
$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json)
Hash identifier: qEnCogDv9Ny5M68anKq8s6SyWQSrvzm/rbKFFs/zcNc=
Subject key identifier: E5:6E:00:F1:67:35:21:40:E2:1B:0F:24:46:D4:6F:66:22:80:8C:81
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial: 0775
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
Manifest number: 076D
Signing time: Tue 24 Mar 2026 21:21:47 +0000
Manifest this update: Tue 24 Mar 2026 21:21:47 +0000
Manifest next update: Tue 31 Mar 2026 21:21:47 +0000
Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: U3LYMM7jakHAQrwGLZH6pKecPH1oc0WHxzr/6iT6cKY=)
2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: IhW0qxbo8h3sFHYh2PU8II7oZ+tmgZjeNcwWwyZj0fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909 (0x775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Validity
Not Before: Mar 24 21:21:47 2026 GMT
Not After : Mar 31 21:21:47 2026 GMT
Subject: CN=69c3006b-828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:a7:3c:7c:ac:1f:59:d3:47:ca:2d:6b:79:
f5:21:15:7b:78:00:bf:29:65:33:1b:d8:7e:6c:7a:
50:d4:13:47:fa:87:b5:31:45:b5:68:e0:f2:2f:4a:
0d:ab:3a:fc:70:7b:5d:e5:27:ef:56:c4:83:c5:aa:
1c:bf:3f:52:9f:6b:54:8b:6f:ad:b7:66:67:95:7e:
38:e3:77:b8:8e:40:85:7b:4d:58:5c:33:77:66:66:
6a:d3:74:4a:53:26:e6:d6:fd:1f:89:a8:51:9e:13:
d5:17:36:f1:34:37:9c:d1:b5:bb:f4:63:93:3b:d8:
dd:45:68:00:ec:bc:2c:8b:f6:ab:ee:02:63:a7:6a:
69:59:20:61:4f:ef:77:20:3b:bf:64:42:02:6b:90:
87:97:d2:7f:43:f1:99:1b:84:3b:be:dd:fe:e5:61:
7b:4e:ac:db:fe:9b:0c:90:86:d9:05:49:67:93:ba:
37:89:f7:fc:cd:d3:e7:79:4d:4b:aa:59:4c:d3:d0:
0e:12:f4:95:71:47:35:a6:2f:fd:61:60:0e:89:f0:
4b:8d:f4:61:c5:cd:f9:50:8f:b4:4d:05:14:76:9d:
31:ac:74:19:8d:28:cc:1b:22:d1:4d:5c:40:d8:5d:
9d:65:21:73:9a:95:a8:2f:c5:45:79:95:85:96:7f:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6E:00:F1:67:35:21:40:E2:1B:0F:24:46:D4:6F:66:22:80:8C:81
X509v3 Authority Key Identifier:
keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:65:10:22:0a:33:42:b0:f6:48:68:ca:13:db:39:02:c8:b6:
dd:79:4c:7a:ce:6f:d0:ea:a4:60:7b:e1:a2:77:37:d4:f0:f4:
4c:46:04:e1:8b:7c:ba:77:48:1c:20:7b:4c:09:74:89:73:49:
37:86:4d:29:eb:10:1f:fd:f2:0e:e3:3c:c6:42:e7:93:81:f5:
aa:43:dd:4b:08:19:a8:8f:f4:f9:92:b5:0f:84:6d:2b:fb:91:
44:e1:d3:71:7d:d5:66:9d:05:e5:16:9a:48:e6:64:b5:d5:f3:
1b:95:94:8f:28:6f:e6:77:b0:f0:15:57:9c:fa:28:9b:1b:b3:
1c:00:73:cf:e3:d6:8c:15:6a:52:52:22:ef:df:5f:c9:29:ed:
47:b1:3f:99:bb:d1:41:b5:25:e7:9a:ab:c9:8a:59:0e:d5:7a:
e8:44:91:96:b4:de:bf:64:40:2e:b8:e3:54:28:d5:ab:ce:bc:
02:24:48:2a:f6:dc:19:ba:af:82:39:2d:ea:54:cf:fd:d9:8e:
91:9c:3b:16:5c:91:3d:c0:88:21:71:c4:b2:3e:bd:d2:cb:9b:
0b:ae:5e:02:a6:1a:23:0d:4c:82:5c:d8:12:75:d5:61:03:4d:
55:a4:a3:81:12:5d:95:12:c5:07:3a:50:2e:e4:8e:57:0e:43:
f0:eb:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:15 2026 by rpki-client