$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: x3EOrJiaM8rxrj72d4jjzSPp1Zl97Phl4hrVsjfp2ZY= Subject key identifier: 00:73:4D:6C:BB:F1:75:05:A2:2B:C0:67:38:C9:F6:8D:77:AE:9F:97 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 356E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3543 Signing time: Sun 26 Apr 2026 14:28:21 +0000 Manifest this update: Sun 26 Apr 2026 14:28:21 +0000 Manifest next update: Sun 03 May 2026 14:28:21 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: wKmWOgl+u8+smFJmYwK81hTOkHk9JSFS4vXzupoi4qM=) 2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 5: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 7: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 8: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 9: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 14:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13678 (0x356e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Apr 26 14:28:21 2026 GMT Not After : May 3 14:28:21 2026 GMT Subject: CN=69ee2105-0f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:23:d0:c8:bd:06:e6:ae:a9:23:85:23:a3: 7c:a2:5e:17:25:14:82:12:e8:07:15:58:b5:62:23: 13:99:8f:fe:48:90:4c:33:1a:01:d2:83:ea:d7:09: 2b:e7:b2:9d:7c:cf:ce:0b:80:10:c3:c0:13:47:75: ff:5e:45:4d:8b:a8:2d:b0:cf:f3:b2:4b:3a:ad:b0: af:21:9e:f9:52:c6:04:86:7b:aa:ae:a9:d2:e0:aa: 30:cb:66:b3:13:9d:71:be:ec:d8:1e:8e:03:d9:bb: a0:f6:63:99:e9:50:c5:c5:38:41:29:98:ae:1e:40: 22:0f:1a:b7:b3:e5:e7:9f:55:24:a6:3f:6d:8e:ef: c8:e0:27:62:ce:c5:58:83:d9:c1:9b:4b:10:b7:11: 7e:36:89:d3:ef:b6:ec:80:8c:18:01:da:87:8e:59: 00:41:70:76:54:7f:30:74:97:dc:52:a8:26:b4:c6: dd:8a:7d:4a:47:09:af:9e:dd:12:d9:39:71:54:c8: 39:50:89:39:75:88:f1:bd:73:16:6a:63:f8:8a:27: 34:51:db:fd:9e:45:5c:e8:01:e1:08:2a:7c:7b:43: 95:7e:5e:97:ae:1c:d0:b6:0d:88:aa:44:67:12:50: 26:1b:d0:cb:7e:6b:31:3e:90:4a:a6:68:4c:50:e3: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:73:4D:6C:BB:F1:75:05:A2:2B:C0:67:38:C9:F6:8D:77:AE:9F:97 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:38:ea:d6:82:f9:f4:42:22:e8:d9:32:aa:4c:70:db:f1:c3: 92:5a:29:c5:23:e4:15:8c:32:6e:63:5f:81:4c:ac:76:50:c9: 4a:73:5f:f3:e2:13:c1:18:e5:22:66:93:67:b5:a3:00:d8:33: 1a:73:b3:45:13:80:43:97:a3:56:e4:ed:00:72:7e:c9:b3:66: e1:7c:d7:81:8b:f6:46:6d:75:82:f1:e4:8a:e0:47:dc:d1:b4: f6:10:c3:6e:c9:47:73:c9:ab:ab:ff:69:af:57:b7:9a:83:26: 0f:5b:3b:ac:98:a8:84:93:ba:9e:a9:29:06:ef:50:85:2b:90: 45:c3:47:33:2f:6d:05:51:7c:19:e0:6c:b1:77:b0:44:1a:88: 57:4c:4f:fe:7f:8e:e2:22:ed:76:00:96:21:30:03:b2:30:d1: 84:4e:c0:36:54:39:eb:b5:2b:22:a3:8e:40:0c:d6:29:b8:09: d8:f4:58:51:52:02:2d:df:94:b2:a2:37:cc:ff:b1:90:6b:6b: ef:5f:4f:e5:9b:33:ee:92:80:00:80:6b:38:a2:49:6b:68:6d: 2f:c3:2f:fd:93:32:56:19:0b:e0:5f:db:5e:1f:57:ef:18:a8: 80:b9:f6:86:f5:5d:14:0e:05:15:e1:7a:93:16:8f:c5:5a:9e: de:8d:a3:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNDI2MTQyODIxWhcNMjYwNTAzMTQyODIxWjAYMRYwFAYD VQQDEw02OWVlMjEwNS0wZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfoj0Mi9BuauqSOFI6N8ol4XJRSCEugHFVi1YiMTmY/+SJBMMxoB0oPq1wkr 57KdfM/OC4AQw8ATR3X/XkVNi6gtsM/zsks6rbCvIZ75UsYEhnuqrqnS4Kowy2az E51xvuzYHo4D2bug9mOZ6VDFxThBKZiuHkAiDxq3s+Xnn1Ukpj9tju/I4CdizsVY g9nBm0sQtxF+NonT77bsgIwYAdqHjlkAQXB2VH8wdJfcUqgmtMbdin1KRwmvnt0S 2TlxVMg5UIk5dYjxvXMWamP4iic0Udv9nkVc6AHhCCp8e0OVfl6XrhzQtg2IqkRn ElAmG9DLfmsxPpBKpmhMUOMoTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABzTWy7 8XUFoivAZzjJ9o13rp+XMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEzjq1oL59EIi6Nkyqkxw2/HDklopxSPkFYwybmNfgUysdlDJSnNf8+ITwRjl ImaTZ7WjANgzGnOzRROAQ5ejVuTtAHJ+ybNm4XzXgYv2Rm11gvHkiuBH3NG09hDD bslHc8mrq/9pr1e3moMmD1s7rJiohJO6nqkpBu9QhSuQRcNHMy9tBVF8GeBssXew RBqIV0xP/n+O4iLtdgCWITADsjDRhE7ANlQ567UrIqOOQAzWKbgJ2PRYUVICLd+U sqI3zP+xkGtr719P5Zsz7pKAAIBrOKJJa2htL8Mv/ZMyVhkL4F/bXh9X7xiogLn2 hvVdFA4FFeF6kxaPxVqe3o2j0Q== -----END CERTIFICATE-----Generated at Mon Apr 27 11:42:48 2026 by rpki-client