
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier: 7w3fvQ/a4Sla24ROWrcTdMcycSmA3mwLgIw3UoRa7BI=
Subject key identifier: D5:ED:3C:93:78:C0:15:64:14:1B:99:2E:BF:E9:A1:92:46:D7:41:AB
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number: AD
Signing time: Wed 25 Mar 2026 06:25:56 +0000
Manifest this update: Wed 25 Mar 2026 06:25:56 +0000
Manifest next update: Wed 01 Apr 2026 06:25:56 +0000
Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: /1UI6DAV53StUs6Z8NI9d784WC1/OML1/Wrf25muwMU=)
2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: kzSsxZ682v8/ERGLhjD9XrRbqG/U1pi7dFHad+/CXo0=)
3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: O3pM7qvbKmvbVcKlOqt9J2PpCos6mHEcxUkjQ35Bo3o=)
4: 05F9354AB48011F088AD0013C4F9AE02.roa (hash: X7BI5odsB6N538z/96kUX+IcSGhjCzOymMiDq7Wpvv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Validity
Not Before: Mar 25 06:25:56 2026 GMT
Not After : Apr 1 06:25:56 2026 GMT
Subject: CN=69c37ff4-a043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:91:8f:5a:1b:aa:9e:3f:92:4a:4b:e9:4b:
c5:2d:e1:78:01:1f:d0:24:96:60:70:90:bc:e2:4a:
a5:16:96:a3:1b:08:1c:0f:28:69:8c:67:e1:a0:c7:
78:66:32:22:3b:20:49:d5:b8:9e:43:ab:43:69:34:
eb:c5:8a:7e:30:67:ce:28:9c:74:64:6f:c9:4f:cf:
b4:fc:74:4d:ce:c4:8d:2b:db:c0:08:71:20:16:73:
67:9d:dd:b4:d7:3a:74:33:91:75:07:f4:1c:53:92:
fb:6f:71:16:bf:8e:36:9e:8c:59:85:7a:41:01:06:
3f:73:98:b6:23:f0:ab:c6:fc:6d:dd:1d:85:ee:61:
05:86:66:5e:cf:ef:80:d0:14:68:00:e5:fa:3e:89:
ee:5b:bc:4a:e4:73:62:ce:2a:0a:cc:ff:40:7e:a4:
c8:66:82:35:c3:1e:ca:b8:42:26:34:68:77:2a:a4:
cb:c4:98:17:52:98:a9:76:3b:b0:38:b6:12:5d:48:
4c:9d:06:39:3d:03:33:b9:bd:f5:55:e2:09:ce:ae:
c8:15:42:79:9b:fe:98:ab:26:42:92:53:c0:1e:65:
44:5c:3c:64:b3:d2:4d:9f:79:e7:0b:ba:68:72:ee:
cf:d9:1c:f8:22:b0:5e:e6:c1:85:87:53:d3:68:aa:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:3C:93:78:C0:15:64:14:1B:99:2E:BF:E9:A1:92:46:D7:41:AB
X509v3 Authority Key Identifier:
keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0f:7a:84:5d:d4:6d:03:1f:e6:5b:5d:74:25:5b:7f:2d:45:
00:99:06:5b:bd:e5:2a:be:b0:ba:59:72:0d:72:cf:81:3f:a8:
e5:13:25:44:c2:64:ae:3c:b2:44:0d:13:7f:82:51:80:5f:94:
d4:a9:b5:24:b5:64:a1:eb:62:3d:8b:e7:75:84:08:d3:c2:cf:
02:e1:3a:55:36:c1:c7:49:bf:66:b0:b0:74:08:2c:e3:fa:ca:
4b:66:9d:fd:8c:dd:f5:a6:a1:0c:e3:8b:ac:5c:39:5e:57:18:
f8:09:81:b4:46:5f:03:af:31:ee:d9:95:b2:9b:e8:7b:d3:ec:
0e:31:7d:57:10:4c:a1:2f:86:6f:87:1d:b6:7c:12:fd:3e:bf:
86:c1:2e:96:67:9d:c7:9e:4a:8f:44:aa:9a:00:4e:0f:5b:36:
4c:fa:6a:4d:a8:35:d9:96:2a:e8:6b:2d:71:e9:ca:62:8d:ec:
d9:f7:79:2c:22:dc:c4:9f:a5:cc:2c:ac:c2:23:c2:fc:62:79:
91:b0:36:f4:69:fe:03:ee:b7:78:fe:ac:c0:a9:2a:85:d3:2b:
ec:37:c9:96:d1:aa:c1:7f:3e:fb:e2:09:aa:4f:0c:06:60:ef:
c0:8d:f9:1c:95:db:7b:dc:20:6e:7b:79:59:4e:89:46:ab:df:
eb:2d:d3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:30 2026 by rpki-client