
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: CgJrdq7M7e/AUOnSkxqIDcS5MeDApzaLCrNQby+A7so=
Subject key identifier: AB:E4:FD:ED:DA:C3:14:FF:FE:22:9C:7B:98:E9:47:DA:6C:C9:C5:FC
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 3586
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 355B
Signing time: Fri 12 Jun 2026 14:28:18 +0000
Manifest this update: Fri 12 Jun 2026 14:28:17 +0000
Manifest next update: Fri 19 Jun 2026 14:28:17 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: ap6RTpkf4pePXOlIjWdsym7a5c6YdbAFTSPdTD9B8vs=)
2: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: Kgd4J34styPn7Rb8ddiCj2+ZGD/DXbLpigJmT+8clPA=)
3: F647E58E768A11F081B6114EC4F9AE02.roa (hash: b+LJPs4oTEgbYPuw4xScIN07auG4DRm4dHLb6FQ37PY=)
4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: FlVPrDsSfHrJE6Ael/vXWEJGI/LdOA4fSbhWVqgtkCw=)
5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: noD3TirSagzbqT2L9ICLQJHoEsSHAvv6URv0K3T+cWc=)
6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: sbv2JXOYp6aZ8IOV/oTZQe8zMwZ6tYstipRR0c0CcQw=)
7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: 3DE8DITBzzgAMWXLEJDfkDHa7KqTWLn/gLRM5QfdZlE=)
8: F550BA02768A11F081B6114EC4F9AE02.roa (hash: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8=)
9: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: TkomiK35YD+/Yfb+zT5lXYw5d+ciL/x9DiFoomhoAFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13702 (0x3586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Jun 12 14:28:17 2026 GMT
Not After : Jun 19 14:28:17 2026 GMT
Subject: CN=6a2c1782-6ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:92:fc:66:e1:ac:7f:43:ab:b8:de:3f:61:
8c:3b:19:76:d3:3b:cc:07:a9:25:72:1b:7b:f2:97:
6e:2b:51:97:68:b4:da:c2:3e:ae:a2:1e:0e:1d:95:
ce:f1:fd:a7:69:4a:aa:05:37:46:fe:1a:67:a5:47:
2d:57:75:b9:6f:9e:ac:83:30:ae:91:16:2e:a2:d2:
3e:b1:08:2c:0d:87:91:b4:48:af:35:88:ee:16:a7:
e1:f5:ec:65:7e:12:90:b0:8b:5c:ae:9c:bd:37:fe:
b3:ba:ad:58:c2:df:5d:fd:ad:f1:53:af:99:fa:d7:
b5:7f:c3:b3:7f:b2:57:2e:8a:36:f9:fe:47:90:54:
3b:9b:03:58:87:95:67:75:9b:f5:77:fc:5a:23:f3:
c3:13:e5:7c:ab:f7:e6:b7:40:b9:1a:14:03:7c:d1:
fc:59:a3:f6:cb:7d:c6:d5:28:ba:39:df:cb:36:39:
7e:11:fc:1d:71:7f:7e:bf:04:ee:f3:79:70:7d:79:
ed:de:6a:2a:07:f7:8a:d3:9d:0f:b3:17:ad:34:75:
72:0d:95:09:75:58:ae:ab:62:a2:f2:af:ff:7c:d1:
22:b3:eb:f7:cc:db:00:3d:7c:e3:fe:cc:a8:31:9a:
f0:4d:54:ea:88:50:c3:78:aa:d6:dc:26:fb:27:56:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E4:FD:ED:DA:C3:14:FF:FE:22:9C:7B:98:E9:47:DA:6C:C9:C5:FC
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b3:0f:3d:54:f7:ef:40:90:8d:73:64:f7:86:14:59:64:bc:
10:8c:c3:27:bd:30:3c:35:f1:c8:ca:3a:7d:cd:a1:f1:fd:0a:
5b:b5:3b:81:06:d3:c1:6c:8f:4a:4e:94:5c:6c:77:69:65:91:
d3:a7:48:8c:d7:5f:66:16:bb:6e:15:12:3d:d8:6d:9f:2f:07:
ef:0b:e5:39:ef:10:76:6b:6e:17:94:c2:33:f3:5c:a2:56:06:
ac:17:b8:3e:09:23:62:08:29:1a:9d:35:3f:e4:8f:fb:05:ff:
88:6a:03:e8:a4:83:f2:f6:b9:71:d7:59:2a:d3:6b:b5:6e:36:
3d:7c:c6:37:4a:d0:e0:b8:c4:f7:57:12:f9:62:36:84:37:7c:
84:73:52:48:f2:45:15:dc:c5:16:c9:69:09:e3:03:cd:ca:ee:
f5:e6:7b:3f:24:ed:c1:bb:78:65:fd:00:75:8e:0b:53:4d:ef:
50:b7:0d:09:97:0e:9f:e8:d6:1b:0e:2f:6d:2c:cf:37:ad:1e:
9a:04:fb:9c:df:0e:19:8b:50:c4:d5:f7:a3:d8:dc:09:46:d1:
10:00:b9:d2:ee:7b:42:6e:dc:50:3d:18:20:d8:73:6e:93:2c:
3f:61:cc:8d:5d:62:d3:f6:3c:d3:c2:be:73:83:c8:be:8a:67:
62:ae:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:13 2026 by rpki-client