$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: zxCkR7zZgBOqxf/m/+Tm3jloV43vVjup5Smu9p7ptz0= Subject key identifier: 16:96:04:0D:7A:F2:FF:43:7C:FA:6D:41:36:33:2C:CC:71:E2:6B:75 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 356B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3540 Signing time: Mon 20 Apr 2026 14:28:05 +0000 Manifest this update: Mon 20 Apr 2026 14:28:05 +0000 Manifest next update: Mon 27 Apr 2026 14:28:05 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: N+3i9NoRxImGu/DT9YlELMpdXkTHvQLMBnC2ugCWq40=) 2: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 3: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 4: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 5: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 6: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 7: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 9: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13675 (0x356b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Apr 20 14:28:05 2026 GMT Not After : Apr 27 14:28:05 2026 GMT Subject: CN=69e637f5-89cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:2f:b9:4f:40:39:e2:7c:f8:4f:ec:45:88: 00:77:41:b0:59:f3:86:85:a2:13:8c:1f:86:72:7d: d8:91:08:e6:51:3a:dc:72:21:3e:88:3e:4b:56:5b: 05:b0:bf:73:8f:6b:9d:cc:bd:c5:40:88:64:6f:f7: d3:23:f4:38:76:c0:38:9a:73:71:36:b0:fd:44:3f: 33:30:8d:72:cd:a2:15:fc:ed:d7:92:ec:03:4a:df: ed:df:4a:6e:a5:8c:c6:0b:c8:17:d4:d4:9e:a0:eb: da:86:ec:4a:42:79:2f:a9:d3:38:bb:06:1b:df:40: c6:86:58:01:18:38:18:b7:9b:ea:4e:be:0a:27:11: f8:df:06:fe:34:ee:0c:d7:68:2f:1b:cc:35:72:d0: 73:70:16:32:52:99:f1:cd:39:16:16:2e:27:c6:2f: 4a:4d:14:08:11:17:88:3f:0f:8d:00:54:60:55:4a: 0f:56:a6:45:52:42:05:c6:a9:d6:0a:7a:e9:5a:78: 1a:52:5b:14:b3:cb:94:bc:d7:ef:da:e2:61:32:6f: 61:60:b8:28:60:28:e5:dc:80:e3:cf:55:23:93:47: d6:78:e8:5c:87:64:39:a0:8a:7c:e0:09:8f:22:1a: cb:e0:9e:9e:a8:16:a1:7c:6b:77:70:35:2d:75:a7: d8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:04:0D:7A:F2:FF:43:7C:FA:6D:41:36:33:2C:CC:71:E2:6B:75 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f0:24:1e:23:b3:68:59:34:79:1b:f5:bf:14:87:dc:a5:50: f2:3a:88:9a:34:b5:73:63:56:29:64:ab:b0:75:45:1a:cb:d7: 79:6a:09:f5:36:48:37:55:95:19:67:5f:d2:18:aa:58:29:8d: 74:79:eb:cc:b0:7e:cc:01:78:af:9d:08:4f:9b:7f:4d:89:d5: 33:58:7d:06:d3:b2:34:7f:46:3a:48:a7:06:43:0a:f4:10:94: 04:ef:f0:9c:6a:9c:b0:7e:d8:61:39:c7:7c:23:bf:f1:bb:e4: 68:f8:8c:26:e4:63:4b:3b:bc:81:7d:81:9d:ec:d3:db:06:8a: 9e:cd:d2:ba:32:5d:cc:66:54:89:a8:2a:25:dd:e8:9a:b5:fd: 0a:2c:97:cd:d3:5a:1d:ba:82:4c:18:59:73:e3:2c:9a:2f:52: c0:a5:da:50:94:7c:cf:ed:d7:07:d3:bc:19:9f:de:a7:de:68: 2e:8a:2a:35:e0:10:66:c5:ba:54:7e:ef:68:a2:7e:b8:af:1f: 51:d1:a3:e2:36:92:6f:94:d9:5c:a6:19:78:1a:04:7a:16:de: 5c:da:c3:44:2f:53:59:6a:43:65:a2:93:49:5b:33:97:68:44: 46:15:ad:ea:76:5c:b6:93:ba:06:e7:54:06:06:fb:82:4c:1d: b7:3b:3a:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNDIwMTQyODA1WhcNMjYwNDI3MTQyODA1WjAYMRYwFAYD VQQDEw02OWU2MzdmNS04OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RovuU9AOeJ8+E/sRYgAd0GwWfOGhaITjB+Gcn3YkQjmUTrcciE+iD5LVlsF sL9zj2udzL3FQIhkb/fTI/Q4dsA4mnNxNrD9RD8zMI1yzaIV/O3XkuwDSt/t30pu pYzGC8gX1NSeoOvahuxKQnkvqdM4uwYb30DGhlgBGDgYt5vqTr4KJxH43wb+NO4M 12gvG8w1ctBzcBYyUpnxzTkWFi4nxi9KTRQIEReIPw+NAFRgVUoPVqZFUkIFxqnW CnrpWngaUlsUs8uUvNfv2uJhMm9hYLgoYCjl3IDjz1Ujk0fWeOhch2Q5oIp84AmP IhrL4J6eqBahfGt3cDUtdafYoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaWBA16 8v9DfPptQTYzLMxx4mt1MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkfAkHiOzaFk0eRv1vxSH3KVQ8jqImjS1c2NWKWSrsHVFGsvXeWoJ9TZIN1WV GWdf0hiqWCmNdHnrzLB+zAF4r50IT5t/TYnVM1h9BtOyNH9GOkinBkMK9BCUBO/w nGqcsH7YYTnHfCO/8bvkaPiMJuRjSzu8gX2BnezT2waKns3SujJdzGZUiagqJd3o mrX9CiyXzdNaHbqCTBhZc+Msmi9SwKXaUJR8z+3XB9O8GZ/ep95oLooqNeAQZsW6 VH7vaKJ+uK8fUdGj4jaSb5TZXKYZeBoEehbeXNrDRC9TWWpDZaKTSVszl2hERhWt 6nZctpO6BudUBgb7gkwdtzs6lA== -----END CERTIFICATE-----Generated at Wed Apr 22 09:02:36 2026 by rpki-client