
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: LTVyCD4XRlRaTr0Z+W/KFIe9icMekBcm3hXq9nr9P0s=
Subject key identifier: 89:40:2A:23:6A:08:C1:B1:59:C5:09:DE:3C:1B:7D:C9:43:A4:14:D0
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 3583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 3558
Signing time: Sat 06 Jun 2026 14:29:05 +0000
Manifest this update: Sat 06 Jun 2026 14:29:04 +0000
Manifest next update: Sat 13 Jun 2026 14:29:04 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 9ChaCPE/D7//Ow8WyKuGDMlhIPcaQp0fhTz4kJGQcD4=)
2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=)
3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=)
4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=)
5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=)
6: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=)
7: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=)
8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=)
9: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 14:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Jun 6 14:29:04 2026 GMT
Not After : Jun 13 14:29:04 2026 GMT
Subject: CN=6a242eb0-dc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:44:24:c0:80:da:ba:03:0d:a9:d6:e5:eb:
06:f6:d4:7d:0f:5e:8b:ef:47:fc:69:ec:7f:46:1c:
7b:4b:a0:61:4f:9f:dd:ff:47:6d:a4:0f:9b:6b:b7:
e2:d1:0b:63:f0:52:f2:0c:e3:95:2c:e6:6f:6f:9d:
e3:96:9c:3e:57:43:93:96:44:d3:09:58:9e:3f:fe:
f6:ee:14:4f:f2:85:f5:00:3e:36:7b:38:b1:d4:42:
6e:00:25:75:5d:81:9b:32:5c:cd:23:b9:7c:6c:d1:
55:45:48:01:09:1e:d1:97:ef:d5:88:71:de:a7:cd:
7a:5c:4f:28:2a:71:ca:ae:d1:95:48:bb:a2:e3:0e:
78:22:b6:ee:1f:89:a1:ad:db:b0:05:1c:dd:fb:e7:
24:09:b8:5f:29:e9:85:01:2a:7c:d5:2d:c4:5b:1b:
4e:c5:4d:bc:57:b9:b6:b9:3f:7a:0d:14:0e:1b:08:
59:c1:6f:30:09:c3:fe:ec:7d:48:38:f5:49:96:88:
67:af:de:a6:d2:12:b6:71:c3:66:69:29:4d:de:ed:
59:3c:87:05:6e:bc:52:2f:b8:cc:05:e0:f3:a8:69:
33:53:37:c5:5d:73:24:66:b1:c4:29:2e:3a:d5:a5:
5f:f4:b4:d0:e0:f8:8c:f9:ae:55:d8:46:21:7d:88:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:2A:23:6A:08:C1:B1:59:C5:09:DE:3C:1B:7D:C9:43:A4:14:D0
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:f3:97:3f:c1:52:d5:e5:12:ef:26:f7:b8:03:48:97:66:
79:8e:bc:e6:e2:90:9c:33:95:ba:a9:a1:04:09:67:57:16:5c:
c1:0c:27:1a:72:11:c1:63:fa:7d:0e:87:49:a8:99:05:63:79:
46:47:95:77:ee:8b:a9:11:c9:82:14:9d:e7:4e:79:9b:78:d1:
ac:ee:cd:32:3b:f6:2b:23:91:42:b5:71:ea:ba:c4:d9:9f:b0:
a3:36:ca:84:b1:d8:33:eb:75:03:32:5e:80:cd:c8:24:da:3e:
35:8a:aa:4e:a0:ae:0e:17:ef:13:f8:ec:16:57:5c:52:cb:2c:
a4:22:f7:34:ce:09:66:3d:70:fd:0a:40:fa:92:8d:ff:b7:22:
49:d3:e8:a5:bb:63:42:fd:4d:38:50:19:9a:7e:57:be:bb:30:
4a:32:b9:1e:d8:64:72:b0:34:1a:eb:66:3c:d0:42:db:02:c5:
94:c0:33:02:c7:e3:68:22:66:bd:22:50:3e:1f:7e:a5:58:e6:
b6:69:83:4f:b5:ae:7f:2a:ab:03:71:36:96:96:8f:8f:ff:c6:
d9:3e:14:50:5e:f8:3d:1c:5c:dd:ba:eb:89:69:af:1f:15:31:
2c:00:29:2c:ac:1b:14:0d:05:bc:fc:4e:97:d4:06:56:74:d6:
6d:63:58:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy
REZFNTlERTQwHhcNMjYwNjA2MTQyOTA0WhcNMjYwNjEzMTQyOTA0WjAYMRYwFAYD
VQQDEw02YTI0MmViMC1kYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq11EJMCA2roDDanW5esG9tR9D16L70f8aex/Rhx7S6BhT5/d/0dtpA+ba7fi
0Qtj8FLyDOOVLOZvb53jlpw+V0OTlkTTCVieP/727hRP8oX1AD42ezix1EJuACV1
XYGbMlzNI7l8bNFVRUgBCR7Rl+/ViHHep816XE8oKnHKrtGVSLui4w54IrbuH4mh
rduwBRzd++ckCbhfKemFASp81S3EWxtOxU28V7m2uT96DRQOGwhZwW8wCcP+7H1I
OPVJlohnr96m0hK2ccNmaSlN3u1ZPIcFbrxSL7jMBeDzqGkzUzfFXXMkZrHEKS46
1aVf9LTQ4PiM+a5V2EYhfYga8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlAKiNq
CMGxWcUJ3jwbfclDpBTQMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE
ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT
QjltYS1hMDUzVjh0X2xuZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZdXzlz/BUtXlEu8m97gDSJdmeY685uKQnDOVuqmhBAlnVxZcwQwnGnIRwWP6
fQ6HSaiZBWN5RkeVd+6LqRHJghSd5055m3jRrO7NMjv2KyORQrVx6rrE2Z+wozbK
hLHYM+t1AzJegM3IJNo+NYqqTqCuDhfvE/jsFldcUssspCL3NM4JZj1w/QpA+pKN
/7ciSdPopbtjQv1NOFAZmn5XvrswSjK5HthkcrA0GutmPNBC2wLFlMAzAsfjaCJm
vSJQPh9+pVjmtmmDT7WufyqrA3E2lpaPj//G2T4UUF74PRxc3brriWmvHxUxLAAp
LKwbFA0FvPxOl9QGVnTWbWNYxg==
-----END CERTIFICATE-----
Generated at Sun Jun 7 20:45:03 2026 by rpki-client