$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: ZCt+44Fp5QnQfzoPf99Q8XnytZE7YrlzfONr0xxqWPA= Subject key identifier: 2A:F6:B2:13:81:E3:91:08:C0:D4:66:3E:64:B8:DC:87:9C:13:E8:1B Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3564 Signing time: Mon 22 Jun 2026 14:28:18 +0000 Manifest this update: Mon 22 Jun 2026 14:28:18 +0000 Manifest next update: Mon 29 Jun 2026 14:28:18 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: HUqgc68jUJVrmRM3oOxa64oVaw8FPxiipbNNhSFgiU8=) 2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 3: A05116766B2311F1965223AA8747A888.roa (hash: FjxodfmopqbPlzog3jfw0EAZ9HHXwsMpESjOWoQMzg4=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 6: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 7: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 14:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13714 (0x3592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jun 22 14:28:18 2026 GMT Not After : Jun 29 14:28:18 2026 GMT Subject: CN=6a394682-6dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:0f:a7:5e:e9:ce:6e:5e:98:87:d2:c2:f6: b4:61:93:30:a0:e7:aa:08:53:8a:63:8e:2c:ad:65: b9:d2:8a:08:80:ad:c3:fd:14:4b:6d:03:32:a6:23: af:bc:53:b0:ae:e2:e6:74:ec:4c:09:bd:cb:30:06: 48:44:2f:c1:1f:f4:57:f5:4a:c9:06:f0:6e:db:a5: fd:63:2c:d8:39:02:54:db:16:43:ba:23:73:32:07: 36:0d:6d:c6:d8:5d:8f:fd:d0:3b:c8:70:74:ce:f9: d6:f2:fb:0d:f4:89:6f:cb:b3:89:9b:ee:97:a7:22: 82:b3:84:37:c0:0e:15:9d:01:5b:32:e9:eb:d2:f3: e4:76:56:a0:36:3a:40:f0:0b:9f:3c:77:51:de:a2: a3:f3:33:95:e4:64:f0:0d:27:49:1a:67:c7:15:f7: 41:bc:a7:c1:aa:bf:41:24:25:99:d7:0b:f3:5b:68: 76:06:45:18:ba:01:80:c8:40:e2:36:95:04:4b:52: 1c:ca:f8:f4:ab:8a:a8:59:e7:c6:6b:11:db:ad:cf: d6:0d:65:14:c9:7b:7f:89:55:dc:bc:58:1c:96:3b: 7f:25:b8:47:3f:33:9b:7f:33:c6:41:d8:fc:36:81: 50:55:ee:81:ba:51:c6:ed:a4:50:7f:37:26:52:0b: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F6:B2:13:81:E3:91:08:C0:D4:66:3E:64:B8:DC:87:9C:13:E8:1B X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:de:a6:50:56:11:14:77:89:8e:37:af:e9:76:2d:54:5f:77: 57:75:e7:ff:32:fa:9a:05:4f:af:89:91:8c:28:cb:b2:5b:fa: 10:f3:c7:eb:db:4b:b0:62:81:94:b3:d5:2a:d9:75:74:fb:80: 5a:71:ee:d0:a9:f5:aa:5e:cf:0f:cf:fc:e9:0a:39:1f:75:36: 04:0d:d9:fc:e1:46:88:9f:aa:75:9d:8b:53:a2:90:34:43:04: 5a:bb:5f:9b:c5:83:66:f0:2e:ac:aa:e7:66:03:ca:1f:02:24: 5a:c0:62:e0:79:af:9c:31:3d:b9:b0:db:de:de:de:28:79:f4: e7:0a:30:a8:e2:0f:f1:06:25:f2:00:f0:41:32:67:18:5a:a9: ec:e9:4b:db:d9:5e:c8:56:f8:25:05:f1:77:f9:11:dc:9d:ce: 72:0f:79:0f:e1:86:b5:9a:ff:94:3e:c3:b0:d0:f4:5e:33:d6: 07:22:56:95:4a:cf:72:b2:fc:fe:b0:cc:36:75:df:ab:0e:54: 73:3e:52:48:6a:9e:77:eb:92:29:ab:85:a8:fa:ed:c7:4e:f7: 7d:91:ad:b6:11:de:b1:50:8f:54:42:2b:a2:c7:0f:48:20:fc: 62:df:77:8b:0d:4a:e1:ae:ce:ce:9f:9c:b7:5f:ba:22:04:ec: 0a:76:2b:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNjIyMTQyODE4WhcNMjYwNjI5MTQyODE4WjAYMRYwFAYD VQQDEw02YTM5NDY4Mi02ZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqO8Pp17pzm5emIfSwva0YZMwoOeqCFOKY44srWW50ooIgK3D/RRLbQMypiOv vFOwruLmdOxMCb3LMAZIRC/BH/RX9UrJBvBu26X9YyzYOQJU2xZDuiNzMgc2DW3G 2F2P/dA7yHB0zvnW8vsN9Ilvy7OJm+6XpyKCs4Q3wA4VnQFbMunr0vPkdlagNjpA 8AufPHdR3qKj8zOV5GTwDSdJGmfHFfdBvKfBqr9BJCWZ1wvzW2h2BkUYugGAyEDi NpUES1Icyvj0q4qoWefGaxHbrc/WDWUUyXt/iVXcvFgcljt/JbhHPzObfzPGQdj8 NoFQVe6BulHG7aRQfzcmUgsFhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCr2shOB 45EIwNRmPmS43IecE+gbMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtd6mUFYRFHeJjjev6XYtVF93V3Xn/zL6mgVPr4mRjCjLslv6EPPH69tLsGKB lLPVKtl1dPuAWnHu0Kn1ql7PD8/86Qo5H3U2BA3Z/OFGiJ+qdZ2LU6KQNEMEWrtf m8WDZvAurKrnZgPKHwIkWsBi4HmvnDE9ubDb3t7eKHn05wowqOIP8QYl8gDwQTJn GFqp7OlL29leyFb4JQXxd/kR3J3Ocg95D+GGtZr/lD7DsND0XjPWByJWlUrPcrL8 /rDMNnXfqw5Ucz5SSGqed+uSKauFqPrtx073fZGtthHesVCPVEIroscPSCD8Yt93 iw1K4a7Ozp+ct1+6IgTsCnYrJA== -----END CERTIFICATE-----Generated at Mon Jun 22 22:51:46 2026 by rpki-client