$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: ZX8T8uktis+FptjMiqt+iF64779/UXwlzxzvApmcKWk= Subject key identifier: EB:F2:68:69:EA:B8:55:CD:E7:1F:77:21:10:79:26:7E:8A:0A:88:81 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3524 Signing time: Sat 28 Feb 2026 14:29:36 +0000 Manifest this update: Sat 28 Feb 2026 14:29:35 +0000 Manifest next update: Sat 07 Mar 2026 14:29:35 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 8a3u3QBCLJcTeVfHC3RXubW0o0cU2lzRetJ6nSrpuSI=) 2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: vjf6s0WckIOnw6RS4RFXugTG7+ioBExQoIxHaxpFjXU=) 3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=) 4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=) 5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=) 6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=) 8: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=) 9: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 14:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13636 (0x3544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Feb 28 14:29:35 2026 GMT Not After : Mar 7 14:29:35 2026 GMT Subject: CN=69a2fbcf-b340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:b2:1d:43:13:20:2b:94:52:9b:f0:4f:d7: 98:91:2c:13:9c:2e:63:76:e5:7d:c0:6c:c6:f1:59: f0:ef:16:71:c2:f2:f3:ee:da:f2:dc:ba:9c:5d:84: 4c:cf:8b:ed:1b:52:f7:2c:83:5c:48:ea:6f:65:af: b1:d8:35:b0:0c:a4:a6:39:62:c9:6f:e8:43:50:40: d3:1b:b3:cc:c1:bc:cf:ac:61:f1:19:6e:e9:fa:5b: 4a:cb:f5:04:b6:32:30:bc:93:b2:a8:1b:d3:a0:00: 17:8b:20:1f:8d:c8:59:cc:75:5e:97:ce:aa:7b:22: c7:dc:77:d9:1b:d6:4a:1a:4a:08:3b:54:fb:ab:b8: e2:34:a4:96:18:06:56:0f:65:78:5a:48:e9:52:5a: ab:8c:c0:88:e6:8f:c8:b0:1a:e3:4f:1e:22:df:0b: b4:e1:2d:4b:30:77:1f:5d:41:31:19:a8:c5:8e:7e: 07:d9:26:e8:31:6c:d0:a1:d4:b6:47:17:0a:8a:6c: 38:e4:62:47:96:16:69:7d:66:b5:97:63:04:6b:c6: 40:ea:59:b0:11:b4:f1:24:95:f6:94:45:84:28:6b: 5d:8f:af:c2:b0:ca:bb:a0:67:56:54:30:e9:4a:f4: 41:8c:8c:23:20:aa:ad:fa:bb:e2:78:00:26:1e:d6: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F2:68:69:EA:B8:55:CD:E7:1F:77:21:10:79:26:7E:8A:0A:88:81 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:35:73:a3:e1:8b:6a:16:04:c2:14:97:c0:03:d3:f5:5d:3d: 52:97:7f:59:93:7a:fc:8c:c6:b0:58:ce:c0:17:90:75:78:bc: af:c1:0b:b2:75:f2:e1:c3:37:79:68:37:ea:fb:38:b5:d7:10: ac:d8:ee:4e:87:2c:25:77:8f:6c:ae:dd:05:85:b0:78:88:89: 32:13:43:55:e3:f4:bb:d6:9a:20:fe:e4:63:29:90:12:f3:e7: 78:37:50:c8:84:2d:93:ac:b3:1c:01:13:24:b0:38:a8:f1:85: 57:21:d0:2e:10:6f:b0:71:99:e4:d5:4a:4b:1d:a5:90:c7:9d: 18:9f:f6:31:6e:68:95:85:a9:02:a7:b7:0a:63:19:b2:b9:a8: c8:17:b8:58:70:a1:64:16:c4:cc:67:69:2b:56:9c:41:ec:c1: ac:b8:38:1e:f0:84:a2:fa:a3:64:2f:9b:1a:45:8b:6c:e2:07: 94:c2:62:e2:b0:ba:18:9a:12:e2:8a:a1:9a:c5:bd:f2:59:8f: 56:70:91:93:6a:b1:e4:9f:00:67:00:31:e9:fd:73:f8:04:0b: 25:4b:66:ad:99:69:f7:67:bd:32:37:6b:0b:ee:03:48:30:1d: be:15:dc:49:49:26:d1:6d:05:19:ca:66:97:95:c6:12:e4:20: 8f:1a:6e:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMjI4MTQyOTM1WhcNMjYwMzA3MTQyOTM1WjAYMRYwFAYD VQQDDA02OWEyZmJjZi1iMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvziyHUMTICuUUpvwT9eYkSwTnC5jduV9wGzG8Vnw7xZxwvLz7try3LqcXYRM z4vtG1L3LINcSOpvZa+x2DWwDKSmOWLJb+hDUEDTG7PMwbzPrGHxGW7p+ltKy/UE tjIwvJOyqBvToAAXiyAfjchZzHVel86qeyLH3HfZG9ZKGkoIO1T7q7jiNKSWGAZW D2V4WkjpUlqrjMCI5o/IsBrjTx4i3wu04S1LMHcfXUExGajFjn4H2SboMWzQodS2 RxcKimw45GJHlhZpfWa1l2MEa8ZA6lmwEbTxJJX2lEWEKGtdj6/CsMq7oGdWVDDp SvRBjIwjIKqt+rvieAAmHtatJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvyaGnq uFXN5x93IRB5Jn6KCoiBMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAujVzo+GLahYEwhSXwAPT9V09Upd/WZN6/IzGsFjOwBeQdXi8r8ELsnXy4cM3 eWg36vs4tdcQrNjuTocsJXePbK7dBYWweIiJMhNDVeP0u9aaIP7kYymQEvPneDdQ yIQtk6yzHAETJLA4qPGFVyHQLhBvsHGZ5NVKSx2lkMedGJ/2MW5olYWpAqe3CmMZ srmoyBe4WHChZBbEzGdpK1acQezBrLg4HvCEovqjZC+bGkWLbOIHlMJi4rC6GJoS 4oqhmsW98lmPVnCRk2qx5J8AZwAx6f1z+AQLJUtmrZlp92e9MjdrC+4DSDAdvhXc SUkm0W0FGcpml5XGEuQgjxpu5A== -----END CERTIFICATE-----Generated at Sat Feb 28 21:23:37 2026 by rpki-client