$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: Q3rYI2SV5rW+HOvlXetVtTUjDcJuRdMgk1ppy7wqyUw= Subject key identifier: FD:C4:E6:00:F1:5A:D3:1A:2C:9B:0A:60:2E:E1:CB:FF:CF:4E:69:B5 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 352E Signing time: Mon 16 Mar 2026 14:27:38 +0000 Manifest this update: Mon 16 Mar 2026 14:27:38 +0000 Manifest next update: Mon 23 Mar 2026 14:27:38 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: u8L499pPaAPSfC/QPzWiNGViWZw4L/lPmtfnIhgeDxc=) 2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 6: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 7: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 8: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 9: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 14:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Mar 16 14:27:38 2026 GMT Not After : Mar 23 14:27:38 2026 GMT Subject: CN=69b8135a-99f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:de:c3:9c:57:b3:44:1d:30:ec:40:c7:97: 09:3d:2c:01:4a:90:24:21:7b:dc:1e:56:e4:a6:25: f9:6d:c0:96:76:e5:4b:ea:21:0d:a8:95:4f:75:8c: 61:52:e5:15:b4:4a:7e:f5:cf:c0:06:33:6f:7e:e3: bb:29:f9:d5:8e:dd:e4:e5:7f:93:f2:04:ae:72:12: e5:c8:c6:d4:32:5f:1e:a3:67:7e:9a:b9:ed:e1:68: fb:93:d8:bd:8c:25:75:70:ae:ff:b2:2c:88:87:5d: ec:47:c6:90:0d:d8:08:da:d3:f2:96:96:15:9e:64: ec:1c:4d:08:51:45:3a:d9:a5:ea:f9:2d:56:5c:d8: e9:dc:52:b1:8b:44:21:55:c0:58:8f:5e:27:a1:5b: 4b:8a:9b:a5:d9:a0:f2:bf:3a:71:22:93:12:87:db: 44:d5:cd:0c:ce:e5:30:f3:4b:70:98:d5:22:0a:a1: 34:87:8e:b5:0f:05:4d:b9:da:08:d6:39:fb:36:3a: 51:28:81:f2:2b:5b:32:24:2b:72:c8:9a:f4:a6:9b: 40:cc:46:cd:b5:8e:6b:46:46:35:ce:0c:23:73:23: b8:9b:d6:7f:8b:cd:fa:b4:e7:c9:22:42:92:f0:77: db:f6:59:51:5e:f4:f8:02:58:41:09:a1:ec:81:0d: ad:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C4:E6:00:F1:5A:D3:1A:2C:9B:0A:60:2E:E1:CB:FF:CF:4E:69:B5 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ab:66:a9:96:e9:0d:70:57:54:c8:9c:42:f2:bf:9f:51:f4: d3:45:de:75:28:79:08:43:9b:0e:fc:68:ac:0d:5c:ce:53:b5: c8:82:25:1e:ce:aa:33:0f:d3:c4:94:67:ef:bc:c3:40:2f:ad: a4:ec:ea:a7:c9:af:4f:f9:66:8a:ce:99:29:33:09:33:18:71: 20:a6:0d:d7:86:98:4d:1f:41:4c:7e:60:72:66:68:50:42:20: fc:4c:64:ae:bd:4b:37:43:df:33:93:5b:c8:f8:9c:cf:fc:4c: a5:4a:7a:20:ce:36:2f:79:e2:3a:c6:e1:b5:4a:98:07:ca:75: 9d:a8:e3:f0:9d:5f:7a:eb:ea:71:dd:f4:1a:08:ac:b9:ca:60: f4:2d:ec:02:60:2d:6b:5e:8b:d2:d9:09:c5:78:4f:f1:fd:b8: 4a:e0:ec:84:1c:de:aa:ab:b2:d2:99:c0:80:d3:a2:53:2e:ba: c6:fc:09:ba:02:cc:65:c7:33:d0:e1:60:be:4f:35:ae:e5:d9: 37:03:fe:e2:cb:0f:7a:13:7a:6d:9e:f7:af:32:19:66:81:37: 9d:45:8d:93:f4:26:71:1b:77:00:68:56:c2:ff:7b:8c:b0:5f: 7f:f9:d0:6f:5c:4a:05:f2:af:b2:5d:61:23:92:28:2e:30:cc: 96:d2:dd:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMzE2MTQyNzM4WhcNMjYwMzIzMTQyNzM4WjAYMRYwFAYD VQQDEw02OWI4MTM1YS05OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1S3ew5xXs0QdMOxAx5cJPSwBSpAkIXvcHlbkpiX5bcCWduVL6iENqJVPdYxh UuUVtEp+9c/ABjNvfuO7KfnVjt3k5X+T8gSuchLlyMbUMl8eo2d+mrnt4Wj7k9i9 jCV1cK7/siyIh13sR8aQDdgI2tPylpYVnmTsHE0IUUU62aXq+S1WXNjp3FKxi0Qh VcBYj14noVtLipul2aDyvzpxIpMSh9tE1c0MzuUw80twmNUiCqE0h461DwVNudoI 1jn7NjpRKIHyK1syJCtyyJr0pptAzEbNtY5rRkY1zgwjcyO4m9Z/i836tOfJIkKS 8Hfb9llRXvT4AlhBCaHsgQ2tYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3E5gDx WtMaLJsKYC7hy//PTmm1MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYatmqZbpDXBXVMicQvK/n1H000XedSh5CEObDvxorA1czlO1yIIlHs6qMw/T xJRn77zDQC+tpOzqp8mvT/lmis6ZKTMJMxhxIKYN14aYTR9BTH5gcmZoUEIg/Exk rr1LN0PfM5NbyPicz/xMpUp6IM42L3niOsbhtUqYB8p1najj8J1feuvqcd30Ggis ucpg9C3sAmAta16L0tkJxXhP8f24SuDshBzeqquy0pnAgNOiUy66xvwJugLMZccz 0OFgvk81ruXZNwP+4ssPehN6bZ73rzIZZoE3nUWNk/QmcRt3AGhWwv97jLBff/nQ b1xKBfKvsl1hI5IoLjDMltLd7A== -----END CERTIFICATE-----Generated at Tue Mar 17 05:37:29 2026 by rpki-client