$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: HoNpivpa0/3VA4CJDycjsozi+E0pP4/IxNmoFElfYK0= Subject key identifier: 1A:84:4E:C1:F4:D0:AB:5F:71:0D:2E:69:D3:F0:68:C0:89:72:B9:62 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 35CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3598 Signing time: Mon 28 Sep 2026 14:29:04 +0000 Manifest this update: Mon 28 Sep 2026 14:29:04 +0000 Manifest next update: Mon 05 Oct 2026 14:29:04 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: jqhlrk4o/P8JWNcusHvee5zjF3ZZOG9gYVe8oSoB4ds=) 2: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=) 3: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=) 4: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=) 5: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=) 6: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=) 7: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=) 8: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=) 9: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13774 (0x35ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Sep 28 14:29:04 2026 GMT Not After : Oct 5 14:29:04 2026 GMT Subject: CN=6aba79b0-2caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:e9:d7:98:04:16:dd:ef:ab:40:14:f8:2a: e2:23:23:77:b7:36:51:aa:88:33:9b:a8:e6:50:42: 75:7f:8a:37:0d:ef:c7:9a:17:f5:7f:44:b8:48:f2: ba:18:92:9d:30:c0:c2:d9:8b:60:6b:5a:fb:97:30: 94:2c:10:fe:fc:91:b1:21:7e:c3:a6:56:49:c3:cb: e9:3b:62:f5:c3:e2:f7:8c:73:8b:f5:d4:c6:20:b4: bd:51:18:a6:ed:fc:36:a3:60:86:be:6e:b4:ef:0e: 28:6a:d8:d6:9b:2f:f5:9f:dd:8e:4d:ff:ce:1a:7b: 5c:58:a6:86:c8:57:f9:bc:dd:85:35:f9:b7:a0:71: 25:0d:41:85:02:0d:d4:7c:71:23:f8:76:13:ac:8d: 34:a1:7a:da:c8:8c:ec:29:07:06:ae:a3:96:52:60: 57:29:da:0f:8b:6f:4d:3b:61:4b:dd:1a:66:89:6f: 0d:7e:3e:82:14:dd:6b:ad:c2:39:b5:db:a9:fd:72: a2:da:36:0b:98:8e:4c:78:58:66:b5:f8:d6:2a:56: be:b1:df:df:64:d5:d5:61:08:5a:04:60:60:3a:52: 62:ba:67:10:eb:da:11:15:2c:9b:77:17:ca:7c:23: 15:fe:ac:98:54:97:b8:80:63:b0:f4:d4:57:b3:c2: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:84:4E:C1:F4:D0:AB:5F:71:0D:2E:69:D3:F0:68:C0:89:72:B9:62 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3e:59:5a:6d:2c:fa:72:ba:ee:f9:38:8f:47:73:10:27:a2: 21:01:65:87:b0:36:d1:55:bc:80:f9:86:94:cf:56:c1:c5:aa: 9a:69:74:25:52:b9:51:e9:b5:56:fe:d5:21:72:56:e8:52:1d: e7:4e:a6:13:08:eb:b5:54:8e:7d:3e:2a:cf:e2:22:0f:ce:a8: 21:9e:23:a8:8d:c0:c0:f9:e0:78:13:04:da:3a:56:d8:8a:f5: f5:e1:85:37:7c:8c:43:c5:ab:45:0c:9d:06:51:de:fe:a1:e0: 3f:0e:9b:9b:5f:c2:e7:1b:65:6a:ca:9b:01:8d:78:cf:d7:88: cf:6f:bb:95:ec:78:88:99:fa:5d:00:ec:91:94:f4:7d:60:56: 15:01:30:7e:71:ed:7d:a5:38:37:de:29:20:0f:4c:71:dd:b3: 2a:d8:5d:55:c6:65:1a:d3:19:2f:bd:12:3d:a0:e5:2b:f0:3a: de:05:93:f8:ee:33:18:23:ff:de:15:f2:da:1f:4f:7b:55:45: 15:59:c1:09:01:ac:cd:41:0a:a4:b6:43:ff:21:ca:41:f8:0e: d4:54:8b:e9:5a:48:5a:98:d2:b8:ad:7c:f5:cf:35:68:ec:99: b9:47:ee:73:40:a9:f4:21:b3:03:52:24:20:13:6d:6e:19:07: 8f:1b:0a:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwOTI4MTQyOTA0WhcNMjYxMDA1MTQyOTA0WjAYMRYwFAYD VQQDEw02YWJhNzliMC0yY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2rp15gEFt3vq0AU+CriIyN3tzZRqogzm6jmUEJ1f4o3De/Hmhf1f0S4SPK6 GJKdMMDC2Ytga1r7lzCULBD+/JGxIX7DplZJw8vpO2L1w+L3jHOL9dTGILS9URim 7fw2o2CGvm607w4oatjWmy/1n92OTf/OGntcWKaGyFf5vN2FNfm3oHElDUGFAg3U fHEj+HYTrI00oXrayIzsKQcGrqOWUmBXKdoPi29NO2FL3RpmiW8Nfj6CFN1rrcI5 tdup/XKi2jYLmI5MeFhmtfjWKla+sd/fZNXVYQhaBGBgOlJiumcQ69oRFSybdxfK fCMV/qyYVJe4gGOw9NRXs8LdBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqETsH0 0KtfcQ0uadPwaMCJcrliMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGz5ZWm0s+nK67vk4j0dzECeiIQFlh7A20VW8gPmGlM9WwcWqmml0JVK5Uem1 Vv7VIXJW6FId506mEwjrtVSOfT4qz+IiD86oIZ4jqI3AwPngeBME2jpW2Ir19eGF N3yMQ8WrRQydBlHe/qHgPw6bm1/C5xtlasqbAY14z9eIz2+7lex4iJn6XQDskZT0 fWBWFQEwfnHtfaU4N94pIA9Mcd2zKthdVcZlGtMZL70SPaDlK/A63gWT+O4zGCP/ 3hXy2h9Pe1VFFVnBCQGszUEKpLZD/yHKQfgO1FSL6VpIWpjSuK189c81aOyZuUfu c0Cp9CGzA1IkIBNtbhkHjxsKow== -----END CERTIFICATE-----Generated at Mon Sep 28 18:51:53 2026 by rpki-client