
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
File: CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json)
Hash identifier: 67EmL0PUZ+SqEkgGesol8IZKka8c5B5WPANdlVQA7AM=
Subject key identifier: 31:B0:5A:0E:2D:0A:3A:91:75:59:AB:0E:17:51:D0:EC:FA:B5:01:9C
Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3
Certificate issuer: /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
Manifest number: 02B5
Signing time: Fri 25 Sep 2026 01:28:09 +0000
Manifest this update: Fri 25 Sep 2026 01:28:09 +0000
Manifest next update: Fri 02 Oct 2026 01:28:09 +0000
Files and hashes: 1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: z2vFPg8uFdpZR2tCtdjfJoKsohdUB5PBt1xtoYq5xPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl
rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
Validity
Not Before: Sep 25 01:28:09 2026 GMT
Not After : Oct 2 01:28:09 2026 GMT
Subject: CN=6ab5ce29-65ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:e3:f9:8d:9d:8a:6e:41:04:4f:2e:1d:c5:
14:91:c4:46:b7:56:17:93:ab:67:7a:69:0d:db:a2:
85:bd:68:b4:a4:dc:cf:b5:ac:bd:e8:3a:94:ed:9e:
7d:6a:0d:3b:a6:6c:bb:08:df:da:cb:14:a5:ee:f0:
f7:ca:ca:fd:81:d2:12:64:a7:f8:ab:f9:98:d8:88:
f8:28:22:d8:e6:31:e3:3b:0e:a0:22:ff:79:92:53:
ea:71:96:05:06:48:97:a9:40:c4:f8:b8:af:6f:a7:
70:a0:c9:e4:ea:4c:a9:b7:29:14:28:fd:84:82:4f:
dc:38:32:a1:41:ed:5c:86:27:dc:07:94:32:32:58:
a2:03:33:8e:01:1d:39:d4:c6:96:4c:9a:02:df:33:
0c:c4:8f:00:88:d1:c9:ea:ad:dd:6c:e6:a7:df:30:
82:88:7a:c2:8a:ce:16:c3:2e:67:46:a0:35:af:cd:
ce:1b:e2:93:5b:75:54:60:4d:5d:e6:81:bc:e0:2c:
87:f9:ff:be:e7:d0:9f:20:b3:f5:9c:bb:f0:ee:a9:
a1:bb:b4:36:f1:ce:1d:47:73:a2:b5:65:f9:d7:eb:
a9:f7:2a:12:d7:25:97:48:d3:e0:71:74:0b:67:e4:
5a:2e:6e:b3:56:e4:b0:66:71:ad:a3:d8:4d:2c:93:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:5A:0E:2D:0A:3A:91:75:59:AB:0E:17:51:D0:EC:FA:B5:01:9C
X509v3 Authority Key Identifier:
keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:20:f6:20:75:70:bb:ba:39:96:42:cb:f2:79:c1:79:01:80:
3c:86:f0:5f:77:ea:01:d6:5e:56:8b:b5:25:c8:4e:04:8b:a5:
ae:9a:a6:da:b1:cd:50:c4:38:7c:aa:8c:6c:7d:5b:43:8d:7b:
7f:8e:40:f4:cd:01:ae:31:1f:4d:06:b3:44:91:a2:19:57:af:
20:de:75:5f:c6:6c:9e:8f:da:06:0c:bb:03:12:7b:0f:fc:60:
bc:d3:d8:cf:70:e8:88:e4:f3:35:10:8f:ec:7f:e8:d0:52:ae:
fc:9d:df:85:13:75:d8:d1:71:fd:e4:cb:16:74:9e:dc:78:7d:
98:4d:d1:db:ef:e2:8d:9c:ea:87:df:b0:d3:67:8a:7b:85:69:
f8:cd:d3:11:fc:08:7d:02:7f:cb:6c:53:d0:89:24:eb:4c:4b:
44:1a:d3:82:32:71:cc:4a:df:b8:99:1d:62:11:62:94:78:f5:
a0:61:e9:4d:60:15:10:f2:b3:a9:27:10:d1:3d:dd:bd:a7:6e:
96:11:2f:93:7c:f1:3f:d4:17:ad:0e:b0:18:7e:16:8e:75:f4:
ea:c2:2c:39:40:f3:60:4f:db:c9:f8:05:da:4b:d2:97:0b:50:
5c:0f:92:8d:e3:dc:b2:fe:5b:7a:9c:9f:ee:9d:c6:4b:de:1f:
f7:de:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:06:15 2026 by rpki-client