$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: 4Ad+3Ar43MB00SILQznckLuLQOlGBF4jYcnx10suOjQ= Subject key identifier: 1C:F9:0C:05:1C:2A:9D:FE:8C:01:E6:99:3E:5A:19:21:5E:C3:B4:0D Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3578 Signing time: Tue 28 Jul 2026 14:29:01 +0000 Manifest this update: Tue 28 Jul 2026 14:29:00 +0000 Manifest next update: Tue 04 Aug 2026 14:29:00 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: p0yHJNLU+9Ln/VTPdTc+d+oWOTUANgeq/uMfJaTzLEQ=) 2: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 4: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 6: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 7: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 9: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13742 (0x35ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jul 28 14:29:00 2026 GMT Not After : Aug 4 14:29:00 2026 GMT Subject: CN=6a68bcad-c28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:21:ef:c0:cf:97:13:e8:f9:1e:0a:6c:51: a8:ab:61:48:17:53:93:b7:11:e3:84:19:e4:fa:66: ab:f0:6a:19:ae:75:49:7f:fe:cd:b1:4a:22:0a:cf: 3c:56:7e:7e:0c:3d:76:a9:96:c7:69:fe:57:30:a0: ba:54:34:c7:bf:12:21:3b:ee:c9:f1:0e:d8:88:24: 19:f1:d8:2d:b2:18:09:c9:ce:c4:9a:1f:11:05:9b: 5b:85:4d:47:84:83:dc:af:aa:72:36:14:cc:5b:ac: 35:92:03:d9:95:4a:33:20:f3:7b:68:8a:b5:81:e7: 58:e9:1d:9b:13:f0:d0:bd:1c:be:bc:5c:78:8e:21: f7:c7:4a:d5:f5:ff:da:f4:eb:b3:bc:d1:55:7c:48: 9d:a3:96:d7:f1:b6:ca:2b:6f:73:22:51:68:21:fc: 2c:17:99:0b:f8:79:db:b4:74:02:93:3e:25:99:81: 05:19:fa:f0:c7:ac:59:bb:96:4c:53:88:41:b7:c1: f6:9a:f3:db:9d:6c:00:d7:ba:88:44:51:9f:fe:9d: 33:52:4f:a3:db:8a:6f:61:bd:47:08:44:88:62:4d: 93:67:e5:6f:2c:16:9a:16:08:a7:fe:af:29:f1:89: e9:cf:2f:e4:9e:10:e0:46:41:ab:3f:8f:e3:cb:6f: 7e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F9:0C:05:1C:2A:9D:FE:8C:01:E6:99:3E:5A:19:21:5E:C3:B4:0D X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:47:03:d0:f6:44:25:5e:f3:4a:81:87:81:0d:f7:8d:47:f9: a3:66:e3:30:62:60:64:36:1a:d4:7e:85:df:17:89:6c:18:88: 51:95:f9:59:d5:d1:f1:ae:bb:46:45:5f:68:5b:2a:fc:a6:ce: 26:53:75:c5:3b:9e:59:de:1b:83:76:5c:df:09:be:f8:a0:20: 92:c9:9e:19:88:1b:8b:7c:29:b2:b7:0b:00:09:84:31:be:6f: b0:ce:f1:1c:d3:49:c1:f1:e9:29:f1:b7:82:c4:53:c4:49:ea: 2f:d0:6f:2d:e0:0b:4f:b2:66:a8:ac:f7:26:25:be:83:38:e0: 3f:c6:fd:9f:88:87:4c:a9:e6:69:13:8d:26:2b:17:c9:25:0c: ad:dd:07:f9:16:17:64:8a:d1:1a:39:c3:e1:a0:d0:e3:81:1d: 12:bf:19:25:b5:63:ba:c7:80:c7:0e:ff:f1:0c:55:8a:e2:2c: 3b:d7:48:32:0f:ba:2c:da:88:7f:79:de:a5:4a:d5:9b:ce:fc: da:78:5b:0b:d3:23:fd:c8:ef:66:04:11:63:4d:87:92:5d:3e: e2:a5:f2:1a:9c:29:23:27:28:71:21:86:8a:02:70:30:21:1a: a3:fa:10:37:41:51:ff:52:55:ef:97:9f:f5:42:54:be:41:0b: e5:a4:9c:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNzI4MTQyOTAwWhcNMjYwODA0MTQyOTAwWjAYMRYwFAYD VQQDEw02YTY4YmNhZC1jMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl0h78DPlxPo+R4KbFGoq2FIF1OTtxHjhBnk+mar8GoZrnVJf/7NsUoiCs88 Vn5+DD12qZbHaf5XMKC6VDTHvxIhO+7J8Q7YiCQZ8dgtshgJyc7Emh8RBZtbhU1H hIPcr6pyNhTMW6w1kgPZlUozIPN7aIq1gedY6R2bE/DQvRy+vFx4jiH3x0rV9f/a 9OuzvNFVfEido5bX8bbKK29zIlFoIfwsF5kL+HnbtHQCkz4lmYEFGfrwx6xZu5ZM U4hBt8H2mvPbnWwA17qIRFGf/p0zUk+j24pvYb1HCESIYk2TZ+VvLBaaFgin/q8p 8Ynpzy/knhDgRkGrP4/jy29+hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBz5DAUc Kp3+jAHmmT5aGSFew7QNMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe0cD0PZEJV7zSoGHgQ33jUf5o2bjMGJgZDYa1H6F3xeJbBiIUZX5WdXR8a67 RkVfaFsq/KbOJlN1xTueWd4bg3Zc3wm++KAgksmeGYgbi3wpsrcLAAmEMb5vsM7x HNNJwfHpKfG3gsRTxEnqL9BvLeALT7JmqKz3JiW+gzjgP8b9n4iHTKnmaRONJisX ySUMrd0H+RYXZIrRGjnD4aDQ44EdEr8ZJbVjuseAxw7/8QxViuIsO9dIMg+6LNqI f3nepUrVm8782nhbC9Mj/cjvZgQRY02Hkl0+4qXyGpwpIycocSGGigJwMCEao/oQ N0FR/1JV75ef9UJUvkEL5aScmQ== -----END CERTIFICATE-----Generated at Wed Jul 29 09:16:15 2026 by rpki-client