
$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json)
Hash identifier: evPg6TEIHHNqYHB5kpdHpFLU0Ib9ye5vTdmzxE+6tGE=
Subject key identifier: BE:79:40:11:6F:A1:D3:69:D4:3E:BD:D9:F0:D6:C2:B5:B9:98:DB:F6
Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
Manifest number: 0182
Signing time: Sun 05 Apr 2026 03:58:05 +0000
Manifest this update: Sun 05 Apr 2026 03:58:04 +0000
Manifest next update: Sun 12 Apr 2026 03:58:04 +0000
Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: NkDCSNnoGGiQlxzswTCUj2fdauZvgaMi+bx4avFXqwI=)
2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: NF/B7iZfQwf1Uq5EPTW6HLPKE2tbKP7FUo9Dka7/k/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Validity
Not Before: Apr 5 03:58:04 2026 GMT
Not After : Apr 12 03:58:04 2026 GMT
Subject: CN=69d1ddcd-c634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:3d:ca:f9:7e:3f:60:ee:5f:3f:54:24:c2:
6e:18:75:97:a1:f2:1a:10:25:59:dd:c0:00:a9:39:
68:96:2e:ff:22:27:cd:4a:76:18:9a:0e:e5:d9:bc:
3b:5f:a9:af:fb:3d:d2:55:74:99:94:e5:f4:c5:63:
97:fb:d0:6d:0f:26:63:e4:8c:e3:ff:a6:27:eb:b6:
a6:6e:d9:e1:e2:42:f8:55:07:ab:e3:2f:4e:70:db:
4c:5d:04:15:ab:cc:be:76:04:3f:16:f1:bb:c4:5c:
f5:b4:1f:a4:a7:85:55:b6:74:ec:82:fc:31:d4:92:
29:42:42:fa:b1:b6:e0:25:ed:aa:e1:f6:a1:5c:0f:
2c:56:5f:a7:40:d5:9c:f0:41:92:3f:06:31:ea:8a:
2f:c9:5a:08:a4:03:5a:44:90:88:ef:c0:ed:02:d1:
7c:1b:67:2e:5c:2f:de:fb:08:f0:cb:58:fe:8d:35:
2a:72:12:8b:75:28:4d:fd:13:88:42:b4:a1:48:c1:
d7:70:bb:ac:71:b7:1b:26:c7:b0:7a:a3:30:f9:af:
92:1f:6c:08:4a:f6:8f:4a:4c:f0:96:ea:89:4f:83:
ba:2d:a7:29:63:0d:1e:5d:74:11:46:6a:d3:eb:6d:
c3:64:99:30:67:a0:66:07:32:6e:10:73:d1:08:bb:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:79:40:11:6F:A1:D3:69:D4:3E:BD:D9:F0:D6:C2:B5:B9:98:DB:F6
X509v3 Authority Key Identifier:
keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cd:1b:db:b8:12:98:cf:65:f2:c8:25:41:6c:e6:d5:87:7f:
c6:04:04:ab:c2:be:5d:3f:cc:3c:84:53:54:e8:8f:c1:6e:2e:
d2:2c:7f:ff:f3:29:90:0a:f5:6c:f1:23:05:1a:ad:1d:2f:ca:
e5:d6:36:dd:79:b7:5c:37:1d:da:75:a9:af:66:29:a9:67:69:
77:e1:1d:77:21:f4:26:3a:35:f3:af:3f:d3:2f:82:6a:00:70:
0b:e1:ad:ec:42:a0:a0:69:86:2c:1b:2b:80:3b:09:7a:74:f4:
13:d5:68:52:bc:e9:2b:d9:0d:0b:9a:9d:86:04:f5:c0:ec:3b:
c1:68:bf:5a:ac:95:94:98:b0:03:da:97:c4:55:5b:54:0c:66:
9b:cd:23:0d:42:3c:ce:b1:3a:9d:c3:32:32:b7:b9:37:7a:b0:
5b:e2:5c:c1:7f:a4:92:b1:d6:83:81:c8:67:cd:26:ed:42:6c:
b4:3e:f3:22:bd:b5:76:12:94:03:75:b3:80:42:5a:ca:ee:1a:
34:b3:d9:62:de:5a:b9:a2:75:1f:94:a2:d8:dd:9b:32:ed:8d:
67:7f:e7:5d:19:09:65:18:0b:c0:6c:c9:20:82:92:7d:e7:70:
d0:e2:67:b4:61:28:15:4f:9f:75:57:79:0f:88:46:d4:b1:26:
ce:fe:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:43 2026 by rpki-client