$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: W/M4BOz2Vziy9aB7U4pOoBkJH6SHjm7F63I9DtHvXWg= Subject key identifier: F3:2A:3E:B0:0C:4A:90:3F:1B:A0:14:61:9B:8F:CE:B2:6C:F4:E3:27 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 34E5 Signing time: Sun 02 Nov 2025 14:27:36 +0000 Manifest this update: Sun 02 Nov 2025 14:27:36 +0000 Manifest next update: Sun 09 Nov 2025 14:27:36 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: +QWL5ykO9j+Zh8NyaW6c/CC7qs36FCXWrlQnoxn4pXU=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=) 7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=) 8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: +Emh97G4a6MC22cwrisLR6hKm25TYhC5b4mYNP17m7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13572 (0x3504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Nov 2 14:27:36 2025 GMT Not After : Nov 9 14:27:36 2025 GMT Subject: CN=69076a58-a9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:1f:43:cd:ca:f5:bb:2f:9e:c3:74:21:3e: 4a:68:a9:a3:7c:9c:cc:9b:94:5e:1d:db:54:b7:12: de:6a:aa:9a:61:c4:70:f4:4c:6c:9b:9e:ff:25:cf: 5b:14:f9:c0:ad:ee:20:a9:29:3e:fc:cb:3a:31:c4: 7f:d1:6b:84:8c:fc:35:bc:c4:d6:c9:4b:f8:1c:41: 1c:a8:b3:dd:95:d3:11:92:4b:bc:cf:15:51:d6:5f: e6:7b:b8:df:eb:c4:51:5c:32:b1:e4:9b:4b:72:0b: a6:d2:68:eb:08:4c:b9:3d:c0:e8:5c:af:8b:8f:a1: 52:9f:d6:80:f3:b6:7c:07:bf:75:a0:08:91:b1:a2: 64:b1:6e:8d:eb:a2:2d:64:0c:a6:03:e4:22:42:ff: 32:3f:d2:19:24:a1:a5:31:8c:5c:c7:7e:e0:46:f9: 4e:92:3b:71:d0:9a:0f:04:84:81:37:ae:67:5d:a7: f3:14:18:8a:3b:34:82:3a:ba:de:c8:f1:1e:a7:33: ca:20:d3:64:dc:5a:02:0a:0d:a9:b4:9c:18:e6:b7: 17:c7:6f:94:10:1e:6a:b5:fe:0d:76:ad:35:dc:63: 00:a2:f9:b7:24:dd:72:32:1e:34:8e:f5:e7:8a:96: c8:3a:6e:ca:3c:0f:a3:23:f5:81:af:28:b8:01:93: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2A:3E:B0:0C:4A:90:3F:1B:A0:14:61:9B:8F:CE:B2:6C:F4:E3:27 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d8:f1:f6:3a:eb:5f:3d:27:4d:b8:81:d3:ba:dd:6c:b2:de: be:03:82:9f:14:7f:03:bb:74:09:7a:76:ce:a1:79:c4:61:dc: 8d:4d:be:71:43:52:6a:ac:e0:62:65:5e:3c:ea:ba:ba:6b:e0: 19:cc:02:90:87:1a:51:e0:73:21:6e:60:db:86:dc:14:be:5d: 23:d6:26:5a:86:54:cc:bd:2d:7c:3c:ca:19:19:7b:83:c3:b3: bc:76:ff:6b:d1:dd:b9:0b:d9:67:79:ee:3b:a9:5f:65:28:d2: b7:55:86:73:10:ef:4e:9a:c9:19:f3:98:0e:90:5d:f4:25:7d: e9:88:d7:04:bc:e6:6d:f8:0c:32:b3:af:a9:35:21:c5:dd:28: 6b:3d:69:e7:12:2f:a4:c8:ce:fb:cd:df:62:20:9f:f9:24:ad: d0:79:53:41:5b:c8:20:8b:a9:c5:b8:32:66:82:24:25:3a:af: 0d:45:42:2b:0b:c4:3c:73:67:9f:c9:11:5f:90:e9:b0:d7:25: e3:c5:fa:6f:88:cb:b0:6c:50:a1:aa:35:df:3d:c9:9a:b4:cd: 8e:2d:83:a0:90:57:0a:3c:51:06:e4:63:88:5c:b1:4e:5b:36: 92:a3:12:4d:21:d8:60:c0:47:0e:8a:db:24:3b:92:e7:63:c6: 1f:7b:f9:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUxMTAyMTQyNzM2WhcNMjUxMTA5MTQyNzM2WjAYMRYwFAYD VQQDEw02OTA3NmE1OC1hOWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMsfQ83K9bsvnsN0IT5KaKmjfJzMm5ReHdtUtxLeaqqaYcRw9Exsm57/Jc9b FPnAre4gqSk+/Ms6McR/0WuEjPw1vMTWyUv4HEEcqLPdldMRkku8zxVR1l/me7jf 68RRXDKx5JtLcgum0mjrCEy5PcDoXK+Lj6FSn9aA87Z8B791oAiRsaJksW6N66It ZAymA+QiQv8yP9IZJKGlMYxcx37gRvlOkjtx0JoPBISBN65nXafzFBiKOzSCOrre yPEepzPKINNk3FoCCg2ptJwY5rcXx2+UEB5qtf4Ndq013GMAovm3JN1yMh40jvXn ipbIOm7KPA+jI/WBryi4AZMxXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMqPrAM SpA/G6AUYZuPzrJs9OMnMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr2PH2OutfPSdNuIHTut1sst6+A4KfFH8Du3QJenbOoXnEYdyNTb5x Q1JqrOBiZV486rq6a+AZzAKQhxpR4HMhbmDbhtwUvl0j1iZahlTMvS18PMoZGXuD w7O8dv9r0d25C9lnee47qV9lKNK3VYZzEO9OmskZ85gOkF30JX3piNcEvOZt+Awy s6+pNSHF3ShrPWnnEi+kyM77zd9iIJ/5JK3QeVNBW8ggi6nFuDJmgiQlOq8NRUIr C8Q8c2efyRFfkOmw1yXjxfpviMuwbFChqjXfPcmatM2OLYOgkFcKPFEG5GOIXLFO WzaSoxJNIdhgwEcOitskO5LnY8Yfe/mv -----END CERTIFICATE-----Generated at Tue Nov 4 12:44:27 2025 by rpki-client