
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json)
Hash identifier: g63fOwNO7Q0M5tc3jx4zn22657RiN1oknZXnl6qHhE0=
Subject key identifier: 2D:C4:0B:CA:C0:93:C8:58:0F:6E:BE:8D:7D:09:D0:6F:6A:43:CB:10
Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
Manifest number: 025B
Signing time: Fri 27 Mar 2026 01:47:15 +0000
Manifest this update: Fri 27 Mar 2026 01:47:15 +0000
Manifest next update: Fri 03 Apr 2026 01:47:15 +0000
Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: /A5fefJNGL07W/+Mc1eIkA7AzIbze0EJsVN3KCdVeaw=)
2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 6ViEjGiRPk0ms0lSl5+ohXm8W2evvF29tI66T/l8bLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Validity
Not Before: Mar 27 01:47:15 2026 GMT
Not After : Apr 3 01:47:15 2026 GMT
Subject: CN=69c5e1a3-1228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:cc:dd:d7:62:7e:0a:82:77:15:fa:cd:4a:
3b:28:cd:52:06:7b:0d:31:58:ad:00:b5:0c:31:6f:
d9:0c:bb:41:aa:93:7f:4d:16:f6:12:b2:5e:bf:60:
81:a3:22:bc:29:36:60:91:9b:13:a5:f5:3c:5c:b1:
91:9c:8c:bb:83:92:a5:f1:13:c1:da:f6:36:d0:99:
e8:2b:99:81:66:71:ad:92:58:35:52:e1:63:c3:aa:
08:bf:4e:38:b4:cf:27:2c:19:b9:41:d8:f7:fc:a0:
75:6e:9e:95:6e:42:39:22:0d:88:ca:fa:7b:ce:16:
a6:7e:01:18:cd:9e:25:52:27:40:55:18:16:e6:81:
8e:cd:b4:16:1d:a9:48:59:5a:85:78:ea:75:70:44:
87:d4:99:70:76:41:c7:6a:d3:12:5f:e7:da:20:dd:
24:c5:a9:76:f4:aa:a0:9d:4f:a5:d6:a0:e9:21:90:
72:8f:36:cc:23:b7:e7:2e:da:a0:7c:cd:00:e7:25:
ce:87:12:6c:13:bd:ee:8c:cb:5e:73:ff:68:26:35:
21:b5:85:63:99:47:4d:4a:fc:ed:aa:24:e0:53:46:
03:bd:de:05:ce:03:5e:7d:ad:a5:f7:f6:da:8d:08:
bb:49:18:ab:7b:52:a4:40:86:71:15:c3:6a:e5:ea:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:0B:CA:C0:93:C8:58:0F:6E:BE:8D:7D:09:D0:6F:6A:43:CB:10
X509v3 Authority Key Identifier:
keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:81:bf:d5:b9:fa:69:b6:c3:a6:70:64:90:50:19:85:3a:b6:
4b:ce:a8:28:dd:5c:86:16:e3:11:52:dc:d9:64:5a:46:4a:e4:
d3:7f:2b:29:d4:16:64:26:99:d3:02:7a:ca:7e:ca:5e:f2:c2:
5c:81:3d:e3:43:fb:b9:25:4f:0a:1b:41:5f:08:4b:0d:a4:42:
09:40:eb:96:e6:15:67:ca:87:b3:50:55:bb:ac:db:5a:87:c8:
7a:0e:e7:0f:30:9d:7b:51:fc:6f:82:4e:ba:a1:91:bc:f2:2a:
a0:21:c8:cc:31:9b:b8:9f:0e:18:a7:c5:55:0b:5e:d8:fb:4d:
ba:f5:a0:cb:cb:1e:10:50:f6:1c:4b:24:89:ff:60:e5:9d:7a:
bb:4b:d1:04:27:04:35:34:47:18:46:2c:4a:12:9c:16:2f:e2:
e0:0b:db:80:6f:9d:c6:14:78:c6:5c:eb:2b:18:70:46:0c:e9:
be:f0:19:12:47:83:0b:6d:b2:28:b1:ab:e7:69:fd:b8:02:ef:
31:2d:9b:b3:51:8a:37:da:88:e3:d5:d3:d1:fa:fa:a5:23:aa:
09:6e:d1:0a:8e:3e:5f:99:61:5c:32:0d:80:ea:b7:84:48:aa:
01:e6:0f:5b:db:41:61:a9:82:f8:03:5a:db:46:3e:af:9c:66:
93:a9:e2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:37:01 2026 by rpki-client