
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: IzOTUc6yZjYBflfsmmowSXWeTqsKEtobX44GFRc/J3o=
Subject key identifier: EE:5F:E6:6C:FD:4A:AE:86:89:80:2F:D0:6B:FC:D8:D0:67:E0:E6:43
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 35C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 3593
Signing time: Fri 18 Sep 2026 14:28:10 +0000
Manifest this update: Fri 18 Sep 2026 14:28:09 +0000
Manifest next update: Fri 25 Sep 2026 14:28:09 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: z0OvYYFQXPq0+FAc2Fg2YMx/MFIdpdJzzgeElgJIl1U=)
2: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=)
3: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=)
4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=)
5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=)
6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=)
7: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=)
8: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=)
9: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13769 (0x35c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Sep 18 14:28:09 2026 GMT
Not After : Sep 25 14:28:09 2026 GMT
Subject: CN=6aad4a7a-84b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:dc:0c:8a:03:37:eb:68:25:33:cc:46:cd:
a6:62:13:ea:72:be:3b:35:83:e5:a3:d3:fa:b4:af:
e3:74:ff:63:d4:c6:8d:bc:51:47:ae:aa:e0:04:64:
64:5a:45:da:9f:08:a6:5a:7e:ca:65:7d:8f:ff:63:
ca:45:74:ba:08:71:e6:ab:42:7e:bb:b6:4c:1d:f5:
55:de:66:ce:03:c0:18:ad:8b:ed:91:22:30:68:76:
de:8b:8a:a2:88:21:62:20:f7:45:51:d1:d4:b9:0a:
ea:a2:d4:ce:9c:f7:bb:d7:27:8e:7c:3e:5d:50:42:
cd:bb:e9:dc:1b:d6:3b:d1:0c:10:78:dd:b5:69:8b:
50:6f:01:f5:50:1d:d5:13:82:85:19:7d:c9:05:e2:
71:11:08:3a:0f:d3:48:bb:72:70:02:3c:c3:56:0c:
49:1f:e9:4e:30:41:33:86:51:47:2b:57:77:50:26:
17:f8:a1:af:e9:3c:15:42:43:9d:e6:ac:64:73:a9:
2f:db:eb:35:15:53:e1:48:76:a7:d8:a9:fd:4f:33:
31:2e:c4:0d:db:c8:34:7c:63:74:33:74:08:9d:a0:
1c:ae:3d:68:b2:19:63:96:bd:bb:50:12:51:b5:b8:
d6:a2:99:bb:34:81:37:b0:59:73:0f:f3:81:b1:9c:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:E6:6C:FD:4A:AE:86:89:80:2F:D0:6B:FC:D8:D0:67:E0:E6:43
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:e6:ce:81:0d:1d:53:6e:44:b2:5d:a0:fb:37:c2:b4:e1:
be:4d:29:92:8e:70:82:ce:93:82:ab:2f:1b:4f:28:88:d3:9e:
ba:6c:15:20:01:61:65:6f:a3:a4:37:96:1e:06:ca:de:92:d3:
0c:df:04:49:8c:cf:b6:ea:19:4f:d9:dd:b5:d2:5d:35:6c:96:
af:86:9f:86:33:cf:db:10:d2:d1:91:e1:35:fc:07:62:2a:eb:
56:2b:36:a3:4e:3f:c7:fc:90:f8:0e:b5:d6:53:2d:d5:28:08:
c7:c1:71:52:18:42:a8:99:d1:e1:32:94:01:61:20:b4:a7:03:
a5:a9:0d:24:04:09:c4:9d:b5:b6:b7:e0:08:65:08:61:e3:cb:
33:4b:5d:f1:8a:26:15:3e:13:5b:45:03:e7:b1:ca:60:76:b0:
18:4a:cf:d2:2c:32:97:ea:8f:42:4d:ec:33:63:ea:88:41:28:
b1:b5:3f:ac:ee:de:02:8c:9e:6a:0d:38:95:90:fd:64:66:11:
b0:bb:bb:84:12:4c:b3:be:39:0c:ff:3a:03:2d:b4:2c:1f:00:
a2:e6:07:33:3f:33:61:12:fa:1e:c4:73:c8:13:f6:a8:cc:8b:
4a:1f:ff:43:19:45:f5:6e:72:af:ab:19:61:24:82:b7:6e:1d:
70:63:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:41:40 2026 by rpki-client