
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: ukuJXadsa58Zh9FjSFF2uItn84l+RfjswcGdAbFfcKE=
Subject key identifier: 8E:10:36:35:A9:F6:62:90:34:04:56:AC:F6:0B:25:8E:E4:0E:33:87
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 35D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 359A
Signing time: Fri 02 Oct 2026 14:29:27 +0000
Manifest this update: Fri 02 Oct 2026 14:29:26 +0000
Manifest next update: Fri 09 Oct 2026 14:29:26 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: VZOJ97NaZ09dVkLsd1MapUTuML295X8mtugOZhe3kic=)
2: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=)
3: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=)
4: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=)
5: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=)
6: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=)
7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=)
8: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=)
9: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13776 (0x35d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Oct 2 14:29:26 2026 GMT
Not After : Oct 9 14:29:26 2026 GMT
Subject: CN=6abfbfc7-a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:2f:28:9d:c7:74:95:36:95:3d:7a:92:2c:
d2:4a:ae:00:05:59:fd:26:37:aa:e0:f2:dd:7c:45:
84:90:7d:ee:02:77:01:4c:d8:91:5e:de:84:4b:09:
21:63:46:3b:04:15:42:ef:54:0b:86:03:32:ca:cd:
ee:9b:40:b6:bb:aa:1c:3e:25:37:b0:d2:3c:9a:b0:
d2:f4:7c:cb:c2:33:12:f3:1f:fd:77:a6:6f:5e:9b:
30:fd:94:ba:9f:9a:a5:19:f3:67:8d:24:fd:3d:bc:
ca:cc:57:2d:40:8b:e9:4a:93:a3:5f:91:6a:a8:90:
34:b3:11:0b:d2:02:87:3d:d2:e5:16:ef:59:d2:05:
15:de:6c:80:a7:62:55:26:75:bf:dc:ca:f1:1d:77:
77:7e:8b:10:dd:93:a4:b6:0d:e1:d2:61:70:50:3a:
89:be:c9:44:b2:2e:9a:f9:df:17:fa:36:e9:43:c6:
eb:8a:b6:ea:f5:e3:79:c4:2c:3f:36:65:e6:fa:30:
ae:8b:85:19:43:7b:78:93:94:f0:2b:8e:34:b4:d7:
9e:f9:6d:59:82:30:1c:51:9e:03:df:f6:3a:93:a1:
5d:f9:8e:9f:ec:3f:75:f5:73:15:81:00:69:75:b3:
be:9d:32:c1:e8:ed:6a:ee:2a:3c:dc:8a:3b:55:87:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:10:36:35:A9:F6:62:90:34:04:56:AC:F6:0B:25:8E:E4:0E:33:87
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5b:df:04:57:1b:40:4a:cd:1d:b0:9b:f0:5f:8f:a3:8e:18:
32:6e:f0:bb:59:2c:c3:8d:b6:4a:67:b3:0c:f0:07:38:b7:0b:
2c:91:79:95:b9:b6:fc:c0:1e:d9:62:5d:7f:10:8d:1c:18:aa:
4f:6a:ed:23:f1:ad:49:f9:27:64:10:7e:8e:af:61:5e:14:f1:
66:99:b1:be:0f:39:e5:b9:91:aa:25:73:de:fd:81:80:cc:21:
4f:5a:00:4c:62:26:4a:66:57:02:a5:9c:e9:b2:4e:7c:94:5f:
c7:e0:8e:85:1d:65:56:da:1a:3a:b9:ff:0d:ed:f3:d2:e4:31:
b7:a9:a6:36:af:af:bc:0f:02:e7:77:56:04:6f:f6:a9:86:b8:
d5:da:19:b6:71:e9:06:cf:24:49:1c:f4:2a:b3:db:ca:4b:63:
85:e8:91:b1:07:9c:86:9a:92:39:1f:00:70:46:94:a4:2d:a0:
15:d4:e6:38:db:a0:ed:89:56:91:29:a1:7a:85:a3:94:27:4b:
a7:46:d5:1c:f1:20:3d:1d:6e:d0:40:a4:82:12:4d:05:61:c0:
b2:e2:c2:eb:57:21:4b:43:c2:96:4f:6c:6e:5a:ed:d3:3a:17:
53:a8:e6:07:3b:c7:04:c5:e9:dc:38:45:1f:b5:e8:fb:bc:05:
44:b9:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:47:43 2026 by rpki-client