
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
File: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json)
Hash identifier: KVwxdC5C8J51yOwzsOATftBVCbBFxTpkIh460+yop7A=
Subject key identifier: C2:6F:1F:46:A9:28:D0:2B:57:97:7B:79:C3:63:7C:3C:D7:CE:0A:5C
Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01
Certificate issuer: /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
Manifest number: 01EF
Signing time: Sun 27 Sep 2026 03:45:58 +0000
Manifest this update: Sun 27 Sep 2026 03:45:58 +0000
Manifest next update: Sun 04 Oct 2026 03:45:58 +0000
Files and hashes: 1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: 3oojzfGM7cmcake8W6nRGytIMOft0BLUpz2xFQ3myYg=)
2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: k3TfFva0pazkCIRXdBLI4mn/25rKAlL7flbXoW+92L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl
rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
Validity
Not Before: Sep 27 03:45:58 2026 GMT
Not After : Oct 4 03:45:58 2026 GMT
Subject: CN=6ab89176-ab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:5b:c2:5b:a3:94:4c:e1:d1:2e:61:00:6f:
ad:7d:5d:22:b2:77:0e:17:d1:60:7d:df:28:69:94:
3b:ec:4f:36:6e:86:ae:fe:00:9d:da:7b:1a:0e:aa:
1a:26:7d:ef:61:ca:00:2e:6a:bd:0f:09:96:46:c1:
35:a5:ed:4b:a2:ed:90:86:38:ee:76:7b:bd:7e:b8:
57:ec:23:40:ad:20:ea:bd:56:08:f8:ac:2c:d4:af:
5d:4c:70:07:cc:7c:55:4f:fe:ac:cc:0c:c1:69:36:
19:66:69:da:6d:9a:4c:77:6b:8c:44:3a:af:ff:e6:
c2:7f:8a:aa:10:42:c5:09:90:a2:8f:f6:a9:01:8b:
96:2d:de:56:8c:65:17:d1:b6:04:8a:f6:99:13:f9:
01:45:af:91:f6:11:85:b0:54:98:19:ad:ce:96:05:
3a:2a:5a:1c:8f:0a:b2:f4:9f:e6:c6:a6:07:23:55:
ca:cd:c8:f7:9e:c4:3c:25:6f:15:74:28:3d:cf:19:
29:9f:05:98:47:ab:5d:19:b4:b8:6e:47:a0:41:c6:
1f:f0:3e:a4:3c:c3:58:04:d2:c5:b6:1c:e0:87:b0:
09:53:df:89:30:73:26:ad:31:3a:93:22:b9:5e:56:
3c:8d:70:c8:4a:98:39:27:af:74:b2:cf:35:dc:c4:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:1F:46:A9:28:D0:2B:57:97:7B:79:C3:63:7C:3C:D7:CE:0A:5C
X509v3 Authority Key Identifier:
keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:af:89:57:d8:20:b2:0e:8c:a3:c9:da:06:79:4d:76:8b:fb:
7b:b4:81:c8:3a:8d:a6:d8:4b:50:d3:64:ba:7d:62:26:bb:6a:
b3:7f:55:45:56:45:22:6c:fe:6d:cf:c4:29:46:57:29:9e:a1:
3c:5c:18:35:2a:c1:b5:44:d1:b3:08:fb:e7:0b:92:a0:a0:7a:
f2:44:3d:d5:70:ee:d0:2f:54:75:a9:21:0a:b5:b6:55:ab:b6:
b7:71:7a:ef:b6:95:6f:af:ce:5d:48:5d:85:b3:e4:95:e8:a8:
ab:a2:7a:a3:de:94:62:36:74:5d:e0:93:d9:06:38:dd:28:db:
8f:3e:cb:a6:2e:3e:22:f6:01:4e:29:4f:b0:ce:db:9b:51:62:
4b:45:29:52:8b:68:76:04:8d:d2:26:ec:f2:f5:95:21:11:c0:
b1:c0:29:45:5c:0b:62:86:52:9f:85:09:c4:82:fd:e4:7f:72:
97:00:a6:e4:b6:ab:71:ea:cb:35:86:f4:6f:55:19:5d:14:88:
10:70:a8:3c:65:68:d5:ff:ee:f4:21:54:48:aa:c2:06:a4:bd:
7a:22:6e:89:10:6a:33:5e:4a:eb:18:96:28:c4:1c:de:47:45:
ce:02:31:e4:e1:d8:29:5d:33:8e:e5:41:10:43:fb:40:05:5b:
3d:d3:55:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY0RTExMTAvBgNVBAUTKDcwRTg4NTU3QjBDMDgyQzlCMDZFQ0Y1OUI4RjI4QTc3
MDNBNjM4MDEwHhcNMjYwOTI3MDM0NTU4WhcNMjYxMDA0MDM0NTU4WjAYMRYwFAYD
VQQDEw02YWI4OTE3Ni1hYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHdbwlujlEzh0S5hAG+tfV0isncOF9Fgfd8oaZQ77E82boau/gCd2nsaDqoa
Jn3vYcoALmq9DwmWRsE1pe1Lou2Qhjjudnu9frhX7CNArSDqvVYI+Kws1K9dTHAH
zHxVT/6szAzBaTYZZmnabZpMd2uMRDqv/+bCf4qqEELFCZCij/apAYuWLd5WjGUX
0bYEivaZE/kBRa+R9hGFsFSYGa3OlgU6Klocjwqy9J/mxqYHI1XKzcj3nsQ8JW8V
dCg9zxkpnwWYR6tdGbS4bkegQcYf8D6kPMNYBNLFthzgh7AJU9+JMHMmrTE6kyK5
XlY8jXDISpg5J690ss813MR27wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJvH0ap
KNArV5d7ecNjfDzXzgpcMB8GA1UdIwQYMBaAFHDohVewwILJsG7PWbjyincDpjgB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82MjMxQTAyRUM2
N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdzbXdiczladVBLS2R3T21P
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NPaUZWN0RBZ3Ntd2JzOVp1UEtLZHdPbU9BRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjRFMS82MjMxQTAyRUM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdz
bXdiczladVBLS2R3T21PQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu6+JV9ggsg6Mo8naBnlNdov7e7SByDqNpthLUNNkun1iJrtqs39VRVZFImz+
bc/EKUZXKZ6hPFwYNSrBtUTRswj75wuSoKB68kQ91XDu0C9UdakhCrW2Vau2t3F6
77aVb6/OXUhdhbPkleioq6J6o96UYjZ0XeCT2QY43Sjbjz7Lpi4+IvYBTilPsM7b
m1FiS0UpUotodgSN0ibs8vWVIRHAscApRVwLYoZSn4UJxIL95H9ylwCm5LarcerL
NYb0b1UZXRSIEHCoPGVo1f/u9CFUSKrCBqS9eiJuiRBqM15K6xiWKMQc3kdFzgIx
5OHYKV0zjuVBEEP7QAVbPdNV0w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:49:20 2026 by rpki-client