
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json)
Hash identifier: YPEAhpgPG5JrQAogvbJE4u5Oi65NUD90DT8rLAOO9po=
Subject key identifier: 88:D0:A0:3E:5B:40:34:29:73:01:36:EA:F5:A1:EB:BA:B7:41:FF:49
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial: 0970
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
Manifest number: 0967
Signing time: Thu 16 Apr 2026 20:00:13 +0000
Manifest this update: Thu 16 Apr 2026 20:00:12 +0000
Manifest next update: Thu 23 Apr 2026 20:00:12 +0000
Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: An/M3iTYHcSlruJSzho2zw8XidctqIHxZhs1BxA2E5o=)
2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: btWhLsIlBOf2tg8he8N8TkXFlRcB/qhbfq1KBXFZbYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416 (0x970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Validity
Not Before: Apr 16 20:00:12 2026 GMT
Not After : Apr 23 20:00:12 2026 GMT
Subject: CN=69e13fcd-2a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:ae:48:3e:7d:45:12:19:6d:42:1a:7e:6e:
3e:46:dc:12:72:54:c4:3e:09:c7:6d:9f:ce:72:ef:
65:f0:76:b3:0c:c9:2f:66:97:4c:11:81:08:ad:53:
7b:75:5f:ae:92:61:25:1b:38:d7:3c:eb:9e:8d:e8:
e7:b4:67:34:2c:b8:d7:89:73:00:c6:b5:87:d4:4f:
84:67:f6:fc:e2:4f:41:52:94:f9:f0:30:d5:e6:c6:
c9:a6:b6:42:7e:62:75:7b:e6:e7:af:96:12:b9:30:
b0:40:e0:eb:0b:ad:53:7c:4a:97:7a:67:29:5b:fd:
45:12:1d:b5:df:62:a7:0b:22:ad:3f:48:5a:ba:0b:
41:60:69:eb:b0:f2:05:9a:05:c3:cf:c5:17:8a:62:
e7:ce:46:2a:1e:fd:11:08:c2:ee:94:2c:c1:23:44:
62:d7:a2:3f:ff:87:1b:93:16:cb:22:64:04:72:fa:
32:f0:dc:49:be:b3:90:b0:57:a3:db:84:a5:e9:99:
14:ab:7c:ee:b1:1c:b5:33:00:c0:12:27:f9:38:64:
04:5e:5d:f6:c7:3c:0a:87:a6:d4:e6:d4:39:f1:88:
79:65:e8:81:0e:99:7e:27:99:2f:86:a8:48:c8:26:
f7:54:f0:4e:c2:5a:b4:dc:3c:17:a0:57:08:1e:36:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:A0:3E:5B:40:34:29:73:01:36:EA:F5:A1:EB:BA:B7:41:FF:49
X509v3 Authority Key Identifier:
keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:ab:1c:70:ba:67:2a:77:48:9f:7a:2b:6b:43:35:ba:2f:93:
5d:d4:6d:50:dd:c5:c5:45:14:5e:a9:50:ec:35:a9:23:8d:90:
b3:cf:16:aa:f5:b7:b5:c0:ab:90:6c:01:cf:bd:4c:23:c0:e9:
5f:d3:37:f8:da:48:8a:7b:b0:90:89:76:9a:69:03:80:35:e0:
6b:6b:54:38:f3:93:17:8e:36:91:0c:ab:30:b9:10:ff:4b:51:
bc:0d:64:a6:a9:a0:86:47:85:be:36:43:72:c8:e2:36:52:5c:
07:50:37:ae:c1:d7:0d:ee:5d:95:2c:d6:ed:ad:49:07:be:9a:
b8:92:b8:c3:ff:a4:95:44:01:43:b5:a8:a4:b2:f4:db:6c:ff:
36:60:38:6e:d0:4d:d6:2f:c5:81:94:bf:53:29:a8:3d:29:b8:
48:15:d4:5c:59:dd:a8:28:d5:0e:d9:5d:e1:7d:e9:89:6a:4d:
74:9e:ba:af:10:fb:08:98:60:a9:38:48:93:f6:7a:51:99:66:
20:d1:4b:4c:8c:e9:bb:8f:06:32:1c:76:88:48:d3:dc:d8:34:
fb:7e:14:45:d9:b4:72:19:4e:79:dc:81:da:71:c6:b4:e9:95:
df:1b:ca:5b:a5:e7:df:93:e0:5b:0b:16:c4:a9:3a:b9:29:8e:
b8:ac:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:31 2026 by rpki-client