
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json)
Hash identifier: wj8kEutw8zNmivhs+oiKSTGNjtA/mLvcXmmmw8/YEPo=
Subject key identifier: CE:B9:9F:0B:FC:A0:15:A9:5C:ED:C1:9A:0F:DF:B3:EB:2C:2A:E5:68
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0903
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
Manifest number: 085C
Signing time: Tue 12 May 2026 21:28:59 +0000
Manifest this update: Tue 12 May 2026 21:28:59 +0000
Manifest next update: Tue 19 May 2026 21:28:59 +0000
Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: f+eEgykzH9Pwwr83aRNrNns04holM4sQYtbOiRMeoFg=)
2: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=)
3: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=)
4: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=)
5: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: May 12 21:28:59 2026 GMT
Not After : May 19 21:28:59 2026 GMT
Subject: CN=6a039b9b-2fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:17:44:39:94:b8:00:16:4e:87:35:d8:23:
52:07:18:a5:aa:a2:4d:3d:34:68:74:89:e9:55:66:
c7:bb:14:b6:58:9e:aa:93:70:ad:2c:d9:fe:06:af:
a7:cb:91:99:1d:5a:66:f5:28:52:c2:df:a3:cf:b7:
86:be:a1:00:eb:33:54:f5:d8:ce:cf:34:fe:b2:e4:
01:38:73:7f:80:7a:fc:86:f1:48:64:de:06:6d:fd:
e2:ad:75:e3:fb:e3:b1:5c:23:13:d4:a6:de:57:fe:
2d:25:35:03:98:d8:b9:e0:8a:a8:ce:b8:f7:c0:b8:
a4:ec:1d:d1:e7:cf:36:77:ff:a1:88:35:14:cf:0d:
d6:b5:bf:df:e9:52:c4:a6:42:60:53:ae:89:7d:ca:
8f:78:02:99:09:9c:65:cc:63:17:17:af:8d:77:ce:
15:86:dc:30:ce:fa:6f:64:d6:79:91:d0:6e:e1:68:
76:1c:09:0d:a3:73:9c:3c:de:db:f7:9a:89:a2:6c:
ca:d4:75:f2:d1:a7:5a:b6:b3:b4:10:bd:f9:50:4b:
fb:7b:7a:83:86:0e:05:fd:45:ac:b5:54:2c:e0:5e:
86:fb:68:bc:af:a5:96:e4:44:bd:e0:11:94:f5:3c:
4d:94:31:47:02:b0:bf:7d:e1:79:5e:a8:95:3c:6c:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B9:9F:0B:FC:A0:15:A9:5C:ED:C1:9A:0F:DF:B3:EB:2C:2A:E5:68
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:f8:92:3a:68:29:2c:73:d2:35:4d:ef:d0:c6:c4:67:39:
0d:56:a9:95:e9:93:9c:81:e1:38:ac:4b:33:0f:4e:d3:70:65:
59:88:00:f7:dc:67:4f:61:aa:ab:18:ac:52:74:7c:cf:bb:86:
5c:2a:bb:f3:d8:6d:8e:4b:a9:05:1f:e8:df:ec:f5:72:e3:2a:
e0:9b:0d:0e:ee:cb:93:14:da:17:0a:4f:51:f5:31:b1:d2:05:
65:1c:83:94:f7:0d:be:31:93:8e:58:88:a1:0a:2d:c7:1f:c9:
8a:a5:16:93:bd:07:9e:45:df:f8:3d:1e:16:0b:73:63:37:05:
a7:60:06:a1:5a:4c:8d:78:1c:b1:fe:73:46:12:c9:22:95:a2:
30:dc:e9:af:05:75:e1:c7:c3:44:f9:2a:0f:ba:4b:21:4a:2e:
3b:99:57:05:a0:bc:79:17:58:ed:cf:a0:db:e7:68:65:95:8c:
07:6e:e9:cc:8d:76:34:e7:6c:e1:f7:59:ed:a4:07:a5:1a:0f:
64:47:34:13:48:d1:03:52:33:fe:90:d8:ce:ae:fe:5b:29:ab:
de:2f:a9:11:15:74:ed:01:10:6c:e3:d2:b7:9d:ed:e9:c0:19:
ef:40:d7:96:59:e0:0d:ad:f0:df:f5:16:f2:1f:cd:f4:f6:28:
8e:97:ef:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0
NTZGM0Q5QkMwHhcNMjYwNTEyMjEyODU5WhcNMjYwNTE5MjEyODU5WjAYMRYwFAYD
VQQDEw02YTAzOWI5Yi0yZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzoUXRDmUuAAWToc12CNSBxilqqJNPTRodInpVWbHuxS2WJ6qk3CtLNn+Bq+n
y5GZHVpm9ShSwt+jz7eGvqEA6zNU9djOzzT+suQBOHN/gHr8hvFIZN4Gbf3irXXj
++OxXCMT1KbeV/4tJTUDmNi54Iqozrj3wLik7B3R5882d/+hiDUUzw3Wtb/f6VLE
pkJgU66JfcqPeAKZCZxlzGMXF6+Nd84VhtwwzvpvZNZ5kdBu4Wh2HAkNo3OcPN7b
95qJomzK1HXy0adatrO0EL35UEv7e3qDhg4F/UWstVQs4F6G+2i8r6WW5ES94BGU
9TxNlDFHArC/feF5XqiVPGy0lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM65nwv8
oBWpXO3Bmg/fs+ssKuVoMB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw
MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjdBQi81Njc4NjU2ODQwMDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQ
MlFnVVpRTGs4STVGYnoyYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgEP4kjpoKSxz0jVN79DGxGc5DVaplemTnIHhOKxLMw9O03BlWYgA99xnT2Gq
qxisUnR8z7uGXCq789htjkupBR/o3+z1cuMq4JsNDu7LkxTaFwpPUfUxsdIFZRyD
lPcNvjGTjliIoQotxx/JiqUWk70HnkXf+D0eFgtzYzcFp2AGoVpMjXgcsf5zRhLJ
IpWiMNzprwV14cfDRPkqD7pLIUouO5lXBaC8eRdY7c+g2+doZZWMB27pzI12NOds
4fdZ7aQHpRoPZEc0E0jRA1Iz/pDYzq7+Wymr3i+pERV07QEQbOPSt53t6cAZ70DX
llngDa3w3/UW8h/N9PYojpfv8g==
-----END CERTIFICATE-----
Generated at Wed May 13 00:59:43 2026 by rpki-client