
$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
File: CO_XGTj3-dyHpp9cs_hMektyoAo.mft (raw, json)
Hash identifier: ZOlTsBtI5eCyDKeNACX2vunoNoqTQbu0OYdBP2spuLA=
Subject key identifier: F7:86:8F:01:6C:65:55:B9:E8:8B:4C:3A:35:06:1A:A8:64:48:30:FC
Authority key identifier: 08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
Certificate issuer: /CN=A91218BB/serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
Manifest number: E9
Signing time: Wed 25 Mar 2026 05:38:17 +0000
Manifest this update: Wed 25 Mar 2026 05:38:16 +0000
Manifest next update: Wed 01 Apr 2026 05:38:16 +0000
Files and hashes: 1: CO_XGTj3-dyHpp9cs_hMektyoAo.crl (hash: yLK/C4ySQqF0IJmTfaE5P8z0tCZubrU5Z83NcZB6cPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91218BB, serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Validity
Not Before: Mar 25 05:38:16 2026 GMT
Not After : Apr 1 05:38:16 2026 GMT
Subject: CN=69c374c9-3be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:e7:e3:d7:df:aa:e9:29:46:1b:26:82:ef:
9b:79:21:6f:b0:46:46:db:71:47:f1:65:90:e8:46:
e7:6a:ef:43:f0:2a:7e:11:56:c2:88:94:80:83:e3:
c2:e3:d5:68:d1:07:ad:f9:dd:81:64:e8:fa:41:5c:
c2:49:55:39:27:dc:40:59:a1:f5:91:0b:e3:ea:9c:
44:c3:93:3c:f8:db:b3:97:84:06:50:24:30:36:8f:
e0:1a:d9:95:e1:be:90:9b:d1:41:da:9f:5b:db:31:
40:61:d8:77:c2:53:11:3a:a0:b3:71:57:81:e4:c0:
6d:83:5e:93:d9:31:82:3e:9b:ab:15:ae:84:bb:fb:
4a:75:eb:56:36:6e:db:39:ae:02:a3:10:33:2e:76:
a8:73:78:18:f5:f1:70:69:6b:d6:0f:35:ce:71:12:
17:08:52:fa:f5:89:84:44:dd:a7:2f:c2:d4:01:b7:
30:8e:2c:32:73:49:00:ac:19:79:fe:62:2e:d3:68:
85:72:d4:36:1e:59:32:74:dc:a3:72:8c:63:25:68:
1a:32:57:40:ef:27:e7:5b:eb:31:df:c0:49:38:4a:
f3:87:a0:bd:e7:cd:6f:6c:59:2f:77:0e:8e:1a:4c:
cb:63:8c:47:cb:0f:50:80:94:d0:c4:b6:18:75:05:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:8F:01:6C:65:55:B9:E8:8B:4C:3A:35:06:1A:A8:64:48:30:FC
X509v3 Authority Key Identifier:
keyid:08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:70:f6:88:a8:5c:73:80:3e:5d:dd:f5:77:c7:b4:c8:f4:2a:
8b:46:f7:40:58:31:8b:b9:af:4f:a8:76:b9:cd:28:47:af:09:
fa:28:8f:95:4a:7c:e7:06:c5:4c:11:dc:72:6b:61:61:05:01:
7a:43:49:55:fa:6f:03:60:31:c0:1a:ff:fd:1b:fd:5a:8b:fb:
97:09:6b:3f:bb:b0:05:94:a7:44:40:6a:98:ff:0a:1f:13:d2:
0e:4d:9f:fb:54:87:d0:76:f2:68:7a:ff:bf:47:07:5d:a6:08:
66:bc:7b:4c:c1:0d:8a:3e:33:21:54:a4:c6:08:7b:88:b2:5c:
f4:b9:9d:ea:4d:ee:e2:c3:f1:f0:af:94:12:3b:66:bd:d9:a0:
cf:f5:3c:2b:c1:be:a3:d6:b7:95:37:97:fa:cb:88:79:4b:23:
5e:ac:fa:0b:72:99:69:cc:cd:5e:80:57:91:ed:79:63:d4:49:
26:e6:bb:87:11:a1:42:9d:90:99:d1:18:98:2a:ed:a8:24:66:
5a:56:57:fb:b6:05:6d:04:34:a0:8e:89:ad:20:28:7d:e8:13:
a3:36:82:57:0d:dc:d4:6f:36:ed:b4:3b:a5:95:3d:4f:78:6b:
e4:70:ad:d6:4b:76:b2:62:2c:34:21:5d:b4:e4:d3:c6:f7:f8:
0e:b9:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:51 2026 by rpki-client