$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: GMeGUiQRxxW4vYiNJYX5taSAkEkAbltQm82VcLPv+Sw= Subject key identifier: FA:5F:B3:DC:78:DC:CF:62:0F:E3:10:42:37:4C:3C:A8:0C:B7:9A:5C Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3586 Signing time: Mon 24 Aug 2026 14:28:37 +0000 Manifest this update: Mon 24 Aug 2026 14:28:37 +0000 Manifest next update: Mon 31 Aug 2026 14:28:37 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: sFDBhEPJszFtEGqU3GWX5NkST1TCwd7YuzV6/n+bKMo=) 2: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 4: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 5: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 6: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 7: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 8: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 9: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13756 (0x35bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 24 14:28:37 2026 GMT Not After : Aug 31 14:28:37 2026 GMT Subject: CN=6a8c5515-f205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:6b:ac:e5:60:a7:ef:1e:c4:ee:7b:6a:16: ba:8c:f2:86:14:51:11:e2:00:64:11:18:14:03:a4: 3f:ff:04:a8:b5:f4:ab:07:a8:92:45:4e:2a:54:63: 1b:e1:06:2f:0a:38:44:dc:f5:a8:fe:a1:95:96:43: 2b:e4:d7:4e:38:de:29:30:a9:0d:86:53:db:46:9f: 47:35:60:05:6b:ec:0c:3c:be:1e:bf:b2:65:64:6a: 76:1d:76:16:cb:3d:7b:80:66:68:e8:88:4c:7a:b5: 65:41:66:f7:47:ae:6a:4d:8b:39:ed:d2:3c:18:7d: b8:8d:39:c1:18:df:9e:25:bb:eb:89:c5:e4:c0:3d: 4a:93:9b:ea:b1:ca:a2:83:30:0e:4e:d3:7f:af:df: 99:4e:9e:14:68:b9:82:05:df:8d:e8:5d:9e:1a:f2: 05:c4:5b:25:8d:ec:74:9b:c8:9d:34:0a:55:ba:2d: c9:7c:5e:a1:4f:80:23:4a:5e:90:5b:67:57:e9:51: e7:52:21:ff:eb:69:49:a2:3c:b3:e7:47:ec:69:fb: c3:61:8c:14:96:8d:2c:35:29:fd:e4:af:48:cd:cf: 67:bc:ff:c5:e7:d8:27:a7:05:d4:54:e1:43:8d:ef: 4a:45:18:69:07:3c:4a:cc:51:3e:65:c4:bb:66:92: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5F:B3:DC:78:DC:CF:62:0F:E3:10:42:37:4C:3C:A8:0C:B7:9A:5C X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ef:c7:03:bd:59:71:e9:1a:b4:2f:f8:23:cc:69:21:c3:e6: ae:38:8a:02:07:71:6f:0b:b2:54:a5:fd:89:5b:38:c1:0c:55: ae:5b:6a:44:a9:3e:f1:e2:2e:5d:a1:dd:d4:a7:04:5a:51:7b: db:3c:2d:72:cc:9e:00:f9:7a:84:89:1f:13:9e:80:b7:37:8c: 5c:8f:69:5e:f7:bd:cd:fd:60:d7:ad:dd:fc:7c:ce:e9:0b:da: 67:eb:8b:73:cc:e7:dd:bf:45:42:06:e9:ee:a3:f9:11:4b:b9: 4d:c3:a1:42:3f:df:55:0a:1c:76:59:50:f3:7b:6e:e0:45:15: 56:a9:03:db:b6:58:ab:93:c0:03:19:d1:b3:3c:4c:80:35:ba: c0:63:39:5b:3f:42:18:7b:7a:50:b5:40:16:bf:34:f5:9b:ed: 47:1a:ff:fc:82:e8:3a:39:ff:97:4a:50:aa:f4:f1:e5:b5:f7: 0d:15:da:fc:89:05:20:da:35:f5:39:bf:ac:54:06:64:56:56: 90:72:78:12:cd:68:7a:29:17:35:0b:4a:67:05:77:88:95:ff: 02:66:55:e9:df:12:24:25:77:a7:06:4c:35:d9:33:69:d0:92: 12:9c:dd:1b:5c:04:4e:59:ea:3b:4e:e5:2c:27:5c:5f:e1:2f: 2e:3c:4a:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwODI0MTQyODM3WhcNMjYwODMxMTQyODM3WjAYMRYwFAYD VQQDEw02YThjNTUxNS1mMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZFrrOVgp+8exO57aha6jPKGFFER4gBkERgUA6Q//wSotfSrB6iSRU4qVGMb 4QYvCjhE3PWo/qGVlkMr5NdOON4pMKkNhlPbRp9HNWAFa+wMPL4ev7JlZGp2HXYW yz17gGZo6IhMerVlQWb3R65qTYs57dI8GH24jTnBGN+eJbvricXkwD1Kk5vqscqi gzAOTtN/r9+ZTp4UaLmCBd+N6F2eGvIFxFsljex0m8idNApVui3JfF6hT4AjSl6Q W2dX6VHnUiH/62lJojyz50fsafvDYYwUlo0sNSn95K9Izc9nvP/F59gnpwXUVOFD je9KRRhpBzxKzFE+ZcS7ZpIC2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpfs9x4 3M9iD+MQQjdMPKgMt5pcMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYO/HA71ZcekatC/4I8xpIcPmrjiKAgdxbwuyVKX9iVs4wQxVrltqRKk+8eIu XaHd1KcEWlF72zwtcsyeAPl6hIkfE56AtzeMXI9pXve9zf1g163d/HzO6QvaZ+uL c8zn3b9FQgbp7qP5EUu5TcOhQj/fVQocdllQ83tu4EUVVqkD27ZYq5PAAxnRszxM gDW6wGM5Wz9CGHt6ULVAFr809ZvtRxr//ILoOjn/l0pQqvTx5bX3DRXa/IkFINo1 9Tm/rFQGZFZWkHJ4Es1oeikXNQtKZwV3iJX/AmZV6d8SJCV3pwZMNdkzadCSEpzd G1wETlnqO07lLCdcX+EvLjxKWg== -----END CERTIFICATE-----Generated at Wed Aug 26 13:08:05 2026 by rpki-client