
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier: 8PqR2CM82mbS/5XIysgr6Z98IVotO5CyzFCWXJKO1Sc=
Subject key identifier: 72:BC:5C:82:8B:ED:CD:E2:4B:79:97:ED:15:EE:79:81:10:4C:98:8C
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number: 0202
Signing time: Thu 23 Jul 2026 04:24:49 +0000
Manifest this update: Thu 23 Jul 2026 04:24:49 +0000
Manifest next update: Thu 30 Jul 2026 04:24:49 +0000
Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: K5+mFMVHGZ5kTaq6Qa9d2zwpCq0EHR5NyqMTblA5A2g=)
2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Validity
Not Before: Jul 23 04:24:49 2026 GMT
Not After : Jul 30 04:24:49 2026 GMT
Subject: CN=6a619791-5237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:68:c1:42:2d:55:31:e5:51:24:0a:ca:e9:
c5:a3:95:8c:5d:d6:81:d8:da:d5:62:64:d5:c7:ea:
fe:d8:cf:79:34:4a:60:3c:a4:42:cb:03:33:0b:eb:
6f:2b:86:3d:9c:3a:be:30:eb:9c:2a:fa:d5:61:36:
df:9b:ed:84:24:e7:06:a4:1d:5b:b8:48:a0:1d:f8:
72:c6:86:c3:19:a3:95:b8:b9:c2:cb:9a:8b:cd:0c:
bd:fc:28:da:38:4a:82:07:72:60:34:dc:e1:1a:d7:
42:5c:fc:17:47:fa:70:e2:57:e7:07:ec:93:7e:53:
6b:3d:cb:dc:78:8b:eb:a6:a1:04:88:90:bd:75:9e:
96:89:34:37:b6:43:a0:a9:64:b3:d3:dd:ae:8f:67:
6d:1a:08:ef:45:b8:34:c1:07:80:c0:4f:59:b8:c6:
ba:df:f0:aa:82:f7:6e:59:06:8e:11:f3:ae:5e:40:
66:33:62:80:26:be:89:f0:c5:99:26:9e:44:72:d6:
e7:6d:c1:61:14:29:53:3b:8a:be:fe:32:c0:9e:aa:
0a:cd:0e:78:ed:0f:3a:fc:22:0e:1a:09:65:d2:6f:
09:2a:08:25:85:99:86:9e:d9:fe:5e:c3:73:74:43:
a5:58:55:b4:ff:ac:96:cc:c4:45:88:cd:8f:af:92:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:5C:82:8B:ED:CD:E2:4B:79:97:ED:15:EE:79:81:10:4C:98:8C
X509v3 Authority Key Identifier:
keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:73:f5:ad:8d:5a:6a:a3:ca:3f:fc:d3:ae:39:d5:d1:fe:9f:
78:6e:ec:77:21:d8:37:e7:c0:f3:16:d1:70:e8:d5:c8:c4:7a:
f5:36:2e:41:e5:94:5b:e4:79:3e:1d:40:d8:28:66:45:cd:ff:
9d:3e:2f:86:32:03:3f:d3:84:e1:03:b6:8a:a9:49:52:61:23:
dd:f0:4f:bf:17:2f:d9:c1:cf:03:fb:fb:fb:e2:ab:53:29:17:
d5:2c:65:c7:31:1b:ee:14:05:99:79:0c:24:1b:27:69:90:ab:
09:77:d7:44:ef:be:b6:db:48:32:dc:58:58:2f:e9:5c:22:55:
e2:71:3f:ed:9d:6e:cb:4c:b1:5a:1f:a1:f3:08:b6:a0:b4:42:
36:74:56:f0:20:de:cc:71:0a:84:03:34:56:39:9b:ca:18:76:
dd:fb:c7:72:8c:fb:3a:e2:27:1d:d3:0e:be:8e:70:e7:35:8a:
9a:55:9b:c9:c6:de:9a:ad:9d:9c:0e:49:33:fc:b3:1c:e9:35:
32:e3:3c:f6:50:57:e3:cf:03:96:c5:0e:36:e2:5d:ff:24:12:
62:81:25:17:1a:fc:10:a1:a0:22:1f:76:59:af:62:9e:9a:b8:
66:2a:bb:60:91:15:f1:96:e0:fb:25:49:7f:b0:ea:d5:21:6f:
79:f2:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:57 2026 by rpki-client