
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: v8PdIKyHZN+C62gr4hy/uvJIHlwwry8jXXXe/9ZTD3Y=
Subject key identifier: 32:D3:17:A0:EC:2A:3A:36:EC:02:E3:37:5B:A4:39:F0:1B:54:65:18
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 359E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 3570
Signing time: Thu 16 Jul 2026 14:28:31 +0000
Manifest this update: Thu 16 Jul 2026 14:28:31 +0000
Manifest next update: Thu 23 Jul 2026 14:28:31 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: JQNZ6OuzMFxy0pzMh5KFaSepdss5brGZFcGIUME0/4I=)
2: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=)
3: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=)
4: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=)
5: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=)
6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=)
7: A05116766B2311F1965223AA8747A888.roa (hash: FjxodfmopqbPlzog3jfw0EAZ9HHXwsMpESjOWoQMzg4=)
8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=)
9: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 14:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13726 (0x359e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Jul 16 14:28:31 2026 GMT
Not After : Jul 23 14:28:31 2026 GMT
Subject: CN=6a58ea8f-e73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0d:3f:46:1e:4e:ee:42:8b:29:80:4c:e5:86:
60:33:15:5e:07:0b:76:45:19:a8:6d:eb:e1:2a:a6:
48:76:fd:b2:27:6a:8b:1d:6c:1c:70:4c:88:22:db:
d6:b7:ef:39:1a:62:20:28:7f:e0:fb:02:65:b1:cb:
39:3e:ab:41:93:be:71:38:3a:03:a2:8b:79:4e:17:
28:f0:44:4d:19:d6:36:90:96:98:75:82:8a:9c:e1:
c8:20:5e:40:cb:92:2f:1a:1e:e2:c4:4e:06:93:23:
20:6e:f7:78:04:62:a4:3e:ca:77:5f:58:da:7f:43:
36:55:30:8e:72:84:be:2d:e0:1e:69:bc:17:ae:9f:
2c:a1:a5:c8:fb:22:d2:2b:09:98:39:d7:9c:2f:c6:
6e:de:81:38:bb:7a:c3:33:ec:fd:2f:94:6f:8c:12:
d0:3c:64:59:66:ab:58:23:cc:58:3a:52:4f:9e:07:
e5:9a:18:13:9a:84:ab:56:99:8a:1c:59:c0:9c:c1:
12:cc:94:ae:f3:31:ee:4a:c4:d9:03:79:6d:99:3a:
39:45:21:8f:3c:dc:18:86:3f:18:31:79:97:cb:95:
1f:93:a8:86:d4:ec:b8:9e:49:95:f3:fa:69:f4:3e:
8b:ab:a2:b0:70:1e:69:8b:02:61:d6:b1:c6:08:b5:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:17:A0:EC:2A:3A:36:EC:02:E3:37:5B:A4:39:F0:1B:54:65:18
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:12:6b:0b:d1:49:80:bf:c0:1f:34:74:a9:2c:46:bc:41:0d:
58:68:2f:28:30:71:81:4b:da:cc:86:ea:74:9c:24:3e:85:ae:
a8:10:21:d3:fc:d2:76:a0:a3:16:6c:2c:33:dc:91:40:0a:d6:
3f:a7:38:91:f5:4c:c5:71:a5:45:1a:a6:52:c9:d9:28:05:b8:
60:75:ba:35:84:37:3f:cd:33:0f:9c:b0:4d:30:cd:b8:81:27:
91:0a:6d:5d:c2:02:f8:db:ca:c7:dc:42:92:59:f7:5c:97:f6:
fb:10:9f:9b:d9:8a:31:0a:36:33:f0:0e:f3:4e:55:24:03:33:
2a:ed:71:5d:0f:7a:d0:17:e7:63:89:5d:2d:53:bf:c8:81:a9:
e9:34:2a:9c:69:cb:28:43:b3:5f:ce:55:2d:06:f4:3d:d1:53:
77:c8:8f:ef:0a:27:dc:e7:0c:7b:53:d7:97:10:d3:eb:87:9d:
eb:ff:87:05:d5:ca:46:3a:99:7a:a1:66:5e:ad:23:d1:14:7f:
9b:37:db:fc:67:ef:ec:10:ac:cf:a4:ab:90:17:4f:35:47:0a:
26:e0:65:4a:32:09:d2:ee:b6:3c:68:74:b2:d4:b4:e1:ca:97:
e6:c7:ea:39:53:31:19:f6:db:3d:73:53:c8:c8:2c:cb:54:d1:
b4:ff:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 07:41:49 2026 by rpki-client