
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json)
Hash identifier: X8QsemIWxofzLj+OCH8KvkVEhLvJoLQA77ZLyRe+r6s=
Subject key identifier: 47:44:5F:D8:8D:21:DB:3C:25:34:D7:AE:8F:71:8A:04:2D:1F:D8:08
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial: 0413
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
Manifest number: 040D
Signing time: Fri 17 Apr 2026 00:19:36 +0000
Manifest this update: Fri 17 Apr 2026 00:19:36 +0000
Manifest next update: Fri 24 Apr 2026 00:19:36 +0000
Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: ivq0XUp9Hxj9k+vvxmcGai85fRVdBxjmWAB/mmroPb4=)
2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: o6OFH1sCW4R513sBjIGYHh+VlzbKsDp8XgFdEfgai4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Validity
Not Before: Apr 17 00:19:36 2026 GMT
Not After : Apr 24 00:19:36 2026 GMT
Subject: CN=69e17c98-cf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:b5:89:ca:98:31:5e:a8:77:3d:57:02:18:
b3:16:91:5b:76:e1:ab:3b:00:9b:86:cc:35:5c:73:
ff:4b:db:ab:fc:51:c1:d5:33:53:29:95:5e:cc:41:
2a:fb:ca:44:c1:54:63:09:49:47:2f:70:41:c3:15:
e6:b4:52:1d:8e:c0:35:f3:d1:1c:28:70:9a:42:bf:
ad:87:61:e9:7b:8b:81:15:5d:c1:f8:53:8a:da:70:
4d:e6:4e:56:ca:82:9d:e8:cb:71:72:a4:1a:12:9d:
60:4d:73:96:c8:1e:e5:41:37:16:91:d9:fa:c3:18:
53:8e:7d:5f:3b:8e:cb:5d:1f:54:98:52:d4:2d:8f:
24:6d:cb:ae:a9:ef:64:e6:03:9b:6e:53:4b:36:5f:
f3:58:0c:e5:76:41:2b:f5:5a:31:f3:9b:4f:17:ea:
7d:f1:bf:a6:ab:b0:55:5c:02:04:8b:28:40:ff:0b:
b5:96:16:a4:f1:fd:ec:1b:b9:2c:ba:5a:1e:aa:e4:
31:cb:f4:6b:e7:a9:76:81:b8:60:16:62:37:6b:da:
ac:1f:60:53:7a:72:8a:0c:ab:04:e5:97:ef:e3:65:
7c:15:6c:d1:92:59:3a:90:c3:2a:df:b5:d6:bb:82:
aa:93:83:07:ab:af:a3:1c:a6:d6:22:d9:cc:ba:7f:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:44:5F:D8:8D:21:DB:3C:25:34:D7:AE:8F:71:8A:04:2D:1F:D8:08
X509v3 Authority Key Identifier:
keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:07:06:91:3c:cd:8b:4b:f7:82:42:8e:73:69:80:df:2e:94:
7e:a6:f8:74:fe:f8:72:26:5b:8f:29:24:31:62:a7:24:4b:33:
3f:22:65:88:ad:d5:00:99:d7:94:98:69:36:e0:20:6c:d4:5c:
24:75:0a:30:ff:db:fb:9f:23:a9:ae:80:c5:ec:ba:15:f6:a8:
bc:8b:98:c5:de:83:d2:45:d7:e2:03:8e:74:f6:13:79:14:de:
d1:c4:37:8f:c4:23:d5:0a:ca:a8:f5:70:3c:bf:bf:e6:c1:bc:
4c:19:5b:b6:69:fe:1f:e7:ab:79:1f:52:df:10:03:50:e5:89:
d5:7a:3a:f5:5d:4a:fc:96:34:79:9e:1a:d8:e9:18:49:48:b8:
f9:76:04:f4:1c:51:32:d1:40:36:cf:89:bb:ed:a3:71:25:0a:
1a:64:89:5d:f5:6d:e8:c9:e3:83:82:48:35:93:13:93:b1:91:
63:7d:d6:94:bb:59:2f:2b:5c:dc:f6:82:d4:92:25:2d:05:b0:
b1:4b:f7:e9:18:c7:ef:24:08:51:29:bd:87:ce:43:f5:c4:4b:
de:c7:63:73:3d:45:37:91:f8:8c:11:bd:56:5c:c8:0d:35:c7:
e0:0b:97:ff:0a:c9:f6:41:01:d6:88:4f:41:71:d5:dc:91:ac:
15:f9:d8:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0
ODRGMDg4MTQwHhcNMjYwNDE3MDAxOTM2WhcNMjYwNDI0MDAxOTM2WjAYMRYwFAYD
VQQDEw02OWUxN2M5OC1jZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Hm1icqYMV6odz1XAhizFpFbduGrOwCbhsw1XHP/S9ur/FHB1TNTKZVezEEq
+8pEwVRjCUlHL3BBwxXmtFIdjsA189EcKHCaQr+th2Hpe4uBFV3B+FOK2nBN5k5W
yoKd6MtxcqQaEp1gTXOWyB7lQTcWkdn6wxhTjn1fO47LXR9UmFLULY8kbcuuqe9k
5gObblNLNl/zWAzldkEr9Vox85tPF+p98b+mq7BVXAIEiyhA/wu1lhak8f3sG7ks
uloequQxy/Rr56l2gbhgFmI3a9qsH2BTenKKDKsE5Zfv42V8FWzRklk6kMMq37XW
u4Kqk4MHq6+jHKbWItnMun8nCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdEX9iN
Ids8JTTXro9xigQtH9gIMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw
MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4
ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFAcGkTzNi0v3gkKOc2mA3y6Ufqb4dP74ciZbjykkMWKnJEszPyJliK3VAJnX
lJhpNuAgbNRcJHUKMP/b+58jqa6Axey6FfaovIuYxd6D0kXX4gOOdPYTeRTe0cQ3
j8Qj1QrKqPVwPL+/5sG8TBlbtmn+H+ereR9S3xADUOWJ1Xo69V1K/JY0eZ4a2OkY
SUi4+XYE9BxRMtFANs+Ju+2jcSUKGmSJXfVt6Mnjg4JINZMTk7GRY33WlLtZLytc
3PaC1JIlLQWwsUv36RjH7yQIUSm9h85D9cRL3sdjcz1FN5H4jBG9VlzIDTXH4AuX
/wrJ9kEB1ohPQXHV3JGsFfnYKw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:12 2026 by rpki-client