$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: 0lMHN7D1rh5qmk4cd6Wg/ObAuFNwFkocfv/2rq7bnG8= Subject key identifier: 41:77:85:50:8D:13:3D:83:E9:98:50:ED:9C:47:91:B4:57:4D:6C:0F Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3591 Signing time: Mon 14 Sep 2026 14:28:24 +0000 Manifest this update: Mon 14 Sep 2026 14:28:23 +0000 Manifest next update: Mon 21 Sep 2026 14:28:23 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: KsmUDCRp9kEDgyKuez6vh7gzsqP7Mpw6Zv5Kjpx7xnE=) 2: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 3: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 6: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 8: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 9: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13767 (0x35c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Sep 14 14:28:23 2026 GMT Not After : Sep 21 14:28:23 2026 GMT Subject: CN=6aa80487-77c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:5a:d7:a8:86:1b:e9:42:46:23:70:1b:bd: ee:e5:fc:d3:04:99:f8:90:21:a0:a2:ea:c8:22:65: ed:f5:d8:76:e8:b4:8d:79:a7:cb:67:49:e9:b8:52: d1:74:23:88:75:7c:65:c9:27:31:88:9e:66:5d:a0: 42:e9:dc:28:9a:2d:aa:ae:72:af:a1:e2:3e:19:cc: c4:03:14:98:e7:da:6b:5a:a4:ad:28:5b:e2:e4:7c: 92:ce:24:33:f7:89:67:76:15:e7:79:91:cd:8d:a8: 13:9f:c5:3c:6d:92:0c:51:31:52:84:fe:29:94:66: 1a:c6:bb:5c:be:ba:6a:2c:f3:0a:72:ca:6e:c7:40: 64:13:60:de:64:e5:1d:b6:0e:74:34:d4:8b:1f:74: e2:ca:9a:a7:39:89:d4:d7:d5:44:3e:90:c3:ff:6a: e5:6b:3e:85:00:e4:8a:6c:53:98:14:ff:be:5d:31: b7:85:3e:80:ec:1f:9e:3b:f8:7e:4d:61:ca:a4:19: c6:dd:fb:81:7d:5a:f6:00:26:1b:f0:03:8c:74:39: b8:70:6f:9e:11:dd:b6:4d:ee:8f:81:57:83:e3:9d: 16:45:e1:0d:5c:cb:86:24:2e:1e:7a:7c:2c:5f:28: 6b:70:2c:ad:9d:8a:84:a0:8e:8f:0f:60:73:34:5c: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:77:85:50:8D:13:3D:83:E9:98:50:ED:9C:47:91:B4:57:4D:6C:0F X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d5:10:94:38:2e:c0:05:4c:b9:57:bc:25:ac:07:67:7c:9d: 76:d0:c4:4a:42:8b:68:fa:b0:83:b0:ee:10:e1:f7:dd:a9:53: 76:43:9a:9b:e2:a3:5b:ca:46:35:98:7c:ed:37:14:02:ff:f7: 18:dd:d7:d2:64:9f:49:f4:8c:ce:a6:37:a8:3c:19:47:40:d3: e8:21:03:a0:96:04:cb:f4:bd:b4:04:18:00:f9:e8:10:46:14: 8a:af:7d:d4:b1:d4:99:53:53:22:03:55:d9:39:52:2f:2a:b1: 44:b7:80:af:11:3d:1e:43:ef:1d:c6:a5:71:fc:26:07:4c:a3: c8:39:09:5c:a7:12:24:d7:69:63:35:6c:55:80:cc:e0:9f:02: 8e:7b:2c:5b:33:37:8e:fb:67:1a:a0:86:8f:1e:00:c3:ef:16: 2f:d6:1d:2a:24:7b:88:6f:cc:96:58:6c:b2:f1:57:a6:31:fb: e5:3e:89:ad:02:d7:8a:30:82:8b:78:0f:f4:25:8f:c9:8c:45: ed:e1:9e:8a:33:c0:61:44:be:85:c8:7a:5b:ed:07:93:3c:3c: 1b:e3:73:a8:3c:1e:7e:9f:13:10:3a:45:da:be:b0:35:73:9f: 45:9b:c6:b6:03:a5:f2:06:63:09:23:14:38:ad:81:10:9f:b3: 85:cd:db:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwOTE0MTQyODIzWhcNMjYwOTIxMTQyODIzWjAYMRYwFAYD VQQDEw02YWE4MDQ4Ny03N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu81a16iGG+lCRiNwG73u5fzTBJn4kCGgourIImXt9dh26LSNeafLZ0npuFLR dCOIdXxlyScxiJ5mXaBC6dwomi2qrnKvoeI+GczEAxSY59prWqStKFvi5HySziQz 94lndhXneZHNjagTn8U8bZIMUTFShP4plGYaxrtcvrpqLPMKcspux0BkE2DeZOUd tg50NNSLH3TiypqnOYnU19VEPpDD/2rlaz6FAOSKbFOYFP++XTG3hT6A7B+eO/h+ TWHKpBnG3fuBfVr2ACYb8AOMdDm4cG+eEd22Te6PgVeD450WReENXMuGJC4eenws XyhrcCytnYqEoI6PD2BzNFzE4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEF3hVCN Ez2D6ZhQ7ZxHkbRXTWwPMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9UQlDguwAVMuVe8JawHZ3yddtDESkKLaPqwg7DuEOH33alTdkOam+KjW8pG NZh87TcUAv/3GN3X0mSfSfSMzqY3qDwZR0DT6CEDoJYEy/S9tAQYAPnoEEYUiq99 1LHUmVNTIgNV2TlSLyqxRLeArxE9HkPvHcalcfwmB0yjyDkJXKcSJNdpYzVsVYDM 4J8CjnssWzM3jvtnGqCGjx4Aw+8WL9YdKiR7iG/MllhssvFXpjH75T6JrQLXijCC i3gP9CWPyYxF7eGeijPAYUS+hch6W+0Hkzw8G+NzqDwefp8TEDpF2r6wNXOfRZvG tgOl8gZjCSMUOK2BEJ+zhc3baQ== -----END CERTIFICATE-----Generated at Tue Sep 15 22:02:30 2026 by rpki-client