
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier: 6p/EdoQP+ty6H9dI/CeZC75OQexZtE7TerRNBc4q3xY=
Subject key identifier: 47:CC:57:B9:B5:0B:77:1D:30:F9:0A:1B:EA:DF:4B:0F:68:80:37:29
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial: 0840
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number: 0836
Signing time: Thu 16 Apr 2026 20:52:15 +0000
Manifest this update: Thu 16 Apr 2026 20:52:15 +0000
Manifest next update: Thu 23 Apr 2026 20:52:15 +0000
Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: DPk23yEpBlZgtaG7RL4ALSzknl9O2SKFnt84cMPjPwk=)
2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: DIF1F4I3XEY1SyEqm6sFB7hbPE0I7U/7i32gJNFVq8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Validity
Not Before: Apr 16 20:52:15 2026 GMT
Not After : Apr 23 20:52:15 2026 GMT
Subject: CN=69e14bff-8e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:da:9b:a2:d4:dc:1c:e9:f6:f2:ee:2b:92:
5e:e7:57:3b:29:77:02:f3:0b:99:2c:fa:83:60:bb:
05:84:b4:b9:8e:4b:1c:50:f4:0a:70:ce:c2:88:06:
4a:e5:4a:fd:99:57:41:b4:83:d1:66:e7:c0:ac:3a:
3e:11:45:69:5f:2b:b8:fc:de:c5:65:37:f1:ae:42:
da:ca:b6:32:19:65:be:37:b3:d6:14:34:53:fd:b3:
30:e4:99:4c:ef:3f:23:ae:4d:bb:7d:a2:ba:7f:34:
6c:e6:3a:c7:0d:bf:25:46:c9:95:e6:5e:e3:35:2b:
74:3c:c4:75:f1:8c:68:3b:a8:0a:5a:a2:71:23:0b:
50:93:6c:2b:58:81:ae:46:f7:49:21:5b:51:6b:8d:
6f:11:a4:dd:d3:f6:4b:96:55:b0:c7:4c:5d:07:22:
e1:a3:2b:ef:e2:77:8b:50:cf:aa:4d:b4:ea:3c:73:
6f:19:f8:e1:54:cf:95:84:c7:59:62:d5:a0:1f:95:
7f:38:a7:cf:91:3e:8c:38:0b:e9:74:d3:9f:57:9a:
d4:f7:d2:40:8b:47:00:c1:d9:7b:95:f3:45:52:00:
65:a8:da:ce:8f:f4:f4:d1:5b:92:24:5d:9e:db:8f:
e5:21:84:48:3e:d5:b1:0e:1f:66:dc:5d:99:e6:7c:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CC:57:B9:B5:0B:77:1D:30:F9:0A:1B:EA:DF:4B:0F:68:80:37:29
X509v3 Authority Key Identifier:
keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:40:e7:55:8e:9d:0a:19:1f:ab:ee:ad:ee:87:94:08:4c:3a:
cd:b9:66:38:8f:e3:26:1f:55:c2:08:48:7f:34:6a:f5:57:b9:
23:ec:8d:92:af:ce:3e:76:e5:c1:22:88:3f:9d:ee:36:3c:49:
c0:a7:22:b0:6a:2d:7d:8a:a4:4f:48:66:ac:95:5a:93:82:f3:
8c:27:26:f5:ec:03:a2:e6:17:af:6f:7c:78:da:25:3e:75:9f:
da:32:fc:2a:27:e3:1b:ad:8b:5e:22:c6:ef:b2:00:53:09:ce:
78:d4:21:1b:37:63:ef:77:59:0c:62:d6:73:bb:4e:a8:aa:65:
ee:61:74:a0:7f:74:87:34:78:30:b4:b1:80:06:66:26:71:9e:
35:3a:68:8c:8b:dc:f4:28:c2:e3:ef:13:93:8a:05:d9:0b:bc:
58:cb:e8:fc:35:36:da:fe:11:03:19:ea:b6:94:d8:8f:a9:9c:
96:f6:84:79:56:74:ac:a8:aa:7d:2b:59:62:db:03:d9:98:43:
b5:45:2d:b9:82:35:13:d1:26:64:bd:17:af:a2:7b:bb:44:04:
f7:9d:d0:39:43:c3:b2:b8:04:56:4a:00:45:e5:f1:a4:96:c1:
9e:7d:6a:1f:32:20:af:34:d6:54:ea:9c:a2:31:1d:ae:b2:e4:
9e:bd:16:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4MkYzM0QxMTg2
MTc0REU4M0EwHhcNMjYwNDE2MjA1MjE1WhcNMjYwNDIzMjA1MjE1WjAYMRYwFAYD
VQQDEw02OWUxNGJmZi04ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2Lam6LU3Bzp9vLuK5Je51c7KXcC8wuZLPqDYLsFhLS5jkscUPQKcM7CiAZK
5Ur9mVdBtIPRZufArDo+EUVpXyu4/N7FZTfxrkLayrYyGWW+N7PWFDRT/bMw5JlM
7z8jrk27faK6fzRs5jrHDb8lRsmV5l7jNSt0PMR18YxoO6gKWqJxIwtQk2wrWIGu
RvdJIVtRa41vEaTd0/ZLllWwx0xdByLhoyvv4neLUM+qTbTqPHNvGfjhVM+VhMdZ
YtWgH5V/OKfPkT6MOAvpdNOfV5rU99JAi0cAwdl7lfNFUgBlqNrOj/T00VuSJF2e
24/lIYRIPtWxDh9m3F2Z5nztAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfMV7m1
C3cdMPkKG+rfSw9ogDcpMB8GA1UdIwQYMBaAFONc5E5xlyl1kTmNgvM9EYYXTeg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUU1NS9EOTUxNzY4NDBE
RjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtYV1JPWTJDOHowUmhoZE42
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQxemtUbkdYS1hXUk9ZMkM4ejBSaGhkTjZEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUU1NS9EOTUxNzY4NDBERjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtY
V1JPWTJDOHowUmhoZE42RG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfkDnVY6dChkfq+6t7oeUCEw6zblmOI/jJh9VwghIfzRq9Ve5I+yNkq/OPnbl
wSKIP53uNjxJwKcisGotfYqkT0hmrJVak4LzjCcm9ewDouYXr298eNolPnWf2jL8
KifjG62LXiLG77IAUwnOeNQhGzdj73dZDGLWc7tOqKpl7mF0oH90hzR4MLSxgAZm
JnGeNTpojIvc9CjC4+8Tk4oF2Qu8WMvo/DU22v4RAxnqtpTYj6mclvaEeVZ0rKiq
fStZYtsD2ZhDtUUtuYI1E9EmZL0Xr6J7u0QE953QOUPDsrgEVkoAReXxpJbBnn1q
HzIgrzTWVOqcojEdrrLknr0WWA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:19 2026 by rpki-client