
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier: drvscXEIKimev2CrPequgLbyP863qp/EG+AcCDFkb7E=
Subject key identifier: 19:EF:D0:9F:13:2A:62:05:C1:68:3B:67:9F:77:7C:6E:82:B0:68:22
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number: C9
Signing time: Mon 11 May 2026 07:03:31 +0000
Manifest this update: Mon 11 May 2026 07:03:30 +0000
Manifest next update: Mon 18 May 2026 07:03:30 +0000
Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: 2utA8jY50NCcAK55acbVs5l6lZ+IxhR6mplqlzODW4k=)
2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Validity
Not Before: May 11 07:03:30 2026 GMT
Not After : May 18 07:03:30 2026 GMT
Subject: CN=6a017f43-fae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:0c:95:1a:83:72:17:c7:7d:87:33:87:0e:
cc:31:21:63:e1:49:74:88:e9:a3:c6:95:cc:3b:0d:
f9:e2:92:09:09:67:3c:60:ef:83:e5:19:7f:20:b5:
90:68:81:a1:2a:31:dc:c8:df:af:f7:8d:9a:31:ec:
c2:33:9d:45:9a:1b:bc:af:1c:a2:f9:f0:42:6a:f9:
d0:c7:52:9f:f4:0d:81:60:c2:95:7a:7c:e5:71:5c:
c7:05:5b:e8:79:fe:61:24:0d:28:68:1a:6a:b7:3f:
22:44:f5:cd:64:d0:06:17:42:d8:00:c9:19:d2:96:
a1:95:9b:d0:af:8b:b7:cc:d7:79:b8:dd:97:fe:ba:
93:d9:65:86:06:9e:f0:ef:40:95:18:fd:c3:92:da:
88:32:83:76:40:1f:57:7d:72:fa:54:d6:77:46:46:
57:c9:61:8a:e4:c3:0b:84:a2:31:31:86:f4:31:c0:
72:f8:64:19:db:3f:a6:45:00:9c:3c:4a:f5:70:c2:
05:a7:11:b1:47:e2:b4:17:56:03:06:05:f9:2f:d5:
c5:d4:fc:ec:55:55:dc:ee:f9:56:62:7f:9b:60:22:
ad:ec:70:86:f3:eb:0b:70:db:65:9a:92:62:66:61:
90:6a:9d:2b:91:07:b2:77:ff:75:33:9c:43:4b:63:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:D0:9F:13:2A:62:05:C1:68:3B:67:9F:77:7C:6E:82:B0:68:22
X509v3 Authority Key Identifier:
keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:44:df:43:7b:54:d5:9a:ec:e8:60:17:88:99:24:f2:1a:33:
a5:b4:ab:9f:29:e1:fe:b7:cc:0b:48:c7:31:8c:69:ba:22:39:
cf:91:35:4d:fd:41:ae:b7:83:3f:26:c8:b4:77:55:66:3e:04:
cc:7d:15:c3:da:93:fc:fc:4f:3f:8a:2d:0b:b2:26:db:92:62:
e9:90:81:10:6a:ce:3d:09:5f:2e:56:00:55:75:c3:4d:d5:d8:
35:2b:96:ce:1c:8c:78:6d:c1:4f:a3:23:5c:c0:b4:5e:55:6a:
c2:89:23:0e:b9:7c:9c:a8:e4:e5:bb:23:38:5f:e4:4e:75:a4:
91:9d:cd:ea:a1:9b:62:83:42:65:e5:4e:fa:ba:fd:7a:85:c1:
43:c2:61:ea:8c:1d:22:02:0a:5f:6e:9b:10:be:ea:07:f2:95:
87:26:4c:1c:be:2c:53:ea:af:c9:dc:fa:6a:07:2c:f1:68:04:
d1:e5:00:2a:f9:5e:20:eb:5b:fd:00:71:30:a4:e4:27:2d:0a:
12:35:25:dc:2f:69:90:51:3a:2a:33:59:06:ef:2a:3a:2d:5a:
c3:15:2b:a7:a1:74:13:26:95:ee:4d:ec:ae:c7:d5:2b:74:5b:
43:6d:1d:61:09:5b:26:f1:66:66:07:0e:4e:cb:b5:98:92:09:
e3:17:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:00 2026 by rpki-client