$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: u443SsSmH1JygjYszt+cU6azhBKCDHFL8TzagFctcGE= Subject key identifier: 85:8D:33:D3:4C:3F:91:4E:F4:0C:F6:C7:C0:34:8E:2C:15:B1:90:62 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3557 Signing time: Thu 04 Jun 2026 14:28:20 +0000 Manifest this update: Thu 04 Jun 2026 14:28:19 +0000 Manifest next update: Thu 11 Jun 2026 14:28:19 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: XX7iHISBtil6P83qxiD4TQ31DILkYcgPk5ju2yX/Wz0=) 2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 3: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 4: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 5: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 6: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 7: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 9: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 14:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13698 (0x3582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jun 4 14:28:19 2026 GMT Not After : Jun 11 14:28:19 2026 GMT Subject: CN=6a218b84-6e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:1a:43:9e:2b:06:00:07:52:43:9c:4d:48: 17:a4:0e:66:60:ea:e8:7f:a8:1a:10:ba:80:47:0c: 95:c0:72:d2:a9:9c:51:87:40:00:e9:0d:fe:8d:ce: aa:00:a8:fb:a0:0c:23:7e:86:34:bd:24:19:09:83: ba:58:e7:b6:d5:d7:4c:61:08:db:e7:39:40:ee:0f: 1e:38:b5:a5:3e:c0:29:30:d0:aa:25:2f:ef:9a:96: 5c:f2:ef:63:73:62:9f:91:37:32:7a:f0:1b:04:3f: 11:6f:e2:58:be:19:df:e0:12:70:61:a4:31:67:c9: f4:cc:9f:af:98:35:c0:0d:ad:8c:20:0e:82:58:ba: 91:1a:50:7e:34:99:e0:b2:cf:a8:d5:2f:24:dc:27: 8a:fd:1d:03:c3:54:08:f4:96:96:dd:e2:df:28:4e: db:bd:8b:57:51:8c:d6:1b:f5:56:ae:e3:b5:fd:99: 24:d7:2d:af:99:56:5d:fb:21:78:e6:1e:56:6d:e5: df:26:9e:09:c5:a4:4a:6b:53:be:34:44:f1:24:37: cd:dc:eb:28:8e:7f:b1:a2:fd:ff:5d:f6:3e:bd:a1: 46:10:87:49:a9:6e:f8:21:41:18:df:f5:b8:62:87: 14:39:19:0d:66:5e:b4:75:01:22:6f:78:19:40:8f: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8D:33:D3:4C:3F:91:4E:F4:0C:F6:C7:C0:34:8E:2C:15:B1:90:62 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5a:ac:cd:70:a7:3d:04:0a:9a:40:9e:8b:8a:da:12:9f:9e: 82:3a:cb:de:20:56:ad:e1:41:12:3e:9d:7a:86:77:a7:b2:5f: 79:ae:2e:06:cc:2e:4d:60:75:6c:5f:5f:0f:6c:43:9a:ec:47: 8e:03:11:2d:5d:38:48:52:4e:bf:d9:59:91:81:9d:dd:71:f1: dc:83:2c:db:f1:94:31:72:88:8e:1f:89:bc:5b:eb:fa:18:ec: 76:0a:53:b8:03:c7:5c:a7:8d:3b:8b:a9:d0:80:56:64:3d:6c: 2b:e5:66:f1:b4:be:2d:ae:f2:53:20:20:8d:24:f9:a4:84:41: 38:0b:43:20:5c:0e:83:2b:dc:de:3b:45:2b:b2:34:93:5a:ee: 6c:3c:95:b5:19:57:e7:78:84:d9:b2:4a:03:ae:bd:03:87:4f: ff:6a:32:ea:55:f9:6e:e7:fb:35:c5:d6:e2:1d:e0:80:e0:96: 97:ee:07:5c:05:32:43:8b:48:2f:57:76:14:1e:8c:81:c0:27: 3e:86:4d:8a:b9:9b:39:47:e3:01:e4:51:d2:ac:01:39:5f:0f: e7:39:94:8e:31:07:e4:87:dc:f2:5c:36:61:1c:03:55:fe:5e: 74:e9:0e:b3:6c:dc:e4:53:2e:74:f0:29:29:71:eb:35:d8:83: 1d:af:ea:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNjA0MTQyODE5WhcNMjYwNjExMTQyODE5WjAYMRYwFAYD VQQDEw02YTIxOGI4NC02ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FAaQ54rBgAHUkOcTUgXpA5mYOrof6gaELqARwyVwHLSqZxRh0AA6Q3+jc6q AKj7oAwjfoY0vSQZCYO6WOe21ddMYQjb5zlA7g8eOLWlPsApMNCqJS/vmpZc8u9j c2KfkTcyevAbBD8Rb+JYvhnf4BJwYaQxZ8n0zJ+vmDXADa2MIA6CWLqRGlB+NJng ss+o1S8k3CeK/R0Dw1QI9JaW3eLfKE7bvYtXUYzWG/VWruO1/Zkk1y2vmVZd+yF4 5h5WbeXfJp4JxaRKa1O+NETxJDfN3Osojn+xov3/XfY+vaFGEIdJqW74IUEY3/W4 YocUORkNZl60dQEib3gZQI+UEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWNM9NM P5FO9Az2x8A0jiwVsZBiMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARlqszXCnPQQKmkCei4raEp+egjrL3iBWreFBEj6deoZ3p7Jfea4uBswuTWB1 bF9fD2xDmuxHjgMRLV04SFJOv9lZkYGd3XHx3IMs2/GUMXKIjh+JvFvr+hjsdgpT uAPHXKeNO4up0IBWZD1sK+Vm8bS+La7yUyAgjST5pIRBOAtDIFwOgyvc3jtFK7I0 k1rubDyVtRlX53iE2bJKA669A4dP/2oy6lX5buf7NcXW4h3ggOCWl+4HXAUyQ4tI L1d2FB6MgcAnPoZNirmbOUfjAeRR0qwBOV8P5zmUjjEH5Ifc8lw2YRwDVf5edOkO s2zc5FMudPApKXHrNdiDHa/q7w== -----END CERTIFICATE-----Generated at Thu Jun 4 20:04:30 2026 by rpki-client