$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: 2Y8fNtCELptizwzvDU3qx3Ac373A0KjdLPvIohGJ480= Subject key identifier: C4:96:4B:41:5B:8D:F4:B0:8C:BD:B1:94:28:C0:45:85:68:2F:7F:B3 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 353E Signing time: Thu 16 Apr 2026 14:28:19 +0000 Manifest this update: Thu 16 Apr 2026 14:28:19 +0000 Manifest next update: Thu 23 Apr 2026 14:28:19 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 9B9ABvJCXXc/VndTRDOh9CByNk/knaeCYrvxlmFCvB8=) 2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=) 3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=) 4: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=) 5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=) 7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=) 8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=) 9: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Apr 16 14:28:19 2026 GMT Not After : Apr 23 14:28:19 2026 GMT Subject: CN=69e0f203-5b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:72:4b:60:b5:91:53:22:3f:ee:74:c7:d5: 76:7e:f6:c2:21:1e:bc:a7:19:bc:a3:f3:ed:c3:68: d7:5d:23:67:57:e2:37:63:9e:d6:16:27:dd:04:31: 69:83:8e:88:3a:87:b4:ff:bc:cc:d2:52:66:96:fe: 25:74:9f:df:e4:d9:77:14:eb:d2:17:3a:60:c1:c3: c0:85:29:64:55:4a:b1:23:e4:d2:87:59:1f:79:1c: 57:66:87:17:51:a5:58:c6:df:68:66:6e:dc:81:ec: e7:48:87:93:41:9c:83:1d:19:92:22:18:de:ee:ee: c6:77:e5:ac:c3:a1:6b:41:9a:3a:73:3b:20:83:09: 83:16:b5:67:f3:01:88:db:6c:df:7e:b5:57:2d:56: 42:e0:1d:21:6f:c0:10:83:57:5a:42:fd:e0:93:59: b4:31:c2:19:85:05:2a:fe:ad:b7:09:d9:ca:da:e7: 2c:27:f1:d9:00:2c:16:7b:ce:09:c2:37:5a:eb:8c: c2:e7:91:ca:45:fd:db:f0:f4:c2:16:4f:0a:2a:01: 31:d8:7f:57:28:1e:6a:a0:bc:c1:84:0e:4d:c4:9a: be:3c:a3:a4:02:10:21:b7:84:53:a3:b4:cf:bb:89: 81:31:f8:f4:24:90:86:6c:ae:9a:5f:f1:fb:5f:bf: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:96:4B:41:5B:8D:F4:B0:8C:BD:B1:94:28:C0:45:85:68:2F:7F:B3 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e8:00:69:b8:e6:11:2b:81:0a:41:14:34:2c:ce:53:88:4d: df:14:15:74:74:94:8a:be:d1:2c:4e:68:1e:87:62:e3:1a:b7: 15:17:a4:4a:33:b2:cb:51:29:21:6f:b1:46:ec:cf:0d:70:56: c4:9a:fb:66:a3:4e:13:b4:60:ea:a3:d5:77:24:ce:0c:7a:b9: ba:f6:8b:61:91:16:a7:08:04:85:85:45:f3:a2:fc:82:d4:5f: 48:11:c0:7c:68:3a:9b:1f:84:6b:15:25:b5:e0:27:a1:88:b2: e9:b8:29:8a:56:ac:e2:96:f5:dc:63:04:52:03:6e:40:d9:cf: 6d:f1:3e:6d:80:ea:b8:c1:46:9b:79:f0:b1:32:13:f8:21:25: 93:a4:83:f1:4b:15:21:f6:2a:14:16:07:7d:40:fa:e9:c0:9e: 9f:57:40:e9:b8:3f:d8:2d:82:71:b2:99:2e:2f:95:94:9e:e0: d2:6f:26:e0:94:25:4b:dd:05:69:59:f4:1c:52:3e:e5:c7:58: bb:88:e9:15:09:1a:ad:cd:e3:f9:08:dd:0c:73:f7:e7:48:38: 5b:90:20:3f:e7:4b:fd:df:16:83:5b:2c:83:df:5b:59:3a:f1: a7:c0:83:83:14:b3:a8:10:dc:7a:eb:72:3d:a6:2b:ad:d9:4a: 9f:9c:15:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwNDE2MTQyODE5WhcNMjYwNDIzMTQyODE5WjAYMRYwFAYD VQQDEw02OWUwZjIwMy01Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eFyS2C1kVMiP+50x9V2fvbCIR68pxm8o/Ptw2jXXSNnV+I3Y57WFifdBDFp g46IOoe0/7zM0lJmlv4ldJ/f5Nl3FOvSFzpgwcPAhSlkVUqxI+TSh1kfeRxXZocX UaVYxt9oZm7cgeznSIeTQZyDHRmSIhje7u7Gd+Wsw6FrQZo6czsggwmDFrVn8wGI 22zffrVXLVZC4B0hb8AQg1daQv3gk1m0McIZhQUq/q23CdnK2ucsJ/HZACwWe84J wjda64zC55HKRf3b8PTCFk8KKgEx2H9XKB5qoLzBhA5NxJq+PKOkAhAht4RTo7TP u4mBMfj0JJCGbK6aX/H7X7947wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSWS0Fb jfSwjL2xlCjARYVoL3+zMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs+gAabjmESuBCkEUNCzOU4hN3xQVdHSUir7RLE5oHodi4xq3FRekSjOyy1Ep IW+xRuzPDXBWxJr7ZqNOE7Rg6qPVdyTODHq5uvaLYZEWpwgEhYVF86L8gtRfSBHA fGg6mx+EaxUlteAnoYiy6bgpilas4pb13GMEUgNuQNnPbfE+bYDquMFGm3nwsTIT +CElk6SD8UsVIfYqFBYHfUD66cCen1dA6bg/2C2CcbKZLi+VlJ7g0m8m4JQlS90F aVn0HFI+5cdYu4jpFQkarc3j+QjdDHP350g4W5AgP+dL/d8Wg1ssg99bWTrxp8CD gxSzqBDceutyPaYrrdlKn5wVyA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:04 2026 by rpki-client