$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: iXyi3USXHxQ2Ny/EDZQNUpHhDPFir/cTxMNqomja2wQ= Subject key identifier: A7:10:C2:D7:A8:3C:16:25:B5:43:4C:27:F9:C6:EB:07:0C:1F:BD:B0 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3567 Signing time: Sun 28 Jun 2026 14:28:50 +0000 Manifest this update: Sun 28 Jun 2026 14:28:49 +0000 Manifest next update: Sun 05 Jul 2026 14:28:49 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: Xm3P7l2jQbrCz1uAYUsTYOgubBFU8Ab/HtskIVIdH1M=) 2: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 5: A05116766B2311F1965223AA8747A888.roa (hash: FjxodfmopqbPlzog3jfw0EAZ9HHXwsMpESjOWoQMzg4=) 6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 7: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 14:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13717 (0x3595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jun 28 14:28:49 2026 GMT Not After : Jul 5 14:28:49 2026 GMT Subject: CN=6a412fa1-3943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:6b:d3:fb:3b:4b:bd:f5:57:d5:a6:32:b7: e1:cf:5f:35:af:1f:2e:6c:80:ac:d0:a8:dc:3f:5a: 70:b9:9e:81:dc:bf:10:1b:80:3e:7c:6b:b7:bb:1f: 39:63:cf:f8:11:ab:85:1d:7e:9d:a4:a5:28:5f:38: 58:b7:3f:1c:ab:a4:fc:4a:52:2f:5d:09:46:60:d3: dc:fd:96:f7:ba:fd:cb:33:0b:f7:4a:7b:b5:bc:db: 41:ec:5f:12:da:01:9f:2d:8b:aa:30:2d:30:9e:ca: 86:6e:1c:53:2a:7d:d7:68:04:b9:66:97:58:12:15: d2:09:7e:6b:83:1b:74:ce:65:e9:f1:b4:ae:ea:d8: 65:9d:a7:9b:04:fc:94:7d:40:e8:54:93:4a:b8:f8: 0d:5a:93:9c:83:f9:61:48:1e:fe:ce:5f:92:84:36: 48:02:af:64:a7:d6:34:78:d4:43:62:3c:3b:81:a4: da:28:c5:0d:b5:34:35:da:df:35:0b:ea:f0:d5:52: 77:0d:41:b0:1a:b1:bf:80:cd:8a:32:c4:14:8c:bd: be:54:41:60:6c:03:f4:1f:17:ac:9e:c2:83:65:5d: b8:f8:3d:cf:ec:d4:96:21:b8:78:3c:bb:79:ec:29: e1:9c:1f:94:3e:3c:53:50:6a:9e:51:51:df:92:81: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:10:C2:D7:A8:3C:16:25:B5:43:4C:27:F9:C6:EB:07:0C:1F:BD:B0 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:55:2b:cb:f8:58:88:9e:8c:e0:25:8c:46:57:81:cc:52:d0: a9:37:d4:15:31:ca:18:4b:fd:45:1a:ce:20:c9:8c:4c:1a:64: 66:60:3e:81:de:9e:1e:16:ed:32:36:84:30:bc:29:ef:98:8d: 17:04:8a:97:73:c3:07:b3:45:19:b9:91:3d:83:c3:96:eb:9b: dc:3f:66:26:e0:5a:24:bd:92:e1:53:4c:fa:fa:90:03:30:45: 10:bf:3b:b5:8e:6c:55:09:7a:ca:73:08:2c:a6:bc:53:62:a5: e7:af:f1:42:8e:f4:df:d4:b7:35:2a:50:74:6c:cb:42:ad:d0: d0:2d:0d:f4:9f:ba:38:e0:01:65:9a:d5:60:79:3c:11:71:e8: f0:26:99:95:23:16:6e:45:fe:55:7b:78:58:6f:83:72:b8:0d: 0d:2e:2a:16:86:9a:84:ed:34:65:2d:bc:f9:fc:78:a8:42:f6: 48:a0:fd:4d:80:d9:1d:b2:f7:e1:47:32:3e:2f:73:2a:98:c1: 9c:94:fc:61:7d:0e:27:44:fc:b0:2d:73:b0:5a:5e:79:36:7e: 13:23:34:d3:9d:be:59:a3:d6:ee:1b:17:df:c0:d0:f0:cc:15: 40:48:7b:da:2d:6a:e4:46:97:27:63:79:fa:72:71:f9:dd:43: 92:a0:d1:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNjI4MTQyODQ5WhcNMjYwNzA1MTQyODQ5WjAYMRYwFAYD VQQDEw02YTQxMmZhMS0zOTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCFr0/s7S731V9WmMrfhz181rx8ubICs0KjcP1pwuZ6B3L8QG4A+fGu3ux85 Y8/4EauFHX6dpKUoXzhYtz8cq6T8SlIvXQlGYNPc/Zb3uv3LMwv3Snu1vNtB7F8S 2gGfLYuqMC0wnsqGbhxTKn3XaAS5ZpdYEhXSCX5rgxt0zmXp8bSu6thlnaebBPyU fUDoVJNKuPgNWpOcg/lhSB7+zl+ShDZIAq9kp9Y0eNRDYjw7gaTaKMUNtTQ12t81 C+rw1VJ3DUGwGrG/gM2KMsQUjL2+VEFgbAP0HxesnsKDZV24+D3P7NSWIbh4PLt5 7CnhnB+UPjxTUGqeUVHfkoGaFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcQwteo PBYltUNMJ/nG6wcMH72wMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh1Ury/hYiJ6M4CWMRleBzFLQqTfUFTHKGEv9RRrOIMmMTBpkZmA+gd6eHhbt MjaEMLwp75iNFwSKl3PDB7NFGbmRPYPDluub3D9mJuBaJL2S4VNM+vqQAzBFEL87 tY5sVQl6ynMILKa8U2Kl56/xQo7039S3NSpQdGzLQq3Q0C0N9J+6OOABZZrVYHk8 EXHo8CaZlSMWbkX+VXt4WG+DcrgNDS4qFoaahO00ZS28+fx4qEL2SKD9TYDZHbL3 4UcyPi9zKpjBnJT8YX0OJ0T8sC1zsFpeeTZ+EyM0052+WaPW7hsX38DQ8MwVQEh7 2i1q5EaXJ2N5+nJx+d1DkqDR2A== -----END CERTIFICATE-----Generated at Mon Jun 29 00:20:36 2026 by rpki-client