$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: Hd8ShPXRcY9DENIbijPyhxkymhStB+qrNL9OPOM4rng= Subject key identifier: 7B:6A:B6:68:78:32:69:6E:2F:7F:5A:01:55:67:3B:55:C7:99:B1:AB Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 35A1 Signing time: Fri 16 Oct 2026 14:28:32 +0000 Manifest this update: Fri 16 Oct 2026 14:28:32 +0000 Manifest next update: Fri 23 Oct 2026 14:28:32 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: SaGKAcZqmzyoWGj3rGK4dxEbDgphxgETL6NhgBoZ/Fk=) 2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 3: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 5: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 7: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 14:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13783 (0x35d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Oct 16 14:28:32 2026 GMT Not After : Oct 23 14:28:32 2026 GMT Subject: CN=6ad23490-77eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:91:4f:a2:18:86:9f:0c:b5:53:f6:59:fd: 3e:ec:73:6a:fc:14:60:36:e7:07:1a:88:ef:ee:12: 6d:e4:9a:31:ef:02:6f:ea:d2:b6:78:a5:40:9e:fd: 74:0e:d9:46:5b:0c:a5:4e:92:60:fb:3c:43:c9:58: a7:0d:4a:0d:91:21:8f:a1:af:a2:77:00:a9:78:06: 99:41:e1:61:7f:b8:60:6f:1b:5c:85:01:2c:ff:d5: 17:c6:18:86:66:75:4d:28:f1:50:61:68:b6:1a:4f: eb:c2:b1:16:9b:79:df:c8:30:50:5c:b0:51:e3:55: 13:18:44:e5:6a:8b:7f:57:8e:ac:06:e4:51:3d:bf: e9:9f:0d:58:13:61:7f:22:b3:f6:26:40:20:84:3d: 15:77:2f:cb:81:05:5b:aa:0f:99:08:3e:7c:d9:a7: 57:0b:68:ba:ee:f4:de:75:93:23:52:15:d2:b1:df: b0:43:24:56:34:05:7d:4d:82:fa:b9:d4:26:6a:78: 53:16:05:22:1b:5d:d0:a5:63:88:03:38:86:29:85: a0:bf:67:2d:1d:89:7f:f9:1e:f7:ec:3c:40:d0:87: bc:14:0f:fa:25:80:4d:31:44:85:14:7b:b7:9d:b5: 5f:2e:bf:0a:d0:cc:e9:68:51:be:89:4a:46:2c:65: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6A:B6:68:78:32:69:6E:2F:7F:5A:01:55:67:3B:55:C7:99:B1:AB X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fe:37:23:8f:d6:0c:e5:72:c2:4c:02:7a:dd:83:f6:62:79: 0d:fc:9c:0e:98:9f:6f:77:c0:8d:b2:33:ba:cc:d9:9c:59:e8: 1e:1d:df:cb:4d:dc:29:ef:b1:8c:57:a2:23:54:8d:bb:df:82: f0:ff:95:70:5e:b6:38:48:7c:36:55:6e:af:a8:5e:6b:0b:ff: 30:b5:89:1d:70:58:bd:d7:0f:72:a8:7a:66:6b:3d:c9:99:d7: 94:71:21:39:c4:b6:8c:2b:73:07:8a:a6:ff:2a:0c:e3:67:03: ee:44:2f:5a:17:cc:a3:63:3c:d6:15:91:29:1a:5a:33:c1:cd: 41:7b:48:93:1e:4b:8d:21:10:b9:5f:3d:53:21:ae:44:fa:69: 9c:f6:69:ab:58:80:94:e9:3f:25:9e:13:88:16:13:24:5b:82: 4f:90:e8:71:1b:6f:9b:64:ae:6f:aa:43:18:44:ba:4b:f9:10: d4:94:8d:68:d1:cb:6f:f0:f2:ca:2b:d7:6d:67:d9:bf:e3:08: e4:2a:d1:58:3b:18:a9:31:93:6d:5e:28:24:a8:0b:99:ca:35: f6:8a:f6:f7:dc:e5:02:0d:79:7b:ae:e4:c0:e2:74:03:d0:0a: 7b:c3:50:32:3a:67:84:73:05:5e:30:4b:c1:f7:41:c4:f6:09: 20:38:59:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYxMDE2MTQyODMyWhcNMjYxMDIzMTQyODMyWjAYMRYwFAYD VQQDEw02YWQyMzQ5MC03N2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7aRT6IYhp8MtVP2Wf0+7HNq/BRgNucHGojv7hJt5Jox7wJv6tK2eKVAnv10 DtlGWwylTpJg+zxDyVinDUoNkSGPoa+idwCpeAaZQeFhf7hgbxtchQEs/9UXxhiG ZnVNKPFQYWi2Gk/rwrEWm3nfyDBQXLBR41UTGETlaot/V46sBuRRPb/pnw1YE2F/ IrP2JkAghD0Vdy/LgQVbqg+ZCD582adXC2i67vTedZMjUhXSsd+wQyRWNAV9TYL6 udQmanhTFgUiG13QpWOIAziGKYWgv2ctHYl/+R737DxA0Ie8FA/6JYBNMUSFFHu3 nbVfLr8K0MzpaFG+iUpGLGX4UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtqtmh4 MmluL39aAVVnO1XHmbGrMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/43I4/WDOVywkwCet2D9mJ5DfycDpifb3fAjbIzuszZnFnoHh3fy03cKe+x jFeiI1SNu9+C8P+VcF62OEh8NlVur6heawv/MLWJHXBYvdcPcqh6Zms9yZnXlHEh OcS2jCtzB4qm/yoM42cD7kQvWhfMo2M81hWRKRpaM8HNQXtIkx5LjSEQuV89UyGu RPppnPZpq1iAlOk/JZ4TiBYTJFuCT5DocRtvm2Sub6pDGES6S/kQ1JSNaNHLb/Dy yivXbWfZv+MI5CrRWDsYqTGTbV4oJKgLmco19or299zlAg15e67kwOJ0A9AKe8NQ MjpnhHMFXjBLwfdBxPYJIDhZyQ== -----END CERTIFICATE-----Generated at Sat Oct 17 23:50:05 2026 by rpki-client