$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: zftSfxwxPihAjo7jFjlDUJN0pCsa9TjRFXorE2o1SlE= Subject key identifier: B8:04:95:1E:32:32:88:82:BB:D9:C9:65:29:57:F3:78:4D:36:E2:CD Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 357A Signing time: Fri 31 Jul 2026 14:31:49 +0000 Manifest this update: Fri 31 Jul 2026 14:31:49 +0000 Manifest next update: Fri 07 Aug 2026 14:31:49 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: yueLiI1BoC2MDf23WplZLqd+HROTTgUA3Dofg3h/Qek=) 2: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 3: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 6: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 7: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 9: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Aug 2026 14:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13744 (0x35b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jul 31 14:31:49 2026 GMT Not After : Aug 7 14:31:49 2026 GMT Subject: CN=6a6cb1d5-6661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:a0:64:e4:e8:7e:c9:ab:4a:d5:97:9f:95: 5a:fa:be:98:55:bb:c5:3d:a6:86:62:28:3c:10:5d: 10:04:10:a1:eb:a6:ea:38:59:6f:7d:83:13:fa:d3: a3:3d:23:ea:d2:00:a5:bc:c3:c4:4c:50:95:a6:3f: f4:a3:77:77:d9:47:15:97:c3:00:84:ee:37:29:74: 11:d0:65:c4:df:12:3e:6e:7b:4e:8e:9e:17:7f:2d: 27:5c:da:46:6e:5f:ac:47:3e:8c:88:99:d5:9a:95: d2:35:15:f8:24:8a:50:c3:a6:33:cc:c0:a0:c2:37: 04:09:a8:be:98:14:36:e1:b5:62:6a:1b:a7:f5:25: 48:66:c4:bd:a5:2c:0d:ac:93:77:5c:db:91:24:51: b6:6b:43:8f:54:f2:f7:37:2b:d0:7a:b9:f4:06:da: bd:71:75:15:4e:07:5a:00:5f:99:c0:87:98:87:80: e6:75:5d:f4:e8:6f:d8:e6:cb:b9:c1:d3:33:0d:99: e2:76:3c:16:db:29:9f:83:c8:f5:ee:df:76:08:d6: e2:10:b8:80:92:16:8f:ed:cc:93:cf:e1:bc:6c:d2: 1a:0d:c7:53:fa:6f:67:81:02:37:66:82:a1:e7:a2: 23:42:96:a3:d5:d7:2c:bc:71:31:a1:7d:59:d0:e3: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:04:95:1E:32:32:88:82:BB:D9:C9:65:29:57:F3:78:4D:36:E2:CD X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7e:8b:cf:06:2a:9f:73:9e:e0:14:7d:03:39:a0:62:8c:3d: ac:24:5a:ca:6d:1f:90:5b:93:6e:7e:3a:59:19:ce:bb:d0:14: 13:84:0c:da:17:59:32:2d:9e:98:7f:8c:a6:4f:d9:0f:b1:ce: 6b:b1:6f:cc:24:bd:9a:60:20:ee:42:de:b2:f8:ab:8d:9b:a5: b7:ea:25:f3:0e:94:ed:45:1d:9d:df:98:79:5a:80:38:c7:29: 72:8c:0e:46:d7:97:9d:df:08:3c:89:2b:96:9a:71:20:78:6a: 85:9e:a3:8b:a2:39:e6:54:83:37:53:92:11:40:ab:00:4d:59: 0b:dd:ca:4e:75:f3:c6:93:8e:8b:dc:c0:34:ac:f0:3f:7b:3d: de:92:0d:97:4c:b3:29:34:f1:1f:d8:a1:87:07:f1:81:be:b8: 6e:67:d7:ea:dd:2b:56:2f:a1:b0:ca:16:97:78:d8:91:f0:4e: 43:31:99:09:ff:66:9e:6c:ed:aa:ad:53:f3:cf:f5:98:de:a3: 84:46:01:62:43:24:1e:54:02:48:34:67:4d:f6:6e:cc:d0:7e: 92:0d:f5:25:2d:42:e5:70:45:6b:a7:bf:61:22:6f:12:9d:77: 0a:11:f3:51:a9:c7:10:96:b5:6f:fe:b6:62:5a:04:7c:3e:ea: b3:90:0d:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNzMxMTQzMTQ5WhcNMjYwODA3MTQzMTQ5WjAYMRYwFAYD VQQDEw02YTZjYjFkNS02NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8mgZOTofsmrStWXn5Va+r6YVbvFPaaGYig8EF0QBBCh66bqOFlvfYMT+tOj PSPq0gClvMPETFCVpj/0o3d32UcVl8MAhO43KXQR0GXE3xI+bntOjp4Xfy0nXNpG bl+sRz6MiJnVmpXSNRX4JIpQw6YzzMCgwjcECai+mBQ24bViahun9SVIZsS9pSwN rJN3XNuRJFG2a0OPVPL3NyvQern0Btq9cXUVTgdaAF+ZwIeYh4DmdV306G/Y5su5 wdMzDZnidjwW2ymfg8j17t92CNbiELiAkhaP7cyTz+G8bNIaDcdT+m9ngQI3ZoKh 56IjQpaj1dcsvHExoX1Z0ON9gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgElR4y MoiCu9nJZSlX83hNNuLNMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnX6LzwYqn3Oe4BR9AzmgYow9rCRaym0fkFuTbn46WRnOu9AUE4QM2hdZMi2e mH+Mpk/ZD7HOa7FvzCS9mmAg7kLesvirjZult+ol8w6U7UUdnd+YeVqAOMcpcowO RteXnd8IPIkrlppxIHhqhZ6ji6I55lSDN1OSEUCrAE1ZC93KTnXzxpOOi9zANKzw P3s93pINl0yzKTTxH9ihhwfxgb64bmfX6t0rVi+hsMoWl3jYkfBOQzGZCf9mnmzt qq1T88/1mN6jhEYBYkMkHlQCSDRnTfZuzNB+kg31JS1C5XBFa6e/YSJvEp13ChHz UanHEJa1b/62YloEfD7qs5ANiw== -----END CERTIFICATE-----Generated at Sat Aug 1 09:37:47 2026 by rpki-client