$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: bT0WCy8n5fK9gtDErWJ8yUPsbIvau2Wos2VmkjPvmrs= Subject key identifier: 7A:54:04:76:86:06:8F:C6:6C:9F:73:29:98:09:62:75:48:0B:CA:F5 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 35AA Signing time: Mon 02 Nov 2026 14:28:39 +0000 Manifest this update: Mon 02 Nov 2026 14:28:38 +0000 Manifest next update: Mon 09 Nov 2026 14:28:38 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: AbmaM/PZpnZU96ndQXp4vRw5cn5NFLRYwCXD7Zmr1Yo=) 2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 3: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 5: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 7: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 8: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 9: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 14:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13792 (0x35e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Nov 2 14:28:38 2026 GMT Not After : Nov 9 14:28:38 2026 GMT Subject: CN=6ae89e17-febc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:5a:16:75:f6:fe:e8:cd:c2:81:ef:f2:db: bf:6a:67:c9:44:43:22:fe:10:73:c8:00:fe:1b:c2: ea:d2:d9:19:d7:d3:4f:4c:d6:a3:67:d8:38:47:9d: d1:53:55:33:0b:97:77:58:fa:e6:30:20:98:94:fd: 8d:f4:92:53:42:a3:af:2a:a8:eb:6b:5c:cd:d0:62: d9:73:b0:d9:2a:b8:69:bf:6a:89:c0:b1:6a:50:37: df:2c:b3:0d:f8:f6:b2:d2:9e:04:a0:b3:f9:69:6c: c2:75:5e:89:c2:c3:f0:d7:51:a1:d4:c1:80:04:43: 1b:7e:40:66:8b:46:42:7e:fe:17:9a:fb:72:a1:a3: a0:2d:a7:41:4f:84:93:c3:dc:bb:c6:9b:e1:79:35: 97:fc:65:b7:50:2e:7c:9e:fa:69:c3:9b:c7:5d:4b: b2:16:aa:26:79:2e:cc:e6:ab:3f:69:8d:67:fc:ac: 8b:0e:f2:cd:f7:ec:71:6f:2e:c4:ea:8b:05:28:76: 7a:f1:38:9d:49:b5:18:8c:99:a9:37:26:e9:bc:50: 02:26:27:fe:47:70:dd:ad:49:c0:6f:11:d5:92:71: ce:0c:1e:08:8d:f5:24:5b:47:bf:36:f2:8f:86:5f: 1e:57:28:54:18:a6:2e:f0:22:d9:d2:9c:54:22:c5: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:54:04:76:86:06:8F:C6:6C:9F:73:29:98:09:62:75:48:0B:CA:F5 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d6:c6:ed:e3:01:04:99:6e:52:91:07:e9:1a:04:a8:55:12: f0:90:b8:4b:00:93:8b:1c:ad:2f:03:e8:05:e3:5f:d3:67:db: d9:b3:ed:c4:f0:cf:bf:3f:52:0d:30:04:99:15:79:4b:ab:b9: 63:65:1d:12:d1:98:81:39:ad:31:2d:8e:e2:d4:07:5f:ed:8c: 00:43:14:f7:d6:6d:b0:21:e3:03:50:3d:6d:bb:f4:75:d0:4c: 17:f7:26:82:83:ab:c5:f4:cf:54:c3:8a:7c:f8:50:7e:df:ed: ed:08:d8:38:7e:4e:c7:5d:be:ea:bf:cb:91:c9:59:2f:58:14: 27:6c:c0:6c:ad:ae:88:d5:f4:a3:df:8c:95:bf:43:0d:23:45: 3d:0c:55:7f:4b:d2:d9:86:fa:20:96:f0:f5:25:f3:31:cd:71: fd:4e:1e:71:92:26:f1:e5:f3:e5:1a:bc:12:37:d8:0f:05:89: ca:12:f5:66:86:41:52:27:c0:c6:19:09:f7:d2:b1:4a:20:d3: 67:d9:0c:e0:9b:b9:d1:77:b4:8e:63:89:68:18:7e:20:c1:9d: d8:f7:1f:ed:69:57:de:5e:3b:72:2b:30:8c:68:48:e9:16:12: 61:07:4f:70:f1:a3:d8:8e:fb:77:a9:ff:00:44:6d:34:8c:d7: 6f:2f:43:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYxMTAyMTQyODM4WhcNMjYxMTA5MTQyODM4WjAYMRYwFAYD VQQDEw02YWU4OWUxNy1mZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnD5aFnX2/ujNwoHv8tu/amfJREMi/hBzyAD+G8Lq0tkZ19NPTNajZ9g4R53R U1UzC5d3WPrmMCCYlP2N9JJTQqOvKqjra1zN0GLZc7DZKrhpv2qJwLFqUDffLLMN +Pay0p4EoLP5aWzCdV6JwsPw11Gh1MGABEMbfkBmi0ZCfv4XmvtyoaOgLadBT4ST w9y7xpvheTWX/GW3UC58nvppw5vHXUuyFqomeS7M5qs/aY1n/KyLDvLN9+xxby7E 6osFKHZ68TidSbUYjJmpNybpvFACJif+R3DdrUnAbxHVknHODB4IjfUkW0e/NvKP hl8eVyhUGKYu8CLZ0pxUIsXufQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpUBHaG Bo/GbJ9zKZgJYnVIC8r1MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWtbG7eMBBJluUpEH6RoEqFUS8JC4SwCTixytLwPoBeNf02fb2bPtxPDPvz9S DTAEmRV5S6u5Y2UdEtGYgTmtMS2O4tQHX+2MAEMU99ZtsCHjA1A9bbv0ddBMF/cm goOrxfTPVMOKfPhQft/t7QjYOH5Ox12+6r/LkclZL1gUJ2zAbK2uiNX0o9+Mlb9D DSNFPQxVf0vS2Yb6IJbw9SXzMc1x/U4ecZIm8eXz5Rq8EjfYDwWJyhL1ZoZBUifA xhkJ99KxSiDTZ9kM4Ju50Xe0jmOJaBh+IMGd2Pcf7WlX3l47ciswjGhI6RYSYQdP cPGj2I77d6n/AERtNIzXby9DaQ== -----END CERTIFICATE-----Generated at Wed Nov 4 11:22:00 2026 by rpki-client