
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: XV+ozsTMLBa7pFbo09wnUG1s3RHFqW7M18bdK5q8/rE=
Subject key identifier: 85:BC:00:AD:E9:0F:87:07:56:05:B5:37:48:9C:41:83:F9:52:4D:F2
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 35D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 359C
Signing time: Tue 06 Oct 2026 14:28:44 +0000
Manifest this update: Tue 06 Oct 2026 14:28:44 +0000
Manifest next update: Tue 13 Oct 2026 14:28:44 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: ev5niMm6NoPaRTv/Pmf4kXX2suZ9TD5tVT38OYTSDIA=)
2: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=)
3: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=)
4: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=)
5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=)
6: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=)
7: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=)
8: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=)
9: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13778 (0x35d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Oct 6 14:28:44 2026 GMT
Not After : Oct 13 14:28:44 2026 GMT
Subject: CN=6ac5059c-c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:27:44:ae:17:a1:d2:cb:c5:a1:19:77:a4:
bb:04:87:27:c9:3a:ca:d5:97:3e:c9:87:28:36:a2:
ef:bb:ff:33:41:e4:f7:87:9b:2a:25:ae:ff:d5:ab:
10:ad:5a:b2:8a:86:15:64:24:27:89:b9:45:8b:11:
b7:3d:cb:2c:df:93:96:d9:1a:5b:ba:2b:c8:49:0c:
8f:fe:14:f9:3e:40:a3:3a:f1:ac:62:6c:4e:30:62:
4f:56:f6:35:10:2c:fc:23:96:d2:41:f2:d1:c9:9d:
21:7e:ec:85:af:b2:2d:c6:22:28:8f:47:3c:5f:64:
fc:2e:9d:bd:c7:b1:94:3a:01:c4:44:73:4b:c2:e6:
d3:5d:ef:25:aa:bd:14:3a:d4:03:9d:13:90:fe:12:
e9:6e:52:f2:49:ec:f0:8a:6a:dd:2a:29:93:a3:c1:
25:f0:78:dc:8c:30:1a:f5:f7:0d:ab:08:a7:66:aa:
41:42:15:47:74:30:19:e6:e7:0b:d8:0d:fe:4c:0f:
cb:64:b3:ff:26:9d:4c:25:37:d7:c1:8c:4d:da:b1:
6d:f6:98:bc:37:97:f0:da:c1:cf:9e:dd:2c:80:e8:
0e:7c:11:15:80:c0:04:1d:ed:71:95:39:b5:4e:dd:
81:82:b1:26:c9:87:ca:52:12:0f:46:2b:fb:33:0b:
ad:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:00:AD:E9:0F:87:07:56:05:B5:37:48:9C:41:83:F9:52:4D:F2
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:90:19:41:9b:fb:f1:10:37:e2:c9:4f:7a:2b:dc:c0:49:
13:b0:31:ca:69:de:41:a7:1a:69:c9:08:13:11:ee:9e:99:d3:
0e:d2:ad:ee:c8:1e:c1:87:0b:55:5c:ec:87:ce:21:d5:a9:75:
81:a8:b2:96:4c:13:8b:70:ca:82:09:7a:f6:ff:f5:d8:7d:79:
df:f0:d3:5f:06:56:69:13:6d:62:9e:c7:6a:f4:4e:61:d8:2d:
24:43:93:77:cc:df:83:db:01:79:25:d2:22:80:d4:c9:f9:27:
23:4c:ce:25:52:0d:95:8c:42:84:e9:e2:d9:7d:4a:46:19:e4:
95:86:a0:a5:e5:6b:35:6c:ac:46:8c:67:bd:cc:37:3d:4e:9a:
06:4f:1d:be:d5:2e:be:24:7b:67:3e:72:cf:a4:e8:71:6c:fb:
77:bc:27:c8:42:35:2c:fc:9a:10:8b:25:b6:63:e5:e1:3a:03:
3e:2e:c5:27:3f:e3:b1:13:9e:30:3c:11:56:d5:6e:c4:54:b5:
87:fd:6b:71:3b:89:4c:84:70:4c:e1:c7:1f:48:90:23:38:ce:
a6:71:ea:e5:15:98:6c:c2:c5:a1:f1:0c:d2:c5:e7:51:3e:79:
87:e4:9c:a6:74:84:25:2a:83:1e:8d:52:cb:b1:54:5d:7a:2f:
94:16:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:18:54 2026 by rpki-client