
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: k515QA9XK3ojhcrY7HYy+usX+ukNP1pmt5J98G93exY=
Subject key identifier: 58:E1:DA:1C:4A:F4:1A:E4:A7:63:E6:46:CB:65:63:84:EF:6E:14:C7
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 3540
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 3520
Signing time: Fri 20 Feb 2026 14:27:16 +0000
Manifest this update: Fri 20 Feb 2026 14:27:15 +0000
Manifest next update: Fri 27 Feb 2026 14:27:15 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: ErpQcOBYcgPOnkv+mDg7B2wJ7oft61Y3K7UBkFbHdjE=)
2: F550BA02768A11F081B6114EC4F9AE02.roa (hash: vjf6s0WckIOnw6RS4RFXugTG7+ioBExQoIxHaxpFjXU=)
3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=)
4: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=)
5: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=)
6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=)
7: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=)
8: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=)
9: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Feb 2026 14:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13632 (0x3540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Feb 20 14:27:15 2026 GMT
Not After : Feb 27 14:27:15 2026 GMT
Subject: CN=69986f43-aa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:dd:ad:2d:47:63:f5:ac:4f:66:8b:dc:d3:
87:df:30:f3:9c:86:5b:10:ca:1a:7c:c5:14:fe:91:
73:18:6b:69:b0:41:d9:82:bc:3c:cc:ab:3e:99:fb:
c8:81:d4:88:36:df:d4:3a:39:25:ce:e2:3e:5b:dd:
53:ab:fa:39:a8:45:91:83:71:c4:5a:84:62:8f:57:
a2:5a:71:7c:a7:2d:ce:e3:1e:19:95:cf:2e:dc:58:
59:12:a1:50:2e:fa:32:c3:61:05:7b:9a:ff:94:09:
50:03:62:be:f3:2f:02:f4:0c:e4:7c:ea:7d:59:b8:
56:57:da:e1:48:5c:b4:4e:3e:d1:47:ec:35:8e:a5:
db:31:7d:69:5d:26:d0:8f:52:15:41:66:1e:5c:b3:
86:1e:8c:bf:ac:2c:85:4c:37:3f:e5:51:3d:5b:6b:
87:5f:77:68:2c:5d:96:c0:a1:13:a6:ea:c4:be:04:
3d:ce:04:91:f5:0a:e1:eb:67:91:a0:2b:a3:22:c9:
2e:7a:33:cd:3d:35:ad:23:8d:9b:f7:7a:91:24:65:
91:1d:d4:c5:86:6f:b2:85:ee:e9:10:56:73:14:46:
2d:74:af:d5:1f:d2:ca:9b:a7:59:5c:51:ea:8b:d3:
94:bd:c0:0b:08:ee:18:9c:af:0a:a2:27:41:5a:c0:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E1:DA:1C:4A:F4:1A:E4:A7:63:E6:46:CB:65:63:84:EF:6E:14:C7
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1a:48:16:82:07:41:e4:78:3a:d0:d5:3b:22:63:44:62:83:
1b:6f:c6:96:f3:cb:63:3f:cf:6e:5a:33:c3:2c:5a:f9:1b:4c:
90:33:d4:7d:27:28:0f:f9:f3:b9:19:97:55:09:4e:d5:f2:c1:
e3:41:f1:19:ad:4c:18:ea:67:5f:65:e2:15:49:f1:d2:08:99:
ea:c4:ba:9f:06:f8:09:56:64:80:57:9c:73:ba:b0:e8:b7:3a:
7a:31:06:71:de:89:30:c1:1c:cc:c8:87:7f:00:bb:30:3c:7a:
cc:36:f2:7e:19:64:ee:a4:98:78:dd:e4:f1:86:b4:71:fb:b7:
70:1e:39:ef:18:86:07:a1:aa:20:8c:49:d3:9d:f3:e5:88:ea:
45:7b:4c:05:ff:5d:58:4d:36:f3:1a:29:b8:c3:01:6a:96:77:
df:d3:6e:b2:84:98:74:11:7c:af:54:cd:fd:e2:67:2d:e0:c8:
b9:49:c7:8e:1a:88:c4:f9:20:b3:d5:fe:eb:b1:cf:14:b6:bd:
7d:56:0a:a1:5f:57:dc:1a:c2:32:22:74:06:1c:d8:69:63:2c:
6a:dd:31:9c:f9:2b:22:8c:35:0b:32:9c:1a:4e:3d:94:3d:23:
b5:59:2e:f1:a5:3f:86:19:b3:c2:3c:d3:17:29:70:19:c7:f2:
ff:d3:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 20:34:28 2026 by rpki-client