
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: s8Kj+5mn+XPoA6InOVHP22UtD1jtNqqM6teB/ryIfvc=
Subject key identifier: D7:0E:0E:DA:77:86:7F:0B:0D:97:29:D5:70:19:E1:AF:6C:8E:73:88
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 35AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 3576
Signing time: Fri 24 Jul 2026 14:30:07 +0000
Manifest this update: Fri 24 Jul 2026 14:30:06 +0000
Manifest next update: Fri 31 Jul 2026 14:30:06 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: m3TypmnzptXrig/rYabNEZBaHAHKWgUwyq7X0Ko2j8Q=)
2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=)
3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=)
4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=)
5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=)
6: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=)
7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=)
8: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=)
9: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 14:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13740 (0x35ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Jul 24 14:30:06 2026 GMT
Not After : Jul 31 14:30:06 2026 GMT
Subject: CN=6a6376ee-4c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:ae:cb:7f:c4:14:65:12:c4:6d:d9:b0:b2:
86:8b:f2:3d:15:e7:69:ee:9f:1f:0e:37:fe:e9:95:
e3:50:9b:ed:7a:89:05:6a:9a:c9:af:47:69:8f:85:
92:2d:9e:03:9f:f1:af:be:00:04:98:09:ad:5a:f8:
74:c0:7b:9d:ea:8d:07:91:a3:18:aa:0f:44:06:fb:
3a:f6:c0:bd:3f:9d:51:9e:6f:b6:69:94:7a:ef:4f:
d6:c7:e3:36:9b:02:82:97:ef:64:d2:c8:e1:d4:b0:
97:9b:83:11:6c:43:3e:8f:f7:b7:61:dd:ed:a8:5a:
04:6a:05:b5:7c:5b:1b:c3:0b:3e:eb:e1:72:ff:2a:
04:4e:9a:82:06:45:a8:cc:e9:11:db:14:bb:9a:13:
ea:f2:f2:da:f9:1d:c0:ed:e0:3e:e6:1a:8c:63:ad:
7d:ee:14:7f:2f:18:48:e1:73:3d:e2:38:60:1b:b3:
80:17:49:ee:e0:6c:3e:da:91:c9:93:8d:45:df:28:
86:cb:4b:81:44:3d:a0:4e:ec:80:bf:71:c5:53:76:
75:d2:af:8a:8c:19:87:4e:08:a4:d9:c6:2b:7a:0e:
30:60:54:79:82:12:dd:75:e8:13:e9:fd:32:1f:25:
16:67:f0:b6:42:a9:2c:84:d1:38:7b:2c:0d:15:78:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0E:0E:DA:77:86:7F:0B:0D:97:29:D5:70:19:E1:AF:6C:8E:73:88
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:12:ca:7f:a2:f6:5d:8c:67:68:8a:31:b9:5d:ae:a8:a1:11:
82:a8:1c:42:97:09:3c:d8:8a:d4:07:58:6d:45:47:d8:69:f0:
df:6d:47:79:4b:b6:b2:8b:7f:3e:71:82:79:ef:ba:a6:2e:19:
e7:bd:6c:22:55:d8:b2:50:dc:9e:77:5d:0f:4d:30:22:17:e7:
ca:d8:36:14:26:eb:19:b9:12:30:43:4f:2b:d0:68:3e:65:84:
cf:40:8b:12:09:81:b9:bf:45:ac:b1:7f:15:ea:58:6f:2c:69:
31:08:e3:16:5f:23:3f:e7:a8:79:53:39:14:97:1f:5b:ed:6c:
27:f8:2c:c1:27:44:44:38:8f:33:97:b7:42:68:37:1f:1b:7b:
c7:a1:3b:13:18:14:ea:f3:64:2f:c0:3a:cc:91:18:83:c9:c7:
d5:46:c9:23:0c:8f:35:c5:63:39:48:d4:57:06:c4:ae:ea:66:
dd:d0:b0:ac:45:c4:21:45:63:aa:56:4d:29:fc:a0:7e:30:d1:
b6:3a:e7:6e:75:35:ad:d4:78:1d:f1:a9:2b:5d:64:70:cc:ee:
61:9f:87:0a:d9:cf:87:64:b0:ef:99:23:fc:82:df:ed:c2:f2:
a5:72:a0:30:f8:be:c2:62:30:7c:04:46:ef:ca:43:2e:9b:14:
7b:37:9c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 08:58:39 2026 by rpki-client