$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: FTT6PS5uXii5OEy4SjeUnR807lTHDnWMYPEjIP73R6A= Subject key identifier: E1:7A:AA:93:D5:6E:B3:C8:C9:63:41:37:D0:CF:7E:EB:B0:2B:BE:C4 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3596 Signing time: Thu 24 Sep 2026 14:28:19 +0000 Manifest this update: Thu 24 Sep 2026 14:28:18 +0000 Manifest next update: Thu 01 Oct 2026 14:28:18 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: XIvGEQY3RwglBL5RZHvTGWACVUFBDItnLWvD65yeJq8=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 4: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 6: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 7: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 8: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13772 (0x35cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Sep 24 14:28:18 2026 GMT Not After : Oct 1 14:28:18 2026 GMT Subject: CN=6ab53383-132a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:cc:c3:0d:50:42:d3:8f:48:e3:fc:9a:59: 25:11:f3:39:00:f4:d2:f3:89:2d:0b:c3:9e:dd:47: c6:e0:1d:52:a1:8f:e7:86:59:70:23:2e:5c:27:08: 0e:9b:df:76:11:43:7a:5f:8b:64:fa:7e:b4:a9:36: 02:45:a4:3a:06:17:57:52:13:ce:ff:7d:4e:b6:b8: 3a:a6:52:cb:4e:f6:7f:6b:73:3d:d9:70:a6:4a:2d: 07:d1:44:81:c2:1d:44:cf:53:b9:44:9f:9e:4e:38: 90:a6:72:bf:4f:54:7f:c3:36:85:b4:a2:c6:66:5e: e8:8f:97:a8:1e:19:ed:93:4f:76:93:65:b1:be:54: 87:e9:4f:b6:3c:9e:1f:5b:49:3d:d9:3a:2b:3c:50: 43:67:da:cc:b1:55:e4:c4:fd:83:96:bb:1b:16:19: 5b:f4:44:54:41:54:ab:83:41:6e:f2:5f:d0:6b:b0: 0f:9b:6a:b6:f8:af:88:f0:5d:ad:18:db:cf:f3:3b: 8d:d0:c3:96:5c:75:1e:de:36:97:4c:bd:f2:97:01: 7c:f8:5f:22:7e:9f:87:17:90:da:08:bb:87:0b:21: 0c:2e:f1:aa:b5:69:0d:77:3b:88:bf:88:0e:ba:ce: 9b:87:19:15:75:49:df:b1:30:54:4c:70:1f:90:b3: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7A:AA:93:D5:6E:B3:C8:C9:63:41:37:D0:CF:7E:EB:B0:2B:BE:C4 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:16:95:3c:76:49:e5:b8:8f:63:d0:55:6d:8d:59:97:f6:32: 91:ed:83:8c:8a:24:46:7e:34:bd:6d:9a:c5:79:b8:60:fd:1e: 02:0f:c7:df:51:33:96:37:8b:d4:d3:93:12:7e:be:e7:05:01: 5f:e6:39:93:9a:30:16:ff:7e:c0:c1:fa:91:2f:9c:49:6c:e3: b2:3c:d3:cf:57:81:56:1f:de:a3:1b:23:00:a2:87:97:00:7b: 13:04:4e:ca:4f:9b:94:f9:f5:b1:25:d9:66:78:08:51:7c:ca: e0:14:26:51:cd:5c:e6:2f:f7:91:d0:91:6a:de:86:69:57:12: 45:30:52:5a:04:23:d0:8c:53:32:e4:7e:3e:64:cf:3d:3f:9c: 9d:39:67:f3:93:d4:7c:43:f3:fa:eb:b6:f8:fa:13:c2:8d:53: 24:73:96:dd:4d:3f:67:db:42:d4:ef:18:f9:6d:43:b1:4e:c3: 46:14:1f:52:3c:c9:81:d3:b2:e5:bb:a8:2d:81:b5:0a:04:62: 10:ab:0f:28:79:6f:cf:49:13:05:5e:7b:04:aa:de:45:c0:45: 3c:10:22:a9:2c:cd:39:d5:a3:49:0a:30:a4:24:4e:c9:e5:26: 8c:0f:57:e1:c5:7d:05:5d:3d:ad:e6:72:71:d2:92:a8:73:6c: f6:2a:5f:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwOTI0MTQyODE4WhcNMjYxMDAxMTQyODE4WjAYMRYwFAYD VQQDEw02YWI1MzM4My0xMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrbMww1QQtOPSOP8mlklEfM5APTS84ktC8Oe3UfG4B1SoY/nhllwIy5cJwgO m992EUN6X4tk+n60qTYCRaQ6BhdXUhPO/31Otrg6plLLTvZ/a3M92XCmSi0H0USB wh1Ez1O5RJ+eTjiQpnK/T1R/wzaFtKLGZl7oj5eoHhntk092k2WxvlSH6U+2PJ4f W0k92TorPFBDZ9rMsVXkxP2DlrsbFhlb9ERUQVSrg0Fu8l/Qa7APm2q2+K+I8F2t GNvP8zuN0MOWXHUe3jaXTL3ylwF8+F8ifp+HF5DaCLuHCyEMLvGqtWkNdzuIv4gO us6bhxkVdUnfsTBUTHAfkLN6aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOF6qpPV brPIyWNBN9DPfuuwK77EMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATxaVPHZJ5biPY9BVbY1Zl/Yyke2DjIokRn40vW2axXm4YP0eAg/H31EzljeL 1NOTEn6+5wUBX+Y5k5owFv9+wMH6kS+cSWzjsjzTz1eBVh/eoxsjAKKHlwB7EwRO yk+blPn1sSXZZngIUXzK4BQmUc1c5i/3kdCRat6GaVcSRTBSWgQj0IxTMuR+PmTP PT+cnTln85PUfEPz+uu2+PoTwo1TJHOW3U0/Z9tC1O8Y+W1DsU7DRhQfUjzJgdOy 5buoLYG1CgRiEKsPKHlvz0kTBV57BKreRcBFPBAiqSzNOdWjSQowpCROyeUmjA9X 4cV9BV09reZycdKSqHNs9ipfZw== -----END CERTIFICATE-----Generated at Fri Sep 25 09:48:29 2026 by rpki-client