
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier: erqmsZmg/yh1ro69LVlhxw20iSNhNwqigAu0TdDO+LA=
Subject key identifier: F2:C9:90:3A:93:E5:BE:F9:66:20:BF:98:64:90:CD:7C:27:30:E7:69
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial: 085D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number: 0853
Signing time: Fri 12 Jun 2026 20:55:49 +0000
Manifest this update: Fri 12 Jun 2026 20:55:49 +0000
Manifest next update: Fri 19 Jun 2026 20:55:49 +0000
Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: 3bCEa9SnR7WimDXdpY89NOn3RLum7v3THqiXqJlh3Jw=)
2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: DIF1F4I3XEY1SyEqm6sFB7hbPE0I7U/7i32gJNFVq8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Validity
Not Before: Jun 12 20:55:49 2026 GMT
Not After : Jun 19 20:55:49 2026 GMT
Subject: CN=6a2c7255-fb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:ab:08:7e:2a:83:5e:db:3a:97:b6:c3:2c:
d3:e6:a8:7d:8a:01:66:49:a9:35:6e:10:09:5f:1f:
d2:60:e1:79:a1:82:d7:a8:38:22:bf:57:ba:8f:9d:
d3:e0:e8:34:31:97:34:84:1b:4d:4a:8e:e4:70:f3:
28:50:d9:23:32:5a:72:ce:eb:a5:88:55:70:9d:97:
89:eb:b2:84:b4:3c:b0:8b:cf:58:1c:57:79:f4:aa:
1c:ab:8e:fe:09:ed:bb:4e:e7:30:3c:85:65:dc:83:
5e:03:c4:37:44:9a:64:f1:5e:c4:ef:8d:57:b7:3d:
cd:ea:48:f8:71:9d:1d:2b:43:45:d1:66:eb:91:48:
29:18:83:8a:d2:00:dc:f0:a8:d1:4a:6d:86:a5:3a:
10:3c:1b:6e:77:64:a8:c2:6b:ff:a4:0b:84:95:d6:
c9:81:80:a2:2e:84:5a:1a:2e:f5:8a:d6:14:8c:61:
52:c7:d4:94:fb:02:fc:39:f1:00:f4:2d:7a:b4:9b:
34:c1:d8:d7:84:21:72:e4:81:5b:86:e4:ef:a6:17:
8a:00:7a:73:49:93:59:2e:36:42:c7:dc:82:1c:67:
6d:37:33:92:f8:81:b5:12:87:36:11:0f:73:72:30:
e5:13:94:d5:d6:28:94:57:56:37:70:5d:5b:24:1d:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:90:3A:93:E5:BE:F9:66:20:BF:98:64:90:CD:7C:27:30:E7:69
X509v3 Authority Key Identifier:
keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:fd:4b:ba:50:bb:68:e0:40:66:65:f3:bb:cd:1f:4a:05:45:
47:40:6d:6a:d7:8f:57:ef:a1:b3:12:7d:bb:27:00:e3:cc:1b:
63:4e:24:1b:c4:a7:28:e2:e3:50:a2:e2:4d:fc:13:1b:93:2c:
79:b9:12:40:1c:7c:fd:bc:7d:69:4e:5f:e3:b3:38:d7:01:84:
f3:c7:55:fa:51:dc:f2:2a:bb:de:cc:aa:f9:66:57:83:32:67:
12:ad:4a:ab:00:09:c5:5e:60:5e:a9:7f:16:17:b0:53:32:bc:
5d:e6:a3:30:f1:7b:f8:9f:c7:e9:8e:8c:3b:c5:d1:f0:52:88:
79:5f:5e:99:18:b9:02:2f:19:76:aa:38:c7:41:7b:38:55:aa:
00:4f:75:af:8b:4b:1e:2b:b0:cc:ed:c1:9f:07:17:8c:e7:df:
a7:f7:ec:65:7c:e5:3f:88:b9:0c:59:8f:e4:01:87:34:c1:f1:
17:c0:12:6f:09:e8:35:0a:a4:67:73:d8:8d:f0:ca:be:d8:14:
84:6e:7d:43:05:4b:18:e6:31:8b:82:33:5b:81:26:b8:ee:5a:
73:1b:af:17:63:30:e0:06:e0:37:d7:b6:da:23:69:fa:19:ca:
3e:48:64:91:af:6f:84:d3:db:c8:e0:c4:60:0b:11:c3:30:9e:
e8:c4:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:20 2026 by rpki-client