$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: yvZvbw4qUxEge82ZNqTXuzqfV1wlEVTXEERpHS5lEMM= Subject key identifier: 5D:B7:5E:96:01:C2:6E:E6:E2:FE:96:38:6B:A1:10:F2:39:67:BB:73 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3527 Signing time: Mon 02 Mar 2026 14:29:30 +0000 Manifest this update: Mon 02 Mar 2026 14:29:29 +0000 Manifest next update: Mon 09 Mar 2026 14:29:29 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 1V8fNxJ9o3/8aVJh+kYEOAYH+sORHqzlrO0eaCutaa0=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 5: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 6: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 7: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13650 (0x3552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Mar 2 14:29:29 2026 GMT Not After : Mar 9 14:29:29 2026 GMT Subject: CN=69a59eca-27de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:4a:24:c9:b4:43:68:7e:24:d0:d4:47:f8: 8b:31:42:d2:f2:1b:5f:f2:72:d0:97:43:4c:ca:d9: d9:74:eb:d3:17:d4:cd:55:69:ab:b9:dc:a2:b4:d2: c5:13:2c:d4:d1:e1:96:f2:ae:24:19:6d:3a:f5:9c: 54:1a:7c:93:02:c5:31:ff:ff:2e:48:85:8a:6e:3d: 8a:c6:37:5f:7b:3c:71:eb:26:04:a4:a9:cc:95:79: e4:01:f1:39:46:c0:ec:99:6f:6a:d8:85:38:12:9f: 41:6e:a4:e7:64:b9:a2:66:8b:7d:eb:d1:eb:f2:9c: dc:35:ff:71:a4:91:fc:be:63:1e:12:cd:09:09:93: 06:a7:d3:08:f2:56:62:7b:42:67:6b:4e:bc:85:3f: 35:4c:da:66:af:06:25:04:4d:97:a2:6a:ac:20:5e: b1:26:f7:72:66:ac:99:e7:67:00:5d:cf:c3:84:8d: 76:82:d7:90:e2:d8:29:b0:4e:b2:ee:a3:70:11:88: 55:09:14:93:a2:48:8f:f4:07:e7:72:2e:c1:20:21: d9:da:ea:f0:03:7b:12:ed:ea:bd:52:0c:0f:d1:77: 31:31:70:61:4f:7e:9a:cc:27:6d:fa:41:41:50:f2: e1:eb:7d:28:a9:85:6b:89:b2:96:b1:74:93:c8:4b: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B7:5E:96:01:C2:6E:E6:E2:FE:96:38:6B:A1:10:F2:39:67:BB:73 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:4c:33:a1:75:06:6b:1b:09:04:3a:0e:5b:aa:77:d2:1c:20: 8e:5b:01:54:50:6c:5a:86:bd:a1:a3:21:f2:49:40:9b:df:99: 86:41:d2:5a:58:0c:26:0c:7b:d1:07:e6:1d:23:86:c2:17:d0: 71:03:c5:1b:52:f7:09:94:b6:4f:41:3d:df:ec:85:95:78:2b: 09:70:db:ee:82:72:21:83:f5:a0:10:3a:3f:c5:02:23:4f:f4: 1a:d3:ba:91:e0:6c:e6:8e:4f:36:cc:69:8a:f5:6b:ce:70:9f: 7e:fd:d2:e8:e6:51:d2:1d:8b:bb:3a:a4:11:04:b2:19:8b:64: 80:ef:b9:d7:2e:f3:61:d9:db:b8:57:15:ac:8c:d4:e7:f2:47: 4f:11:6b:66:b8:d9:7c:d8:c4:6d:ba:3b:58:72:8b:b2:1d:03: 7d:48:5b:47:fb:95:e4:71:ad:fe:52:af:1f:f7:cd:5c:2e:81: e2:e9:29:65:38:a0:74:ff:ab:a3:37:33:ea:01:dd:3b:a4:c6: 1d:ba:ac:b9:da:b8:ae:df:b2:dc:cf:21:7a:3c:d2:b5:46:3d: 4d:4e:05:12:56:37:ff:c0:a0:bd:d5:e5:76:11:58:61:c9:4c: ce:51:75:95:5e:50:49:8e:f0:81:9f:80:49:6d:58:c2:84:9e: b4:c0:0f:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMzAyMTQyOTI5WhcNMjYwMzA5MTQyOTI5WjAYMRYwFAYD VQQDEw02OWE1OWVjYS0yN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0BKJMm0Q2h+JNDUR/iLMULS8htf8nLQl0NMytnZdOvTF9TNVWmrudyitNLF EyzU0eGW8q4kGW069ZxUGnyTAsUx//8uSIWKbj2Kxjdfezxx6yYEpKnMlXnkAfE5 RsDsmW9q2IU4Ep9BbqTnZLmiZot969Hr8pzcNf9xpJH8vmMeEs0JCZMGp9MI8lZi e0Jna068hT81TNpmrwYlBE2XomqsIF6xJvdyZqyZ52cAXc/DhI12gteQ4tgpsE6y 7qNwEYhVCRSTokiP9Afnci7BICHZ2urwA3sS7eq9UgwP0XcxMXBhT36azCdt+kFB UPLh630oqYVribKWsXSTyEvciQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF23XpYB wm7m4v6WOGuhEPI5Z7tzMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJEwzoXUGaxsJBDoOW6p30hwgjlsBVFBsWoa9oaMh8klAm9+ZhkHSWlgMJgx7 0QfmHSOGwhfQcQPFG1L3CZS2T0E93+yFlXgrCXDb7oJyIYP1oBA6P8UCI0/0GtO6 keBs5o5PNsxpivVrznCffv3S6OZR0h2LuzqkEQSyGYtkgO+51y7zYdnbuFcVrIzU 5/JHTxFrZrjZfNjEbbo7WHKLsh0DfUhbR/uV5HGt/lKvH/fNXC6B4ukpZTigdP+r ozcz6gHdO6TGHbqsudq4rt+y3M8hejzStUY9TU4FElY3/8CgvdXldhFYYclMzlF1 lV5QSY7wgZ+ASW1YwoSetMAPKQ== -----END CERTIFICATE-----Generated at Tue Mar 3 22:17:55 2026 by rpki-client