
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier: MKVguP71WU983FsYwTQ9rL/Esx1wZnzwWl3075lgpNA=
Subject key identifier: 9E:F4:D3:C3:01:7D:0B:67:8E:AA:29:41:61:41:7D:FD:F3:15:C5:49
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial: 089A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number: 088F
Signing time: Sun 04 Oct 2026 20:48:57 +0000
Manifest this update: Sun 04 Oct 2026 20:48:57 +0000
Manifest next update: Sun 11 Oct 2026 20:48:57 +0000
Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: ABd4Pl79AKgBPKxn2JO9vlRsN8n57toUp6NH39j0p9U=)
2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: Ph8c92WQDE3PL+7dagbPAkspIl3htuWlionfxP6Bph4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Validity
Not Before: Oct 4 20:48:57 2026 GMT
Not After : Oct 11 20:48:57 2026 GMT
Subject: CN=6ac2bbb9-9a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:d0:9e:b1:b2:f3:6e:67:e2:73:1a:e8:7c:
bc:c6:62:ec:7a:a0:93:4f:4b:6b:eb:18:90:22:82:
1f:e7:48:37:a1:85:7f:97:8e:83:05:73:2e:21:2a:
1c:f3:5f:2c:d0:98:a1:48:00:d5:55:59:45:7a:d7:
a7:4f:09:62:60:ea:c0:16:44:fe:fd:12:29:aa:1d:
eb:a4:cd:6c:45:a0:17:8b:f3:84:b5:12:fd:17:45:
49:50:e0:6e:3e:f7:7a:ab:65:b9:55:f7:32:31:5c:
18:0b:89:78:13:5f:85:02:40:d3:3b:42:bf:89:04:
b8:39:bf:16:2e:ce:00:81:7b:79:db:2d:32:2d:1d:
84:c7:1d:a6:2e:d3:07:9d:e6:af:ff:d1:ff:02:7f:
e8:81:22:eb:eb:c3:08:d9:91:0f:98:16:df:b4:54:
cc:64:1a:40:b3:9b:4e:e2:f4:8f:3f:8b:45:8a:a7:
10:2e:86:91:6d:d6:30:26:19:66:b1:b1:c3:42:1f:
fb:2c:9c:05:6e:bf:99:89:81:50:66:e1:d9:0c:d4:
ff:33:08:61:7d:32:a6:6d:4d:9d:92:b0:8c:24:08:
06:fe:bd:09:83:bd:cd:d2:a2:6d:86:be:0f:95:c0:
5f:6c:7c:a7:64:ba:31:14:81:60:da:6f:d8:d7:e2:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F4:D3:C3:01:7D:0B:67:8E:AA:29:41:61:41:7D:FD:F3:15:C5:49
X509v3 Authority Key Identifier:
keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:75:16:7a:7d:4e:07:a9:1a:fc:b5:98:80:e8:df:4b:a3:e8:
a9:7d:60:3a:3f:39:b9:9a:bc:55:f2:02:aa:6e:d9:23:23:ef:
ab:eb:9a:a6:c0:52:06:44:49:4d:7b:db:2c:c8:da:9c:30:1a:
9b:fd:40:48:58:63:ef:dd:6f:de:20:7b:ed:47:d2:82:c9:7d:
f4:b8:4b:2b:9f:da:6d:bf:f3:f0:a2:3e:2c:cc:54:40:b2:e5:
b6:90:11:41:fa:32:ee:d5:69:08:0f:74:f6:a0:7f:c5:8e:62:
d2:02:4f:40:01:a6:a0:37:f0:68:69:02:90:ee:41:10:34:10:
01:e0:40:09:ec:0f:cd:ac:86:79:41:22:3a:bd:2f:d5:25:51:
48:ef:db:e8:a3:d9:cd:f3:3d:d5:bc:d3:b4:e6:42:5d:58:37:
b7:5f:9f:0e:22:22:91:72:7f:98:09:ec:eb:24:22:13:a0:92:
ba:93:2c:e1:c4:37:16:01:bc:2e:a5:eb:c7:31:09:c4:0a:fa:
b3:00:9b:ac:dc:f3:fa:98:75:82:ce:c5:a9:26:26:e4:b4:39:
0c:d9:c4:24:c8:f7:50:37:46:c6:d2:cc:ba:d1:6a:ca:08:6e:
3e:99:e5:75:f6:cf:bd:d5:3e:6b:34:ea:d3:2d:89:3a:10:5b:
34:60:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:28:40 2026 by rpki-client