$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: Enaa56YftnDFR7Z2zwnk5zhdDL8/YTyQcZX1aN50atA= Subject key identifier: 39:82:5A:B4:4A:40:2F:B4:BC:17:C0:2D:3D:51:DD:79:62:0C:71:4D Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 357D Signing time: Thu 06 Aug 2026 14:28:31 +0000 Manifest this update: Thu 06 Aug 2026 14:28:30 +0000 Manifest next update: Thu 13 Aug 2026 14:28:30 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: dnh49ns0QASGBKZWGSt5wPmy46sI9c9VIPGUgJiboQM=) 2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 4: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 5: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 7: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 9: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Aug 2026 14:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13747 (0x35b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 6 14:28:30 2026 GMT Not After : Aug 13 14:28:30 2026 GMT Subject: CN=6a749a0f-ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:09:6c:ed:c0:8e:8e:ac:98:bb:2e:b8:13: 28:28:9b:ed:dd:99:cd:ac:1b:ca:40:b1:47:0b:67: 8e:6d:5d:c4:1f:eb:26:3c:ee:99:8b:14:ad:df:d2: f1:89:5c:c3:9f:30:45:e5:7c:0c:1d:c1:45:ff:08: 96:af:0d:a0:fc:84:7d:2c:79:23:f8:11:97:23:54: 6d:ea:58:5f:01:d9:be:31:b6:5d:87:49:a8:4a:07: b3:d2:83:bf:12:3c:70:74:be:50:48:f2:f0:75:8a: 09:9a:a9:07:30:18:d6:d8:b9:c4:a7:1a:53:27:50: c7:9e:e2:2e:f6:e2:39:4a:63:c9:57:76:15:0f:6a: ef:7f:ec:ce:07:33:83:5f:5d:0d:71:5d:40:fb:0f: e6:30:ba:0c:03:90:09:7b:11:10:53:38:93:44:e8: bc:6f:a9:00:d1:52:a5:b2:e0:fd:df:72:a6:28:cf: 69:a6:97:46:62:bb:0c:78:d7:68:1c:7b:fa:50:78: 95:b1:25:7f:0b:43:2a:e9:33:03:a1:87:61:df:64: 2a:a1:67:21:34:a9:dd:3b:8f:86:03:5e:59:3b:4a: bb:ab:6d:c0:3a:6a:26:5c:7c:ae:bd:f5:e0:40:dd: fb:31:22:b6:73:06:73:16:68:50:e2:dc:da:04:4a: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:82:5A:B4:4A:40:2F:B4:BC:17:C0:2D:3D:51:DD:79:62:0C:71:4D X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:08:26:c5:0e:6d:80:7c:17:9a:42:56:4a:d3:f5:7e:c6:f8: 94:c1:81:37:39:6b:d2:03:76:48:39:e3:07:f1:b2:e5:b8:57: e2:44:08:d7:40:d4:10:f4:6c:18:67:e4:50:7f:09:8d:e4:d4: 11:a2:1a:f8:de:7b:5a:af:bf:6b:af:d9:67:38:13:93:f3:70: 23:2b:1d:08:33:67:7d:e1:b1:75:b3:ea:2b:00:80:a5:2c:cf: 8f:c5:bc:1c:2a:71:7f:4d:f5:c9:42:ad:e3:c3:da:dd:a1:8b: 06:7c:04:f5:80:29:89:66:33:91:03:b9:23:27:8b:1d:49:95: d4:f8:48:28:be:78:b2:4f:c0:b2:63:f5:ea:a2:74:1f:5a:52: 8b:57:8c:4b:10:b1:f8:cc:44:6c:33:43:b3:ae:c5:9c:94:72: e1:34:b1:b1:f2:22:4d:c7:1c:6b:42:80:8f:69:5f:01:b4:eb: 13:13:43:4e:b6:fb:e4:67:5b:f7:26:95:b8:49:b8:87:41:0c: 00:73:02:38:8a:f1:e3:d8:d7:32:55:29:48:20:5a:39:8d:f7: 13:74:a9:a2:7f:43:5b:c7:ca:ab:c8:2e:64:a7:7b:3a:40:4e: e5:9e:bb:db:6f:07:f8:27:19:0d:42:17:6f:0e:90:2b:48:94: 25:bd:d7:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwODA2MTQyODMwWhcNMjYwODEzMTQyODMwWjAYMRYwFAYD VQQDEw02YTc0OWEwZi1lZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTsJbO3Ajo6smLsuuBMoKJvt3ZnNrBvKQLFHC2eObV3EH+smPO6ZixSt39Lx iVzDnzBF5XwMHcFF/wiWrw2g/IR9LHkj+BGXI1Rt6lhfAdm+MbZdh0moSgez0oO/ EjxwdL5QSPLwdYoJmqkHMBjW2LnEpxpTJ1DHnuIu9uI5SmPJV3YVD2rvf+zOBzOD X10NcV1A+w/mMLoMA5AJexEQUziTROi8b6kA0VKlsuD933KmKM9pppdGYrsMeNdo HHv6UHiVsSV/C0Mq6TMDoYdh32QqoWchNKndO4+GA15ZO0q7q23AOmomXHyuvfXg QN37MSK2cwZzFmhQ4tzaBEpjvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmCWrRK QC+0vBfALT1R3XliDHFNMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADQgmxQ5tgHwXmkJWStP1fsb4lMGBNzlr0gN2SDnjB/Gy5bhX4kQI10DUEPRs GGfkUH8JjeTUEaIa+N57Wq+/a6/ZZzgTk/NwIysdCDNnfeGxdbPqKwCApSzPj8W8 HCpxf031yUKt48Pa3aGLBnwE9YApiWYzkQO5IyeLHUmV1PhIKL54sk/AsmP16qJ0 H1pSi1eMSxCx+MxEbDNDs67FnJRy4TSxsfIiTccca0KAj2lfAbTrExNDTrb75Gdb 9yaVuEm4h0EMAHMCOIrx49jXMlUpSCBaOY33E3Spon9DW8fKq8guZKd7OkBO5Z67 228H+CcZDUIXbw6QK0iUJb3X4w== -----END CERTIFICATE-----Generated at Fri Aug 7 11:21:00 2026 by rpki-client