
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json)
Hash identifier: vb1wZdeNFGE8gbpYpEoEg7QpGBlmPcG8jUDIVI9NWhI=
Subject key identifier: 18:0C:91:F2:3C:34:C5:38:EC:C0:D7:89:68:5B:AD:75:0B:41:D9:27
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial: 0420
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
Manifest number: 041A
Signing time: Wed 13 May 2026 00:30:10 +0000
Manifest this update: Wed 13 May 2026 00:30:09 +0000
Manifest next update: Wed 20 May 2026 00:30:09 +0000
Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: YjIgmYLocegBDTw8EHt0LWCMVfwucnDlv7Ql2LQhVQU=)
2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: o6OFH1sCW4R513sBjIGYHh+VlzbKsDp8XgFdEfgai4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Validity
Not Before: May 13 00:30:09 2026 GMT
Not After : May 20 00:30:09 2026 GMT
Subject: CN=6a03c611-656e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:a4:36:5c:6a:84:4b:08:47:04:96:bb:6d:
ce:52:2d:ff:61:0d:e4:ad:2e:30:39:14:c4:0b:8c:
13:cc:7e:b9:21:e0:8c:db:bf:b0:e3:b0:5f:27:97:
54:fd:2c:d7:61:58:1e:af:7a:8e:c2:a7:63:15:3a:
d7:be:23:fe:16:12:69:d1:c1:e6:7d:ae:6e:ae:9b:
8e:27:2e:7f:a2:56:3d:14:44:71:94:03:d9:3f:e2:
21:02:83:78:97:43:c4:88:62:1e:1f:25:d9:46:a0:
18:fa:cf:e9:28:4c:ef:25:1c:85:6c:8a:46:86:b0:
43:28:52:0f:84:74:92:71:79:a7:f3:86:33:34:7d:
19:e7:d7:61:c0:42:a3:43:94:e7:25:7d:e0:cd:32:
cf:1f:27:1b:1f:92:51:be:15:86:c3:fa:a1:83:d6:
c7:5e:cf:2e:42:33:cc:01:80:1b:07:f6:4d:ee:dc:
5a:0a:ef:92:02:46:c2:97:95:06:60:06:6f:72:fe:
a1:b3:d9:eb:87:d0:78:1f:59:83:e7:31:58:c3:13:
cd:cf:2b:e8:2e:c0:f2:9f:1b:5e:bd:96:94:78:19:
89:6b:f7:ef:15:7a:6b:08:19:22:48:de:24:21:43:
f0:fb:08:c5:d3:2f:44:55:5e:01:e1:e4:91:b5:c9:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0C:91:F2:3C:34:C5:38:EC:C0:D7:89:68:5B:AD:75:0B:41:D9:27
X509v3 Authority Key Identifier:
keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:e6:6e:63:e6:a2:f9:48:4f:ed:f2:62:b6:13:85:f2:ec:a4:
1b:f0:c4:d6:29:80:82:f9:1b:27:58:e5:93:d4:97:2d:7f:cf:
38:02:e1:b4:82:69:68:4b:57:c3:8a:65:90:91:31:4f:85:6d:
0b:fd:38:21:e1:f3:3b:4f:af:f5:ac:81:00:ec:9e:e9:c8:6b:
42:da:f1:88:96:b8:e6:9f:a5:c0:bd:22:fc:38:dc:eb:19:83:
b8:fc:bb:a1:20:6d:be:6a:9b:a1:f7:a8:ef:c6:7c:8a:1f:f2:
f8:a8:dd:ed:d9:e8:00:ad:4a:6a:cc:d6:19:27:8c:7f:23:63:
48:f3:9d:d4:4b:71:7b:c2:98:f9:6a:ce:4d:73:61:9d:1c:2f:
55:37:e7:1c:89:70:9b:25:3f:19:51:41:e1:c8:01:6a:38:31:
1f:84:a5:1f:80:d2:b3:5d:ae:c1:cc:0a:e1:0c:f4:55:7f:3b:
ad:de:df:c4:e2:34:6c:ea:ae:bc:1b:12:37:21:5b:ef:76:cb:
50:7a:eb:8f:2e:78:00:67:5f:23:e2:e1:12:c1:02:15:97:bc:
62:8d:b7:f3:67:ca:95:72:0d:4b:86:93:ac:7a:6d:b5:ea:de:
df:82:3e:8b:19:2b:1c:80:1b:83:9a:5e:ab:3b:0a:28:cd:51:
cb:6e:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 14:29:44 2026 by rpki-client