
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: HXreyyAi4YrPtkUEIFek9Jkz5BtxQ8hJOMwFAMJIzC8=
Subject key identifier: 93:09:41:E8:8A:FD:35:29:41:6B:DB:3E:2E:5B:02:00:A7:30:42:5B
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 35C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 358E
Signing time: Tue 08 Sep 2026 14:29:09 +0000
Manifest this update: Tue 08 Sep 2026 14:29:08 +0000
Manifest next update: Tue 15 Sep 2026 14:29:08 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: uIzDXP6wTJQoOlMP0s0ELySKWb4BgtsNkN7eUb8y8Fg=)
2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=)
3: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=)
4: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=)
5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=)
6: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=)
7: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=)
8: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=)
9: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 14:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13764 (0x35c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Sep 8 14:29:08 2026 GMT
Not After : Sep 15 14:29:08 2026 GMT
Subject: CN=6aa01bb5-f041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:6e:b7:1d:7a:f3:52:42:eb:d1:fe:87:6e:
17:77:42:76:0f:b4:8f:80:c6:82:53:cd:97:79:66:
93:5f:96:0e:17:89:cd:75:c8:25:23:e1:f6:73:9c:
c1:b8:73:bf:65:69:f8:92:0d:82:6e:54:5b:c1:82:
7c:15:4c:25:da:84:71:16:97:ff:63:fd:e8:ea:a0:
1e:d3:5f:8f:3d:f8:1a:8e:69:a4:96:75:90:cf:73:
b2:bb:f1:19:be:a9:7d:85:5b:86:ce:23:b8:9d:f1:
84:b0:82:08:97:7c:b9:2b:a9:92:80:fe:fb:cf:0a:
ef:8f:30:05:93:d3:07:37:39:dc:c5:a2:68:78:c0:
88:1e:ae:13:45:1a:ba:f5:48:48:c0:50:8a:84:de:
f0:b7:34:84:1f:ea:23:eb:9b:e1:13:37:a9:8d:34:
c2:52:30:63:a0:d5:f0:cd:f4:87:0f:f6:ae:69:f2:
ec:24:30:04:cb:05:e1:87:3a:eb:d5:9d:f4:10:38:
b1:b6:73:4f:bc:0e:8b:66:e5:79:db:d7:d7:73:8c:
ba:12:3e:ea:25:a7:ad:9e:e5:02:b7:cd:ff:88:32:
8a:5b:ad:55:13:ae:ca:d7:d3:1b:90:4e:37:bd:31:
18:f4:2a:e2:74:63:ac:23:b1:a6:fe:26:07:72:a0:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:09:41:E8:8A:FD:35:29:41:6B:DB:3E:2E:5B:02:00:A7:30:42:5B
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:05:ff:42:a9:39:49:65:5e:30:cd:7e:be:25:ce:44:d9:22:
60:ca:7a:0e:c4:24:10:b7:a4:8a:f0:26:92:98:01:a2:2c:c9:
aa:b5:0b:37:08:bc:d4:d7:d7:55:2a:09:b8:c4:6a:bb:59:97:
b7:d3:74:85:8d:f3:f9:09:32:26:1f:5e:95:fb:03:f6:54:51:
f8:84:f5:25:3c:10:3c:17:11:2f:d7:e7:20:73:15:46:43:d4:
85:ad:1e:fe:ba:41:21:64:42:51:64:ac:de:c9:13:58:5e:21:
4a:ab:9b:69:7c:4b:ec:47:87:55:94:cb:57:a6:ec:51:54:34:
b4:88:c6:6a:b6:df:34:5f:b6:9a:bb:c8:f6:ff:8a:5b:7f:a2:
d7:a5:0d:11:92:ba:ee:b1:1f:9b:7c:91:41:8c:46:e5:4c:04:
80:b4:2e:3f:4a:67:f3:a3:f0:ff:5d:c4:dc:bd:4f:3c:59:b0:
b5:60:40:27:49:c5:0c:db:26:37:e5:ba:ed:dc:07:37:e2:4d:
49:2c:81:3b:84:c0:0d:8f:82:2a:7e:72:f5:a6:dd:2a:15:f4:
fb:33:02:e2:4e:f7:0d:fe:f6:d8:da:c4:03:29:d8:5a:87:4c:
2c:27:6d:fa:1f:76:9a:41:98:34:3d:5b:fc:d6:da:29:fe:e1:
ee:6b:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 21:30:41 2026 by rpki-client