9mRlK/iKwpAE=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 5: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 14:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13688 (0x3578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: May 16 14:28:26 2026 GMT Not After : May 23 14:28:26 2026 GMT Subject: CN=6a087f0a-e9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:ba:f9:e7:c9:3e:5a:c8:69:14:6d:c7:ae: 22:fc:a6:82:6a:8f:49:85:82:fc:2b:ef:14:41:16: c9:37:b4:1c:c4:99:03:21:c7:e7:d3:a3:e8:1b:4a: 12:9f:c2:8e:17:9c:99:ad:b2:0a:10:48:e5:0e:d5: ed:4f:e8:88:f2:96:77:75:61:b5:4e:09:bc:bf:7a: 6d:dc:10:80:c6:fa:fa:8c:38:46:95:b7:5d:12:2f: ff:8f:03:f3:dc:6c:4a:80:50:60:7e:be:ee:b3:4d: ac:e8:34:5c:58:c6:0b:a4:ba:e6:6e:bc:43:25:17: 11:f2:35:1d:ca:03:85:71:02:f9:2f:68:1c:86:a0: 34:77:b8:b1:47:84:ed:c6:f3:b6:85:88:2b:0a:99: 89:5c:67:a7:05:f9:e9:03:c9:09:6b:80:9b:bf:4f: 3b:ef:3d:6c:dd:95:a2:48:25:45:61:62:c0:bf:7b: 65:37:95:c5:b3:9f:84:15:43:8c:e3:31:df:d8:e3: 9b:10:e6:9b:b8:f7:5b:07:a7:12:12:89:ce:05:88: bb:84:9d:1c:59:96:3c:68:72:25:09:32:b1:04:68: 0b:f3:04:98:8f:69:b9:d1:bf:9e:99:87:ce:c3:62: e9:5c:bd:9d:87:7d:94:13:5b:c4:b7:21:6a:35:4f: 4a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:3E:54:11:E8:13:17:90:31:3C:62:1C:EF:7F:D2:ED:93:9D:42 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:00:aa:e4:17:58:f3:50:08:87:d6:e2:12:20:51:62:05:89: 13:95:e0:5a:1e:69:a7:f3:4f:a0:34:77:d1:37:f3:ad:dc:f5: 1c:1a:f7:6a:f4:29:1f:27:0c:2f:73:93:aa:7a:6a:bd:76:00: 39:f5:9e:ea:99:08:61:1b:fe:98:71:87:a3:be:8a:71:9e:31: 5e:56:e9:7b:c7:21:57:26:ca:fd:7f:43:8a:b0:3b:0c:9b:0b: ca:bd:9f:a1:b9:1b:57:ab:70:7b:94:43:10:5c:96:5e:6f:d1: 12:5f:9f:a6:73:6f:7d:3d:6d:25:2c:e6:86:c4:48:6c:9b:29: fa:af:de:9e:1f:c6:c5:ba:b4:2b:c5:98:ea:96:a8:69:80:2d: be:fb:34:13:1f:14:4d:fa:e1:55:bd:cd:2d:64:8e:65:62:bd: eb:72:64:1a:d5:a9:03:39:7c:95:36:e4:cc:56:44:bd:03:71: 4f:96:41:c4:9b:4b:d1:e5:95:94:75:8c:c8:ff:cc:54:c4:e3: c6:66:c1:74:ab:f7:2d:85:e1:80:0a:21:dc:2e:00:0a:16:cc: 94:b1:67:cf:db:34:6a:78:ae:d5:b0:70:b0:4b:f3:13:16:15: eb:c8:a3:98:2f:01:be:67:43:ac:72:1b:8b:38:20:c1:db:1f: eb:57:5a:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNTE2MTQyODI2WhcNMjYwNTIzMTQyODI2WjAYMRYwFAYD VQQDEw02YTA4N2YwYS1lOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDW6+efJPlrIaRRtx64i/KaCao9JhYL8K+8UQRbJN7QcxJkDIcfn06PoG0oS n8KOF5yZrbIKEEjlDtXtT+iI8pZ3dWG1Tgm8v3pt3BCAxvr6jDhGlbddEi//jwPz 3GxKgFBgfr7us02s6DRcWMYLpLrmbrxDJRcR8jUdygOFcQL5L2gchqA0d7ixR4Tt xvO2hYgrCpmJXGenBfnpA8kJa4Cbv0877z1s3ZWiSCVFYWLAv3tlN5XFs5+EFUOM 4zHf2OObEOabuPdbB6cSEonOBYi7hJ0cWZY8aHIlCTKxBGgL8wSYj2m50b+emYfO w2LpXL2dh32UE1vEtyFqNU9KnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGuPlQR 6BMXkDE8Yhzvf9Ltk51CMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANwCq5BdY81AIh9biEiBRYgWJE5XgWh5pp/NPoDR30Tfzrdz1HBr3avQpHycM L3OTqnpqvXYAOfWe6pkIYRv+mHGHo76KcZ4xXlbpe8chVybK/X9DirA7DJsLyr2f obkbV6twe5RDEFyWXm/REl+fpnNvfT1tJSzmhsRIbJsp+q/enh/Gxbq0K8WY6pao aYAtvvs0Ex8UTfrhVb3NLWSOZWK963JkGtWpAzl8lTbkzFZEvQNxT5ZBxJtL0eWV lHWMyP/MVMTjxmbBdKv3LYXhgAoh3C4AChbMlLFnz9s0aniu1bBwsEvzExYV68ij mC8BvmdDrHIbizggwdsf61daQA== -----END CERTIFICATE-----Generated at Mon May 18 04:00:21 2026 by rpki-client