$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: JJXQMwirnTbFLsdbkt9hc+0ZXiR4MdxSUO1ziOp/RjU= Subject key identifier: 4B:BD:7D:AB:8C:36:FB:3F:7B:B5:7A:99:5B:7A:96:81:83:0D:EC:3A Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 353D Signing time: Tue 14 Apr 2026 14:28:17 +0000 Manifest this update: Tue 14 Apr 2026 14:28:17 +0000 Manifest next update: Tue 21 Apr 2026 14:28:17 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: DXM2iyTz9FGFQlX7giyfJy3xl8jvm2p/paFy0pyVrOo=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 6: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 8: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 9: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13672 (0x3568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Apr 14 14:28:17 2026 GMT Not After : Apr 21 14:28:17 2026 GMT Subject: CN=69de4f01-49bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:c8:ee:63:75:8c:5a:8e:4c:8c:a3:24:12: c7:3e:9c:b3:d5:c3:22:a2:72:0f:ec:fe:f1:02:f8: a1:df:41:43:fa:6d:93:f6:3d:f8:d7:f0:9e:d6:87: 57:f4:3c:df:62:61:a4:42:14:ca:e7:c5:12:6b:88: 38:0a:b7:0d:d2:30:e4:15:b9:f6:3b:f2:0a:52:9d: e4:73:70:7f:0d:92:35:b5:20:23:12:f2:a0:da:ed: 18:e3:24:6e:48:d8:9a:ab:b6:2f:aa:88:92:5e:59: 7b:38:02:a9:be:36:60:40:0b:68:5d:1a:a7:ef:6c: d7:e2:05:89:fe:82:b1:af:0e:f9:cc:8f:1c:d2:d7: cb:fa:87:10:ce:bb:cf:65:1b:bc:b5:fa:3f:90:80: 3f:90:18:93:fd:cc:7e:8f:6b:c1:bc:b9:6a:ab:5d: ca:c3:57:fd:74:95:29:e2:d4:1d:d9:8c:ab:f5:3d: 5a:25:cd:32:9e:90:2b:54:c1:14:be:a4:d9:e0:50: 5b:66:6c:b7:42:61:ce:6e:cf:a6:df:77:c9:3c:ac: 3c:e7:4c:b7:a6:38:f7:bb:21:4b:fb:91:75:85:c9: 73:3e:7e:9e:cd:ca:36:96:8b:b7:4a:c0:e3:21:32: cd:c3:99:6d:45:22:7a:ee:7e:23:89:1e:dd:86:50: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:7D:AB:8C:36:FB:3F:7B:B5:7A:99:5B:7A:96:81:83:0D:EC:3A X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2a:25:5a:16:4a:31:68:ee:21:04:59:55:b4:c4:3d:8f:0b: 93:a1:2f:7a:42:7f:31:1d:44:db:ee:4e:40:ef:76:e8:e8:2a: 12:51:e8:05:1d:ef:bf:cf:ef:64:4f:cf:c5:9e:ed:b5:8e:91: 3e:fa:d8:72:65:dc:a4:74:5e:c3:88:e4:49:dd:c8:c8:94:5f: a9:fa:8b:ae:72:07:bf:41:a9:ec:fc:8c:81:37:23:6d:ec:a3: 84:54:ef:93:57:22:64:20:0b:7a:e7:37:41:da:9c:4f:a5:c9: 16:cc:78:d0:b7:e3:d4:65:57:97:0c:10:fd:cb:2c:a6:bd:2c: bb:33:c4:ec:36:2c:af:b9:d4:1c:72:f5:97:07:a4:fa:eb:9f: 9e:2e:17:37:c6:c2:12:30:0e:fe:ca:e5:a8:10:65:28:67:50: a2:05:8f:6a:38:b5:a8:18:07:d8:e1:11:25:fe:76:8d:f4:ea: 8c:0f:1c:18:28:c7:6d:52:df:08:34:a6:a5:62:f1:d2:14:9d: 2b:e2:f9:1e:ae:af:2b:8c:3d:d4:bd:bd:a4:97:d9:a3:4e:00: 64:b8:dc:be:94:32:6f:7a:22:36:35:ad:b3:38:76:fc:67:d9: ca:e5:6c:4d:95:e4:38:cc:fe:61:64:10:d2:01:34:c2:8e:77: 12:b5:b4:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNDE0MTQyODE3WhcNMjYwNDIxMTQyODE3WjAYMRYwFAYD VQQDEw02OWRlNGYwMS00OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj27I7mN1jFqOTIyjJBLHPpyz1cMionIP7P7xAvih30FD+m2T9j341/Ce1odX 9DzfYmGkQhTK58USa4g4CrcN0jDkFbn2O/IKUp3kc3B/DZI1tSAjEvKg2u0Y4yRu SNiaq7YvqoiSXll7OAKpvjZgQAtoXRqn72zX4gWJ/oKxrw75zI8c0tfL+ocQzrvP ZRu8tfo/kIA/kBiT/cx+j2vBvLlqq13Kw1f9dJUp4tQd2Yyr9T1aJc0ynpArVMEU vqTZ4FBbZmy3QmHObs+m33fJPKw850y3pjj3uyFL+5F1hclzPn6ezco2lou3SsDj ITLNw5ltRSJ67n4jiR7dhlDoLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEu9fauM Nvs/e7V6mVt6loGDDew6MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFyolWhZKMWjuIQRZVbTEPY8Lk6EvekJ/MR1E2+5OQO926OgqElHoBR3vv8/v ZE/PxZ7ttY6RPvrYcmXcpHRew4jkSd3IyJRfqfqLrnIHv0Gp7PyMgTcjbeyjhFTv k1ciZCALeuc3QdqcT6XJFsx40Lfj1GVXlwwQ/csspr0suzPE7DYsr7nUHHL1lwek +uufni4XN8bCEjAO/srlqBBlKGdQogWPaji1qBgH2OERJf52jfTqjA8cGCjHbVLf CDSmpWLx0hSdK+L5Hq6vK4w91L29pJfZo04AZLjcvpQyb3oiNjWtszh2/GfZyuVs TZXkOMz+YWQQ0gE0wo53ErW0aw== -----END CERTIFICATE-----Generated at Wed Apr 15 07:10:47 2026 by rpki-client