
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier: c699rOb4BLiasCooH0AkQC0wMKWkYzj6DVgerXf6Hb4=
Subject key identifier: 67:AD:DB:0F:24:3F:01:89:B2:73:D3:DD:65:23:92:2C:EC:01:A1:DB
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number: 64
Signing time: Fri 17 Apr 2026 07:41:25 +0000
Manifest this update: Fri 17 Apr 2026 07:41:24 +0000
Manifest next update: Fri 24 Apr 2026 07:41:24 +0000
Files and hashes: 1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: AYDPBCH5UaEaX6oztXsYzUf5Gbi95Tx8w113HLTjkR0=)
2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: x1p58QyGOEEZzvkP+F1o5eBxOfZdy5EZehyc+fW6wlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Validity
Not Before: Apr 17 07:41:24 2026 GMT
Not After : Apr 24 07:41:24 2026 GMT
Subject: CN=69e1e424-32f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:17:2c:f0:82:3e:59:bf:73:a1:33:3c:8e:
b9:cc:4b:d3:15:eb:b3:7f:19:17:8b:c8:f2:8c:9a:
4a:3b:17:38:8a:ae:5f:ef:58:1b:17:2f:01:db:a6:
eb:65:57:7d:a5:5e:66:d1:4b:6e:9a:d1:df:8b:f0:
90:41:00:74:86:74:50:ce:fd:46:64:53:ff:63:0c:
09:23:34:6d:fb:d8:cd:c8:5f:19:75:5f:91:c7:17:
04:5c:17:3c:0e:27:74:6d:38:4e:f5:46:c3:1c:18:
4b:05:e3:32:82:ab:e1:a1:07:bf:1e:02:9d:70:18:
82:e2:3e:4e:3e:5b:0f:cc:91:8f:03:c9:21:53:c3:
f8:40:d8:9e:ce:af:5c:f6:1f:b1:87:80:d6:ca:19:
07:ad:ce:a8:94:7e:3d:fe:e6:06:2a:c6:4d:aa:e5:
15:ac:f4:e2:d1:60:0f:bd:c8:52:23:00:26:40:4e:
ee:7f:c0:06:5a:31:8c:18:a6:59:a4:3e:2f:70:d1:
7c:f3:0b:4e:ed:26:ce:07:06:0a:14:67:1e:e9:24:
b9:81:ee:5b:5e:5e:43:41:54:79:67:88:b6:f2:9f:
a9:5c:2e:0b:7f:93:8e:91:cc:99:44:fb:e2:b2:94:
fc:6a:dc:72:31:9b:5d:03:70:e4:1f:37:92:cb:08:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:DB:0F:24:3F:01:89:B2:73:D3:DD:65:23:92:2C:EC:01:A1:DB
X509v3 Authority Key Identifier:
keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:47:26:0b:40:95:b8:6c:f7:37:fe:04:d0:df:a5:c6:8d:b9:
79:f5:50:bc:80:64:f2:09:db:e5:ff:ef:c2:f3:9d:f2:90:93:
11:f1:38:5f:32:82:2e:16:e4:cb:a0:5e:6a:7e:d3:8b:f6:97:
1d:b9:71:5a:f7:f5:b6:f5:84:43:e7:56:27:82:1f:86:59:90:
31:35:98:3e:07:02:6d:a4:c4:f8:00:72:b7:d7:e2:e0:f3:50:
97:34:c5:e9:b5:d9:e8:d3:64:fb:28:d7:48:32:92:fc:96:99:
52:a7:6a:e0:3c:e3:08:d2:26:e9:c7:bc:68:07:8b:30:00:da:
fb:7e:c9:fb:c1:39:aa:bb:f9:9e:d6:03:fc:79:71:47:93:0e:
0f:89:52:1e:88:da:04:ea:dc:83:7e:c5:bd:81:fe:c2:b4:f9:
16:bd:1d:2a:b5:62:e4:fc:9f:0b:81:b3:b7:68:f2:54:d9:dc:
d0:47:9d:30:57:0d:fe:fe:93:40:74:82:03:8c:02:58:cc:bf:
90:99:e5:0f:b6:79:0e:88:4b:c3:a2:73:3f:62:10:b7:f4:63:
c4:8e:96:b9:bc:f8:a7:8b:3a:c8:42:8f:a8:3c:96:85:b3:aa:
e5:66:cc:1d:d4:11:29:e5:79:3e:dd:9a:23:6b:b5:c2:6e:32:
bb:89:06:4f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NDMwQjExMC8GA1UEBRMoRDE5QkI2OEUzQ0NEQzRCNzhDRTM2Rjg3Rjk0RTdGNzEw
NTEyM0EyNDAeFw0yNjA0MTcwNzQxMjRaFw0yNjA0MjQwNzQxMjRaMBgxFjAUBgNV
BAMTDTY5ZTFlNDI0LTMyZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCijBcs8II+Wb9zoTM8jrnMS9MV67N/GReLyPKMmko7FziKrl/vWBsXLwHbputl
V32lXmbRS26a0d+L8JBBAHSGdFDO/UZkU/9jDAkjNG372M3IXxl1X5HHFwRcFzwO
J3RtOE71RsMcGEsF4zKCq+GhB78eAp1wGILiPk4+Ww/MkY8DySFTw/hA2J7Or1z2
H7GHgNbKGQetzqiUfj3+5gYqxk2q5RWs9OLRYA+9yFIjACZATu5/wAZaMYwYplmk
Pi9w0XzzC07tJs4HBgoUZx7pJLmB7lteXkNBVHlniLbyn6lcLgt/k46RzJlE++Ky
lPxq3HIxm10DcOQfN5LLCK2ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZ63bDyQ/
AYmyc9PdZSOSLOwBodswHwYDVR0jBBgwFoAU0Zu2jjzNxLeM42+H+U5/cQUSOiQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzgyMzZFMjYwQTdD
RTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09p
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMFp1Mmpqek54TGVNNDItSC1VNV9jUVVTT2lRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0
MzBCLzgyMzZFMjYwQTdDRTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExl
TTQyLUgtVTVfY1FVU09pUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAjRyYLQJW4bPc3/gTQ36XGjbl59VC8gGTyCdvl/+/C853ykJMR8ThfMoIuFuTL
oF5qftOL9pcduXFa9/W29YRD51Yngh+GWZAxNZg+BwJtpMT4AHK31+Lg81CXNMXp
tdno02T7KNdIMpL8lplSp2rgPOMI0ibpx7xoB4swANr7fsn7wTmqu/me1gP8eXFH
kw4PiVIeiNoE6tyDfsW9gf7CtPkWvR0qtWLk/J8LgbO3aPJU2dzQR50wVw3+/pNA
dIIDjAJYzL+QmeUPtnkOiEvDonM/YhC39GPEjpa5vPinizrIQo+oPJaFs6rlZswd
1BEp5Xk+3Zoja7XCbjK7iQZP
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:02 2026 by rpki-client