$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: d+9gPsW8VpIlMN4Xvg/IjPTcXAV3+vQMZo3pmyOYuCQ= Subject key identifier: 4E:CD:75:F1:8C:94:A1:56:61:7A:A2:71:F2:D3:78:D2:B6:09:3F:89 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3588 Signing time: Fri 28 Aug 2026 14:28:50 +0000 Manifest this update: Fri 28 Aug 2026 14:28:49 +0000 Manifest next update: Fri 04 Sep 2026 14:28:49 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: WKzNOStz059ZxU7JUKHmbIDwdGE7Kv9FWZBF4y2N1I8=) 2: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 4: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 6: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 8: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 14:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13758 (0x35be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 28 14:28:49 2026 GMT Not After : Sep 4 14:28:49 2026 GMT Subject: CN=6a919b22-fecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:6c:0c:2e:b9:1f:c8:31:11:88:bf:da:20: 47:6f:8c:0c:5b:4c:a7:3f:63:9a:eb:67:ae:e6:6b: 41:ad:ce:b1:17:bc:d6:e3:b7:13:b3:76:b9:4e:28: 8d:40:97:a8:36:6a:79:05:41:67:65:4d:1d:fe:ad: d1:ac:e6:29:f9:c0:06:9a:c2:09:8f:ac:7d:0a:ff: 1c:bd:40:cb:30:d6:60:d0:c0:7f:7a:29:85:14:7e: 3f:dd:24:1f:2e:2e:4b:c7:51:48:79:d0:0e:b0:fe: de:7c:36:56:55:48:86:66:ae:d4:2e:ec:41:25:05: 76:4a:da:64:e7:42:4f:b7:7f:e2:e4:2f:fd:cb:ee: a0:e0:9b:db:19:48:4e:eb:2b:91:c9:56:22:dd:64: b1:8c:ec:f4:91:44:6b:ba:72:c8:9e:f7:29:06:7e: e4:99:b2:7a:9d:9e:79:88:af:2b:6f:a3:6d:19:c1: 5f:37:0b:cf:18:1c:11:a1:62:fe:80:78:85:e4:eb: f7:ab:fd:30:07:67:41:64:19:09:e4:b4:28:49:61: 6d:fe:b7:42:ef:72:47:4f:f3:c4:88:e0:25:38:2a: ea:65:a4:06:3b:3d:30:86:98:40:2d:a7:5e:7f:f2: 3b:54:b3:08:6c:52:07:5d:5c:a6:7b:24:41:c2:b7: 8f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:75:F1:8C:94:A1:56:61:7A:A2:71:F2:D3:78:D2:B6:09:3F:89 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:60:35:68:a5:63:1b:af:91:af:92:fd:1f:ca:19:4c:22:a0: 14:38:0c:60:2c:62:3f:3f:d1:4d:d0:1c:85:4f:9b:39:bd:f3: 5a:b7:f2:40:4c:17:a0:b5:31:35:c4:7e:4f:aa:d5:68:4f:f5: 38:ad:f4:9c:71:3f:1f:4c:5b:16:35:b5:a8:0b:07:16:50:d8: 08:18:38:88:df:e1:5f:4d:1c:08:b9:2b:f4:4d:98:f0:9e:c2: 0d:d4:1d:cc:92:66:66:e3:be:21:1e:18:3e:50:95:3f:ef:83: de:de:b0:5f:81:e8:fc:b7:0d:a3:e0:e9:6f:48:42:ea:4a:91: d8:8d:0a:29:9f:97:4d:7f:20:69:30:be:82:a2:73:9b:d8:09: 1c:6b:57:4e:f9:25:61:97:51:cf:2d:6e:59:ab:4c:88:4d:5d: 38:28:ca:36:c1:78:6c:c9:0a:7d:c6:22:96:2f:e6:4e:50:6e: 8f:96:e4:68:f9:7a:46:47:ea:cc:a5:fe:8c:5c:e4:69:18:54: 92:82:67:88:d2:7b:51:f8:ab:ed:b1:48:a1:4d:a3:b9:04:af: 47:48:20:22:ce:2b:b2:25:3c:4d:2e:bd:3d:f8:9f:d6:40:33: 0b:67:38:3b:3a:a4:aa:f8:69:32:aa:f9:f6:8c:78:ee:7f:e9: 7a:2c:cb:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwODI4MTQyODQ5WhcNMjYwOTA0MTQyODQ5WjAYMRYwFAYD VQQDEw02YTkxOWIyMi1mZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRBsDC65H8gxEYi/2iBHb4wMW0ynP2Oa62eu5mtBrc6xF7zW47cTs3a5TiiN QJeoNmp5BUFnZU0d/q3RrOYp+cAGmsIJj6x9Cv8cvUDLMNZg0MB/eimFFH4/3SQf Li5Lx1FIedAOsP7efDZWVUiGZq7ULuxBJQV2Stpk50JPt3/i5C/9y+6g4JvbGUhO 6yuRyVYi3WSxjOz0kURrunLInvcpBn7kmbJ6nZ55iK8rb6NtGcFfNwvPGBwRoWL+ gHiF5Ov3q/0wB2dBZBkJ5LQoSWFt/rdC73JHT/PEiOAlOCrqZaQGOz0whphALade f/I7VLMIbFIHXVymeyRBwrePZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7NdfGM lKFWYXqicfLTeNK2CT+JMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAumA1aKVjG6+Rr5L9H8oZTCKgFDgMYCxiPz/RTdAchU+bOb3zWrfyQEwXoLUx NcR+T6rVaE/1OK30nHE/H0xbFjW1qAsHFlDYCBg4iN/hX00cCLkr9E2Y8J7CDdQd zJJmZuO+IR4YPlCVP++D3t6wX4Ho/LcNo+Dpb0hC6kqR2I0KKZ+XTX8gaTC+gqJz m9gJHGtXTvklYZdRzy1uWatMiE1dOCjKNsF4bMkKfcYili/mTlBuj5bkaPl6Rkfq zKX+jFzkaRhUkoJniNJ7Ufir7bFIoU2juQSvR0ggIs4rsiU8TS69Pfif1kAzC2c4 OzqkqvhpMqr59ox47n/peizLkA== -----END CERTIFICATE-----Generated at Fri Aug 28 16:47:03 2026 by rpki-client