$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: +CXjUP0PZSOO23QI0Xm2JGyQwsoCA1ik80Rva1QLlMI= Subject key identifier: 0E:91:C2:17:D8:76:11:23:6D:2A:3C:8D:0A:79:8D:50:33:05:65:FC Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 356D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3542 Signing time: Fri 24 Apr 2026 14:28:13 +0000 Manifest this update: Fri 24 Apr 2026 14:28:13 +0000 Manifest next update: Fri 01 May 2026 14:28:13 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: cO9KJruJJ6mTCWOrinInfvRo7dZMh1I20eD7a2CSkd4=) 2: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 3: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 4: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 5: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 6: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 7: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 8: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 9: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 May 2026 14:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13677 (0x356d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Apr 24 14:28:13 2026 GMT Not After : May 1 14:28:13 2026 GMT Subject: CN=69eb7dfd-1861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:da:9c:e5:ec:3a:4f:d8:cc:f9:ae:30:c9: b1:e3:4b:ff:97:d7:1f:f5:bd:c2:1a:79:8f:11:97: da:ef:9f:fe:d9:98:27:6f:db:59:2c:d0:05:e0:1d: 26:ca:51:c6:43:4c:16:66:5e:df:b5:ef:d8:d4:f8: 63:0a:b8:cc:93:e7:2e:14:32:d8:9a:0a:68:7e:1e: 34:48:1d:e7:ce:8f:fa:af:ce:67:cd:29:6c:c4:75: a6:d8:aa:e8:3d:8a:ce:15:21:d3:8d:13:b9:51:bc: 8c:7b:2c:92:31:67:fe:3e:cb:eb:3c:38:a8:02:80: 29:7b:a0:3c:45:a4:54:c2:b7:0b:77:95:ed:ca:43: 40:1b:05:e4:3e:70:32:8b:42:1f:ad:c9:56:8a:e4: c0:b5:d1:47:6a:08:fc:93:e1:60:ab:fc:a0:c2:16: f7:a8:57:d2:17:f9:86:d5:a2:28:e7:9b:2a:2e:81: 35:9c:ae:a9:23:0a:d6:9c:33:6d:ff:85:10:20:3e: 2c:16:0b:a0:75:a2:8b:ff:f7:66:ae:b7:54:c3:16: 62:09:da:24:7a:e5:bf:76:b1:cf:45:d6:09:93:aa: 52:f3:5d:60:47:4d:be:b9:f9:1c:fb:16:56:54:68: 38:3f:25:d7:5f:eb:3c:15:fa:c1:51:4c:ea:7c:c9: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:91:C2:17:D8:76:11:23:6D:2A:3C:8D:0A:79:8D:50:33:05:65:FC X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:76:37:eb:63:0b:1b:97:ba:c1:33:b5:39:b3:0a:da:04:97: 9f:07:88:d3:59:c3:c8:92:5f:46:73:ed:79:86:19:78:c0:eb: a5:59:59:8f:c4:a4:05:43:24:cb:76:b5:b6:89:37:45:e5:d7: b6:11:0f:19:2c:fe:33:fc:85:9f:ef:86:43:36:4e:c7:75:fc: a0:db:36:f9:c5:23:ec:41:5e:ee:72:59:2d:b3:e2:ad:f6:ee: 87:84:19:29:bc:ba:7e:b7:9b:82:4a:74:21:22:17:85:d9:3d: 1f:bb:00:4f:c7:b8:4f:3e:20:50:08:af:5c:a7:cc:59:20:89: 72:8c:63:71:ce:83:5c:29:b5:25:5f:3d:6b:12:f9:70:30:90: e5:67:75:e2:12:66:fc:d1:11:fb:db:e0:34:19:e9:f1:f9:fe: b5:73:14:04:c7:d7:bf:de:62:71:31:93:42:15:88:4c:bd:90: 62:80:37:83:4b:29:5e:82:aa:85:35:f3:21:5b:7c:ce:75:10: f4:70:78:5b:d1:87:aa:42:b2:2c:5c:6c:9f:23:23:5c:4f:f9: c4:69:2a:4e:3d:b8:1a:d2:57:45:66:a1:44:b9:c7:09:e1:ba: dc:44:52:d2:44:c2:7a:d0:4f:09:de:df:8f:04:6b:4c:be:81: 44:a2:25:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNDI0MTQyODEzWhcNMjYwNTAxMTQyODEzWjAYMRYwFAYD VQQDEw02OWViN2RmZC0xODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVranOXsOk/YzPmuMMmx40v/l9cf9b3CGnmPEZfa75/+2Zgnb9tZLNAF4B0m ylHGQ0wWZl7fte/Y1PhjCrjMk+cuFDLYmgpofh40SB3nzo/6r85nzSlsxHWm2Kro PYrOFSHTjRO5UbyMeyySMWf+PsvrPDioAoApe6A8RaRUwrcLd5XtykNAGwXkPnAy i0IfrclWiuTAtdFHagj8k+Fgq/ygwhb3qFfSF/mG1aIo55sqLoE1nK6pIwrWnDNt /4UQID4sFgugdaKL//dmrrdUwxZiCdokeuW/drHPRdYJk6pS811gR02+ufkc+xZW VGg4PyXXX+s8FfrBUUzqfMlcJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6RwhfY dhEjbSo8jQp5jVAzBWX8MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALHY362MLG5e6wTO1ObMK2gSXnweI01nDyJJfRnPteYYZeMDrpVlZj8SkBUMk y3a1tok3ReXXthEPGSz+M/yFn++GQzZOx3X8oNs2+cUj7EFe7nJZLbPirfbuh4QZ Kby6frebgkp0ISIXhdk9H7sAT8e4Tz4gUAivXKfMWSCJcoxjcc6DXCm1JV89axL5 cDCQ5Wd14hJm/NER+9vgNBnp8fn+tXMUBMfXv95icTGTQhWITL2QYoA3g0spXoKq hTXzIVt8znUQ9HB4W9GHqkKyLFxsnyMjXE/5xGkqTj24GtJXRWahRLnHCeG63ERS 0kTCetBPCd7fjwRrTL6BRKIleA== -----END CERTIFICATE-----Generated at Sat Apr 25 09:06:42 2026 by rpki-client