
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: 9mugiS0a4YGpKHrbwz1uHSpHP1wOY7oRnrTsYRA7G3o=
Subject key identifier: B0:B6:4A:2E:EC:DB:B4:DF:D6:16:C1:44:ED:BE:1C:72:7F:2E:BC:32
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 3593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 3565
Signing time: Wed 24 Jun 2026 14:28:43 +0000
Manifest this update: Wed 24 Jun 2026 14:28:42 +0000
Manifest next update: Wed 01 Jul 2026 14:28:42 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: A3HRi37UoWgU2ehE58lda7IIG4Nbw83S1IAKgU6zTng=)
2: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=)
3: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=)
4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=)
5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=)
6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=)
7: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=)
8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=)
9: A05116766B2311F1965223AA8747A888.roa (hash: FjxodfmopqbPlzog3jfw0EAZ9HHXwsMpESjOWoQMzg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 14:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13715 (0x3593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Jun 24 14:28:42 2026 GMT
Not After : Jul 1 14:28:42 2026 GMT
Subject: CN=6a3be99a-d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:ec:fb:9b:a6:67:79:fc:df:8b:51:3b:c7:
32:a1:11:02:46:3c:43:ac:63:45:0f:2d:1d:61:23:
87:61:d3:15:5c:94:d0:6f:5a:9a:6c:e4:19:d4:cf:
34:36:6d:47:d3:27:be:35:d3:0e:5e:ca:2e:c9:91:
5d:50:b4:bc:3c:1f:4a:f5:8d:b1:1a:06:0c:0a:97:
9a:fa:39:6c:df:ec:e7:87:a3:ab:45:40:1c:16:44:
81:98:72:3c:a2:23:a2:a8:8b:12:e6:39:1f:43:d0:
b6:9f:bc:e3:fb:9f:66:d1:db:e5:da:c7:3b:93:77:
78:ea:ed:4f:0c:ce:81:93:29:05:a9:9f:d9:a9:2f:
48:bd:ee:9b:78:be:06:cb:f0:88:cb:fb:02:4c:90:
1e:22:d4:1f:ad:26:03:a1:59:5e:68:b7:b0:cd:3a:
89:c7:5a:ac:2e:53:42:f4:ef:0d:02:5d:db:15:2d:
d7:96:7b:fb:41:af:bd:88:48:16:a5:ff:87:a0:14:
c7:1b:88:e3:a6:c2:0e:46:dd:ef:a4:be:07:18:5b:
2a:70:3c:92:55:f3:f8:27:86:99:48:bd:d4:1d:7e:
03:2b:0b:71:1e:0a:30:32:58:a7:22:35:9c:ac:cc:
b6:b2:3e:cc:44:f1:9b:dc:ef:88:02:f0:88:0f:00:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:4A:2E:EC:DB:B4:DF:D6:16:C1:44:ED:BE:1C:72:7F:2E:BC:32
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c7:3f:78:78:a1:35:b3:da:4d:06:1d:5b:44:6f:4c:bd:d6:
ed:85:84:d5:e9:0d:ed:5f:ac:e6:8e:29:75:3d:8a:67:cd:d6:
df:44:cd:b4:69:4c:d5:51:85:3c:85:14:f7:23:e5:cc:b3:ef:
88:a1:a5:7d:31:38:db:6a:05:93:db:f3:08:4c:f8:f7:5b:bf:
06:c5:41:e7:a4:dd:5a:03:c2:3c:5e:69:ab:e9:b8:37:45:e1:
25:b3:80:65:b5:af:9b:78:5b:68:79:43:43:01:d0:08:d2:c2:
6c:2d:63:52:67:9f:a4:2b:5a:ea:5d:6b:27:ce:b7:92:ff:4e:
2d:9c:ea:a6:43:09:52:7d:b4:27:5e:71:5d:59:1e:88:ce:ab:
86:46:69:ed:cb:97:4d:26:3d:17:22:83:72:fc:23:22:f1:ce:
8c:82:fa:57:e5:68:65:6a:91:c2:1a:57:e2:98:b1:ce:10:af:
77:fe:05:e6:6b:17:41:96:36:5d:9e:90:f7:d0:e1:c1:15:51:
b3:b0:39:44:44:06:15:3a:79:7d:e7:fd:cf:7f:55:bb:da:6a:
f7:0c:98:8e:3d:64:94:57:e6:c6:80:38:7f:d3:b2:ae:b6:99:
1b:5c:84:75:2f:e8:30:c8:8c:f5:59:f6:57:1a:ac:1d:e6:99:
9b:48:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 23:30:21 2026 by rpki-client