
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: Kp6eaObKpJxrBbPV9YhqhmhMn7hBZMpq6yT/c/7iwEo=
Subject key identifier: FA:FB:7E:CF:B8:FF:DB:31:0C:F9:EA:13:7C:3C:33:38:46:FC:EF:6A
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 3576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 354B
Signing time: Tue 12 May 2026 14:28:46 +0000
Manifest this update: Tue 12 May 2026 14:28:46 +0000
Manifest next update: Tue 19 May 2026 14:28:46 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: tpQiEVoq55mfskwcE3+QGOj27TB9KCneSFn2G3XCxH0=)
2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=)
3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=)
4: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=)
5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=)
6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=)
7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=)
8: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=)
9: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13686 (0x3576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: May 12 14:28:46 2026 GMT
Not After : May 19 14:28:46 2026 GMT
Subject: CN=6a03391e-cc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:cb:11:00:2b:6b:13:9f:9d:59:8e:f6:50:
29:2d:bd:b5:1d:d2:87:ee:db:de:34:54:5f:e9:7b:
da:8e:ed:81:cf:2a:5c:60:e5:72:88:2b:cd:0c:74:
67:3d:69:fc:88:25:96:6a:85:ff:f5:e1:32:de:bf:
e9:62:47:38:da:40:e5:e0:46:60:ce:39:16:2b:18:
89:24:ac:c8:14:d3:e4:11:70:7a:e9:d6:a6:9c:f6:
d3:81:09:a3:2c:e4:8d:a1:02:e2:30:d9:1e:90:3e:
21:ec:ba:ce:42:e4:9b:74:f3:85:b6:ba:58:1b:0d:
bc:19:52:06:f2:74:09:8c:ca:c5:cc:28:f9:43:3b:
15:bd:61:e0:1a:17:6f:e3:88:68:79:b9:91:84:86:
30:4b:62:4e:4d:35:77:4a:e6:10:87:0d:6a:d5:82:
55:9b:8c:00:5c:5e:72:da:73:7e:5a:27:90:66:62:
0a:d2:ec:99:39:ec:84:52:4f:df:d3:44:cd:a0:65:
2c:a1:4d:23:59:97:28:1c:c1:4a:0c:0d:fc:7d:31:
3f:48:24:73:7a:87:b3:f4:88:91:50:3f:6c:a4:ea:
8d:fa:18:b4:bb:e2:91:d9:6d:a6:53:e4:59:11:37:
14:c8:ab:d2:22:a1:7c:80:df:38:a4:48:ff:4c:26:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FB:7E:CF:B8:FF:DB:31:0C:F9:EA:13:7C:3C:33:38:46:FC:EF:6A
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2a:5c:15:e9:40:5e:7b:55:f4:da:d7:f3:80:ac:88:ef:23:
21:b7:83:06:eb:14:58:9a:10:8b:24:30:51:05:46:60:92:a2:
6e:c7:56:3f:fa:d4:1c:aa:f0:82:6d:f1:58:9c:c7:d6:32:a6:
a3:86:73:6f:44:4e:90:b9:9a:ff:b4:f3:15:d3:8d:e4:34:67:
29:ba:5e:92:fa:1b:64:23:2a:3a:cd:bd:b3:b9:cb:31:05:8e:
f6:e7:c6:6f:c2:69:d2:42:fc:86:52:1c:27:33:74:7e:57:3c:
32:e8:60:8e:0c:b7:32:42:3f:24:9c:29:e2:4c:d1:fa:d9:9b:
04:15:51:f1:b4:f1:36:d4:13:a0:31:ba:cb:35:78:9a:0f:5c:
62:f1:6b:25:36:26:b8:7f:3c:43:e4:ea:e2:9f:b1:8a:c0:b5:
57:0e:be:86:56:7d:12:01:59:87:6c:5e:43:3f:78:f4:40:a6:
01:98:60:b4:c9:a4:28:ec:27:8c:c7:87:05:de:a7:cd:97:cc:
1d:6a:f3:e8:82:3e:6d:4e:b9:95:51:34:af:e5:89:dc:fb:2c:
79:42:e1:67:79:34:a0:d1:b6:9c:95:f0:1c:0f:b1:9b:d1:c6:
ce:49:37:e7:57:c4:d5:8b:ae:80:7b:70:88:2f:d2:65:0a:cd:
6b:4a:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:28 2026 by rpki-client