$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: yIU47Fa6AQ6iNKfNe1MrTanIO1M0AHnG3MNZPs6Z4DE= Subject key identifier: 9B:14:86:C8:02:77:3E:C2:FE:4C:6A:57:DC:A9:CB:39:E3:81:E1:6A Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 35A4 Signing time: Thu 22 Oct 2026 14:29:01 +0000 Manifest this update: Thu 22 Oct 2026 14:29:01 +0000 Manifest next update: Thu 29 Oct 2026 14:29:01 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: OGe8NtvGxktIKKpMVbmGXCX5G/98zdP/8Jbyag1ZEO8=) 2: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 3: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 4: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 5: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 6: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 7: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 14:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13786 (0x35da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Oct 22 14:29:01 2026 GMT Not After : Oct 29 14:29:01 2026 GMT Subject: CN=6ada1dad-e28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:8e:e4:6e:c1:04:dc:78:51:a8:ae:bd:78: 20:5f:d7:a9:fb:af:cc:9d:02:d3:38:72:d5:5b:4a: fd:39:f6:60:f8:c0:37:9c:22:52:62:cc:75:b2:8a: e4:36:9d:1c:9e:e6:5e:bd:f1:e9:1e:16:73:7a:4b: 23:47:24:10:1f:b9:2e:4a:dd:eb:bd:38:8b:3f:09: 18:1e:64:30:da:32:79:ea:42:a1:52:c9:49:35:32: af:1e:73:1b:bd:00:25:02:ac:30:fd:c2:0f:b2:6f: 54:09:b4:c5:e6:a0:1e:66:be:3b:82:6e:2f:12:db: ea:a4:0d:3e:09:8f:60:e6:2c:32:b7:29:33:9c:1f: d8:97:96:68:8c:d3:d6:e8:7b:a2:75:fd:16:56:a7: e6:f6:08:4c:9b:42:2f:95:5b:ef:e5:88:3c:02:df: 0f:49:29:59:e7:f9:03:0f:d8:de:f2:23:3d:78:15: 5b:c2:d8:76:c0:7d:00:61:29:bf:ba:cd:98:59:5e: 16:ad:4a:24:ac:5a:94:4e:b3:fd:48:f4:30:9b:3a: 37:49:0d:b8:80:d1:c3:a3:2c:fb:24:f6:15:f6:d3: 65:b1:49:1c:d1:37:05:87:e7:b7:4d:6f:14:68:49: c9:1f:ad:65:38:fe:c8:0a:67:a5:60:0c:b8:25:ba: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:86:C8:02:77:3E:C2:FE:4C:6A:57:DC:A9:CB:39:E3:81:E1:6A X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fb:2c:7b:ca:bc:bd:14:d7:d5:c6:de:e9:d2:ca:ce:09:60: 89:7b:8a:2f:97:5a:de:33:99:89:71:c4:9b:79:4f:ce:cd:d2: 2b:cc:86:fa:0a:09:ea:e0:20:f4:95:0c:c7:58:d9:b1:25:63: 5b:ce:6b:ab:d5:cb:fb:f4:98:ab:74:06:bb:e2:9a:b3:83:7d: d2:20:65:67:8d:8f:cc:27:fa:a7:75:35:bd:f8:3c:23:6a:09: 57:67:29:f1:8d:cd:6c:29:28:eb:14:6a:ff:3e:3d:20:b2:14: f1:02:fd:f1:70:be:54:12:fe:d2:3f:b7:47:e3:03:90:98:5e: 35:aa:00:8a:56:7f:e5:6f:6e:eb:00:0a:51:1a:42:7c:8d:8a: a9:c5:e5:26:1a:5c:62:70:c9:60:08:b8:36:e6:ad:b6:bb:14: d1:3b:fb:44:0f:f4:21:2c:f0:ca:b5:1f:2f:11:b9:3e:81:b8: 19:9e:8a:1d:93:58:14:30:32:a3:6e:90:36:1b:03:e7:e4:7c: c8:fd:48:53:5d:5d:f3:1d:1b:dd:39:09:86:5c:50:b2:35:3b: a6:ec:18:b9:48:ba:b7:33:79:8b:f6:ee:d8:dd:ff:85:ab:8d: bf:90:71:64:73:f2:88:77:bf:06:72:da:43:4a:cd:07:47:5b: c7:78:78:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYxMDIyMTQyOTAxWhcNMjYxMDI5MTQyOTAxWjAYMRYwFAYD VQQDEw02YWRhMWRhZC1lMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDyO5G7BBNx4UaiuvXggX9ep+6/MnQLTOHLVW0r9OfZg+MA3nCJSYsx1sork Np0cnuZevfHpHhZzeksjRyQQH7kuSt3rvTiLPwkYHmQw2jJ56kKhUslJNTKvHnMb vQAlAqww/cIPsm9UCbTF5qAeZr47gm4vEtvqpA0+CY9g5iwytykznB/Yl5ZojNPW 6Huidf0WVqfm9ghMm0IvlVvv5Yg8At8PSSlZ5/kDD9je8iM9eBVbwth2wH0AYSm/ us2YWV4WrUokrFqUTrP9SPQwmzo3SQ24gNHDoyz7JPYV9tNlsUkc0TcFh+e3TW8U aEnJH61lOP7ICmelYAy4JbrX+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsUhsgC dz7C/kxqV9ypyznjgeFqMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/sse8q8vRTX1cbe6dLKzglgiXuKL5da3jOZiXHEm3lPzs3SK8yG+goJ6uAg 9JUMx1jZsSVjW85rq9XL+/SYq3QGu+Kas4N90iBlZ42PzCf6p3U1vfg8I2oJV2cp 8Y3NbCko6xRq/z49ILIU8QL98XC+VBL+0j+3R+MDkJheNaoAilZ/5W9u6wAKURpC fI2KqcXlJhpcYnDJYAi4NuattrsU0Tv7RA/0ISzwyrUfLxG5PoG4GZ6KHZNYFDAy o26QNhsD5+R8yP1IU11d8x0b3TkJhlxQsjU7puwYuUi6tzN5i/bu2N3/hauNv5Bx ZHPyiHe/BnLaQ0rNB0dbx3h4GA== -----END CERTIFICATE-----Generated at Sat Oct 24 10:28:17 2026 by rpki-client