
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: zV+tCI9sXHMtqgOmCJNi/JwEFGVZ575NluCXiUTgUwI=
Subject key identifier: 5A:5B:F6:51:69:BB:AA:A3:42:CE:B3:7D:08:7E:BA:4D:E6:3C:68:9C
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 3577
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 354C
Signing time: Thu 14 May 2026 14:28:38 +0000
Manifest this update: Thu 14 May 2026 14:28:37 +0000
Manifest next update: Thu 21 May 2026 14:28:37 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: P00RIdhoyotEXXdz919BvaxRuweKefdeZKk9QCoq5Lo=)
2: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=)
3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=)
4: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=)
5: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=)
6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=)
7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=)
8: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=)
9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 14:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13687 (0x3577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: May 14 14:28:37 2026 GMT
Not After : May 21 14:28:37 2026 GMT
Subject: CN=6a05dc15-d008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:51:4d:dc:4a:e5:88:05:59:c2:32:93:90:
ee:90:5c:2c:8f:31:13:99:37:79:e0:71:20:77:84:
24:ed:c9:9d:b4:db:e3:d2:2e:17:bd:cd:75:aa:7d:
4e:46:62:76:9b:59:b0:5b:1f:eb:5f:7e:6c:a2:c0:
c3:95:37:2e:61:c0:e3:42:94:b6:00:77:9d:cb:0d:
07:f5:84:87:ab:80:fd:c4:5a:7c:a5:bb:d9:5f:7a:
d1:54:ea:f8:2d:0f:f3:38:fb:e7:f4:22:2f:17:9c:
d2:d8:0c:34:97:c1:7b:dc:d3:c2:fa:3e:67:09:59:
5f:84:8c:99:cd:0a:d4:8a:c5:6a:3e:aa:0d:6a:ec:
8a:1d:a7:2a:83:72:dd:39:94:11:cb:d0:7b:65:16:
61:28:4e:63:ce:ac:6b:a8:15:ac:e9:27:f5:e8:9f:
88:d4:27:a1:8f:f4:0d:80:32:49:a9:21:29:c4:59:
43:d6:cd:15:b4:75:bc:63:4f:82:00:cf:4d:b1:90:
40:50:b6:f5:15:ee:0d:1a:ed:cb:40:e9:0e:c5:69:
38:7c:42:36:0b:43:fd:8d:86:2e:a0:1c:b1:4a:a9:
36:f4:f0:ca:ac:07:16:70:b6:d1:95:74:af:3d:8a:
63:2a:24:6f:e5:20:be:b4:c4:06:db:99:05:aa:e4:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:F6:51:69:BB:AA:A3:42:CE:B3:7D:08:7E:BA:4D:E6:3C:68:9C
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:90:73:d0:57:e9:96:24:44:d9:b8:c4:fd:f0:62:c3:d2:89:
fc:75:06:17:50:2e:52:9b:5a:59:89:43:2a:7d:6d:f0:f0:94:
33:5a:bb:53:24:c4:8f:9c:b0:1d:d5:8c:5c:30:3e:0e:d5:d6:
3d:d1:00:e2:6f:6c:47:de:48:35:b9:1f:0f:ab:06:0b:0c:47:
9e:9f:01:fc:cd:73:36:5a:ea:b8:c3:42:5a:1a:53:63:0d:df:
36:78:56:0e:ce:2c:a5:1f:40:d4:0d:d3:4b:70:de:87:80:03:
cc:35:ca:2e:ad:ab:b4:40:4a:ca:56:c3:f7:5e:87:57:c7:0f:
83:ff:30:a3:4a:08:f5:5f:68:2d:82:ef:06:65:2b:a6:78:7f:
b2:21:d1:3d:eb:eb:a2:ed:cb:00:4e:9b:64:ad:9d:91:d8:5f:
32:e8:f8:a5:12:aa:8b:f2:36:0f:f0:c2:eb:ff:40:5c:6c:1c:
2e:3f:4c:e5:99:f8:5e:f6:52:df:26:2b:bd:36:3e:bf:a6:eb:
39:4f:37:97:2d:19:e4:93:00:73:57:3c:ee:b4:39:22:57:c0:
1d:94:b2:43:65:77:82:4e:2d:9f:d2:49:c1:77:c9:0f:58:a3:
18:84:72:57:1b:33:e3:16:c7:51:1c:6b:0d:8d:5e:5a:ce:17:
db:b9:7e:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy
REZFNTlERTQwHhcNMjYwNTE0MTQyODM3WhcNMjYwNTIxMTQyODM3WjAYMRYwFAYD
VQQDEw02YTA1ZGMxNS1kMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjRVRTdxK5YgFWcIyk5DukFwsjzETmTd54HEgd4Qk7cmdtNvj0i4Xvc11qn1O
RmJ2m1mwWx/rX35sosDDlTcuYcDjQpS2AHedyw0H9YSHq4D9xFp8pbvZX3rRVOr4
LQ/zOPvn9CIvF5zS2Aw0l8F73NPC+j5nCVlfhIyZzQrUisVqPqoNauyKHacqg3Ld
OZQRy9B7ZRZhKE5jzqxrqBWs6Sf16J+I1Cehj/QNgDJJqSEpxFlD1s0VtHW8Y0+C
AM9NsZBAULb1Fe4NGu3LQOkOxWk4fEI2C0P9jYYuoByxSqk29PDKrAcWcLbRlXSv
PYpjKiRv5SC+tMQG25kFquRJwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpb9lFp
u6qjQs6zfQh+uk3mPGicMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE
ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT
QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkJBz0FfpliRE2bjE/fBiw9KJ/HUGF1AuUptaWYlDKn1t8PCUM1q7UyTEj5yw
HdWMXDA+DtXWPdEA4m9sR95INbkfD6sGCwxHnp8B/M1zNlrquMNCWhpTYw3fNnhW
Ds4spR9A1A3TS3Deh4ADzDXKLq2rtEBKylbD916HV8cPg/8wo0oI9V9oLYLvBmUr
pnh/siHRPevrou3LAE6bZK2dkdhfMuj4pRKqi/I2D/DC6/9AXGwcLj9M5Zn4XvZS
3yYrvTY+v6brOU83ly0Z5JMAc1c87rQ5IlfAHZSyQ2V3gk4tn9JJwXfJD1ijGIRy
Vxsz4xbHURxrDY1eWs4X27l+DA==
-----END CERTIFICATE-----
Generated at Fri May 15 02:37:59 2026 by rpki-client