
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json)
Hash identifier: X+RJojMpB4zukdB6UjeBtZcqeRHWkr+hu1+KXbuAack=
Subject key identifier: 13:68:74:98:8F:FD:D0:F9:94:AB:1E:F3:0E:BE:80:B1:3D:65:DB:35
Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
Manifest number: 0148
Signing time: Sun 05 Apr 2026 04:40:01 +0000
Manifest this update: Sun 05 Apr 2026 04:40:01 +0000
Manifest next update: Sun 12 Apr 2026 04:40:01 +0000
Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: txygDQ6T81FL88E+T6n9vbKyih13hEdnlPnPfNsezYY=)
2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: Luwtev83Zs6KUCyFMF7rPFNFdO+XLcijtYlkHDR9isU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Validity
Not Before: Apr 5 04:40:01 2026 GMT
Not After : Apr 12 04:40:01 2026 GMT
Subject: CN=69d1e7a1-6b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:5b:9d:a8:7b:0e:d3:bc:db:80:e4:5d:84:
a1:5e:fc:15:76:08:94:59:50:11:1c:b6:1e:4a:3b:
d7:b1:39:b7:3e:c5:6f:44:d7:3c:ac:fc:7d:77:9c:
59:e6:35:5f:61:c6:a8:88:6a:a0:5b:98:75:de:7f:
c9:d2:11:cf:f8:d9:1f:db:03:59:8f:f3:cd:84:2c:
94:d2:4c:d6:16:37:fd:dc:81:e8:6a:6c:29:f3:95:
85:01:ef:f7:c3:6c:c7:4d:d3:38:f9:ac:21:b5:e0:
a2:cf:eb:92:dd:6b:63:13:22:95:c5:6c:77:a3:56:
32:0f:03:da:fd:69:a2:4c:6f:8a:59:f5:b9:52:80:
c6:2d:ee:7d:7d:22:45:82:c0:8e:d8:56:cf:64:40:
50:49:1b:4d:16:2f:9b:5f:2c:24:4e:48:9d:66:90:
d1:fc:7a:03:6c:0a:90:5c:0f:f4:37:d3:9e:46:e1:
98:d0:eb:48:35:42:4b:af:4d:0e:77:ae:c0:ee:3e:
ec:70:3b:8c:50:50:a2:fe:ed:25:30:cc:06:4b:ae:
db:96:59:3b:b3:b3:0f:5e:27:5a:f1:d0:60:30:27:
83:8a:fc:d6:ba:14:10:e3:56:9f:a6:49:75:8c:56:
97:21:5f:ab:64:d0:6b:e9:34:b2:63:a8:36:2d:cb:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:68:74:98:8F:FD:D0:F9:94:AB:1E:F3:0E:BE:80:B1:3D:65:DB:35
X509v3 Authority Key Identifier:
keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:d2:5b:98:77:83:83:0c:b5:29:3f:63:c5:3b:a7:45:b5:
56:5c:4c:bb:03:ae:20:c4:bd:bf:dd:40:e3:1e:5d:7a:bd:f1:
be:45:24:ff:49:f6:29:9e:a4:8f:52:e7:72:e0:76:58:da:f1:
a9:21:93:23:de:d1:6c:66:d7:02:97:10:15:c5:17:52:a2:5b:
80:1f:e3:62:f1:11:e1:f9:38:85:48:fa:d2:1c:10:f3:6b:b9:
52:03:b7:db:0d:d3:ea:b5:8f:22:33:08:58:02:8d:11:76:de:
86:d3:66:df:ea:4d:dc:76:28:f1:64:dd:0b:3e:6a:9f:49:ed:
ef:e9:a5:40:53:7e:db:ab:31:bf:14:c3:6b:b1:8c:26:14:93:
51:c4:dd:44:76:7e:35:ae:99:f2:7d:a2:8e:bc:05:59:eb:84:
15:47:74:c2:08:9a:30:28:ff:6f:33:df:85:de:98:19:6b:9d:
15:21:20:b3:36:0e:7b:1e:62:11:a0:c4:34:95:59:e9:8d:1c:
50:1a:51:ba:b2:6a:ab:1f:45:cb:b9:0b:8b:03:15:1a:95:68:
e7:79:78:4b:d5:fb:c3:e0:90:15:35:e5:d0:38:41:1b:1b:4b:
20:2c:74:72:97:b0:9a:20:17:52:d1:09:d4:39:d9:20:2c:f4:
3e:f0:95:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:42 2026 by rpki-client