$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: GcHBWAn8AhFw+2pWoLj+kP0J9vlHP7wnPDrAd6lL/cM= Subject key identifier: 98:00:09:1A:6A:21:9A:1F:47:E2:1F:12:C4:8E:10:FB:01:38:DC:B8 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3583 Signing time: Tue 18 Aug 2026 14:29:31 +0000 Manifest this update: Tue 18 Aug 2026 14:29:30 +0000 Manifest next update: Tue 25 Aug 2026 14:29:30 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: a/7gRMdLgrqkueamBTH621hpT1tmrjCrlhdJH7tjga0=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 3: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 4: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 6: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) 9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13753 (0x35b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 18 14:29:30 2026 GMT Not After : Aug 25 14:29:30 2026 GMT Subject: CN=6a846c4b-a26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:c7:b4:04:6d:65:43:11:6f:ef:cb:14:16: cd:4b:2b:1a:fb:8c:5e:0e:12:2d:75:7b:8f:7f:36: c1:42:d8:3f:29:bf:54:91:72:f9:1d:df:a5:0c:59: fb:bb:56:82:c5:c3:95:b1:a5:4c:82:98:db:36:c8: aa:4b:09:40:f8:7e:e2:f7:09:ca:e9:b0:05:fd:94: d7:7c:a8:1e:dd:13:9b:72:e8:44:c5:63:ee:cd:d3: 6f:e0:dd:7d:6e:ae:6e:86:07:85:9a:b0:54:c9:ab: cd:c8:a8:47:a0:bd:ee:51:f8:17:f3:2b:4b:5a:25: 33:57:8b:3d:e6:a4:4c:31:12:22:d0:e6:44:a3:82: 9d:27:11:28:38:19:41:78:e2:80:5a:cb:b7:43:6b: c0:ce:b3:05:38:5e:89:fc:71:01:28:fe:72:89:36: 90:f9:8c:83:ab:05:e6:8b:c5:28:41:b8:35:1e:02: 26:85:10:ae:47:86:4b:8b:3e:b6:84:06:6b:93:46: 9d:96:99:b8:79:31:14:d1:9c:1c:b3:08:b1:a4:72: be:5a:fa:50:b0:0e:37:83:8b:d9:f2:a9:65:1c:96: 76:8d:26:20:6e:d8:fb:30:e2:a1:fb:58:3b:99:c7: fc:6e:7e:96:50:f8:94:d8:aa:f2:d1:5a:d1:f3:43: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:00:09:1A:6A:21:9A:1F:47:E2:1F:12:C4:8E:10:FB:01:38:DC:B8 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:31:ac:30:e2:a9:0c:9e:2b:b4:7f:1e:1e:f0:86:01:11:5f: 71:3d:e6:0a:61:fd:f3:ec:33:0a:30:7b:d4:3f:e5:0f:fa:d2: 82:04:bb:20:e0:32:e0:6b:6f:5e:55:77:48:ff:8e:59:44:ef: 40:f1:3e:6b:b6:cc:a9:5c:88:76:11:e7:15:b3:24:11:d8:64: f0:33:2f:21:a0:2e:04:65:d0:c9:06:05:28:c5:06:60:26:65: f0:ea:14:1b:84:6b:78:08:9e:1c:ce:08:5e:88:c9:d2:b6:71: a5:fd:43:b4:aa:1f:d7:f6:cf:ae:fe:1a:72:06:2d:a6:35:b3: 2e:c5:28:a4:74:f0:3b:1c:54:1e:e6:b6:04:06:96:8e:65:0d: 12:b3:9d:3d:de:ae:14:94:de:3f:a9:2b:4c:43:d3:2e:ac:c3: d3:d4:f6:40:ab:01:91:4c:10:a9:8f:d9:01:4d:b5:82:93:32: 75:d7:f7:23:be:4e:46:d2:15:f5:96:36:f9:0b:96:d4:e7:12: e2:00:bf:03:ec:fb:fd:c4:f5:d8:11:9c:a7:53:9b:92:c9:89: e1:60:70:1b:7a:e5:5c:2e:aa:d6:01:15:ae:b5:0e:b8:78:48: 7d:d7:5b:d8:4a:d1:da:13:36:df:93:93:26:08:a0:7a:ab:f9: 2f:68:d8:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwODE4MTQyOTMwWhcNMjYwODI1MTQyOTMwWjAYMRYwFAYD VQQDEw02YTg0NmM0Yi1hMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/THtARtZUMRb+/LFBbNSysa+4xeDhItdXuPfzbBQtg/Kb9UkXL5Hd+lDFn7 u1aCxcOVsaVMgpjbNsiqSwlA+H7i9wnK6bAF/ZTXfKge3RObcuhExWPuzdNv4N19 bq5uhgeFmrBUyavNyKhHoL3uUfgX8ytLWiUzV4s95qRMMRIi0OZEo4KdJxEoOBlB eOKAWsu3Q2vAzrMFOF6J/HEBKP5yiTaQ+YyDqwXmi8UoQbg1HgImhRCuR4ZLiz62 hAZrk0adlpm4eTEU0ZwcswixpHK+WvpQsA43g4vZ8qllHJZ2jSYgbtj7MOKh+1g7 mcf8bn6WUPiU2Kry0VrR80PxwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgACRpq IZofR+IfEsSOEPsBONy4MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASDGsMOKpDJ4rtH8eHvCGARFfcT3mCmH98+wzCjB71D/lD/rSggS7IOAy4Gtv XlV3SP+OWUTvQPE+a7bMqVyIdhHnFbMkEdhk8DMvIaAuBGXQyQYFKMUGYCZl8OoU G4RreAieHM4IXojJ0rZxpf1DtKof1/bPrv4acgYtpjWzLsUopHTwOxxUHua2BAaW jmUNErOdPd6uFJTeP6krTEPTLqzD09T2QKsBkUwQqY/ZAU21gpMyddf3I75ORtIV 9ZY2+QuW1OcS4gC/A+z7/cT12BGcp1ObksmJ4WBwG3rlXC6q1gEVrrUOuHhIfddb 2ErR2hM235OTJgigeqv5L2jYuw== -----END CERTIFICATE-----Generated at Wed Aug 19 13:50:07 2026 by rpki-client