
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier: n8WZ3ijo8DH1/ihgGqpNudtoEfVBrHEe6tE8m6fvdNc=
Subject key identifier: 78:8A:FB:A3:8F:5E:6C:86:BE:CE:14:5B:97:3A:6D:28:40:E2:3A:8C
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number: D4
Signing time: Mon 01 Jun 2026 07:35:40 +0000
Manifest this update: Mon 01 Jun 2026 07:35:40 +0000
Manifest next update: Mon 08 Jun 2026 07:35:40 +0000
Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: +FiXQKuk8rD3EbCJc2l3Id/Mmzs0Tn4l7/k907bSvIA=)
2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Validity
Not Before: Jun 1 07:35:40 2026 GMT
Not After : Jun 8 07:35:40 2026 GMT
Subject: CN=6a1d364c-8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:7c:e0:dc:66:60:58:25:1f:22:c7:88:3e:
77:45:43:af:a9:72:59:6b:5f:ca:44:05:6a:c0:a9:
11:11:00:9a:e6:1f:8b:9b:d9:7e:b6:4d:b8:eb:96:
ae:31:8d:5c:bd:f0:76:5c:bd:3b:43:c8:f2:19:17:
94:34:e4:28:db:4f:36:d5:63:c1:ca:4d:b9:76:8d:
b4:5c:1f:03:95:2f:c3:65:aa:1e:2b:dc:4c:60:e7:
5a:a1:25:63:b7:af:ab:a5:50:65:fc:78:60:09:c3:
a9:f9:c8:e5:b3:54:b6:19:9a:81:14:f3:0e:6c:43:
45:88:76:0d:cc:9f:07:73:63:cf:9a:a6:2d:0f:50:
88:c4:6f:31:63:8d:49:17:fe:94:c8:04:4c:d9:0a:
cc:25:fd:ef:eb:98:6c:d5:1c:39:3a:d3:16:6e:5a:
dd:de:9b:c4:ff:7a:c8:a8:40:94:5f:0b:4f:ca:b6:
e9:38:04:af:3b:b2:2d:47:dc:0a:6f:d2:1f:62:82:
f3:b2:3b:9a:93:79:40:3f:ee:3c:2e:22:1f:1c:7c:
5e:4c:7b:aa:58:a3:33:dc:32:41:80:d1:2f:c6:8a:
72:ef:2c:4f:f4:99:e5:8a:61:d1:e9:f4:d6:ec:37:
10:77:16:c3:42:b5:64:6a:11:f0:31:54:75:93:e8:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8A:FB:A3:8F:5E:6C:86:BE:CE:14:5B:97:3A:6D:28:40:E2:3A:8C
X509v3 Authority Key Identifier:
keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fb:08:1e:15:99:8a:1f:fe:e1:81:36:b2:f2:95:f2:d8:3f:
ee:c9:04:9d:04:af:d0:24:00:26:0c:37:12:6d:df:fd:8f:bf:
6f:d9:b4:2c:1d:70:9a:86:bc:9a:44:56:36:7e:20:b9:39:44:
4c:cd:fc:db:f2:89:d9:14:45:d9:08:b1:14:a3:1b:45:b2:16:
67:ac:d7:84:9c:41:07:53:6e:53:d9:f8:02:da:d6:57:4c:6d:
c1:bb:1e:35:09:d4:c0:11:98:58:6d:e9:58:db:d3:82:a7:b0:
4d:6a:3f:85:c6:05:15:34:db:39:3f:8d:c2:9a:5a:3f:56:38:
83:2a:4b:f9:e2:11:fe:a2:10:42:6e:b3:18:87:e8:1b:07:8e:
88:3e:c8:0d:ff:b0:59:af:2b:d6:27:68:a3:86:ee:d7:4b:0b:
ba:16:be:be:44:0f:00:35:c3:fa:50:a5:02:ed:7f:11:87:a4:
11:5f:a9:0a:fa:51:92:18:49:9d:bf:cb:af:5a:ec:27:ca:c1:
6c:9b:64:22:f8:06:c6:21:63:4b:14:ca:20:6f:31:13:68:dd:
be:58:08:74:0a:4d:6b:53:a0:92:b6:d6:2d:ad:7e:79:74:64:
3e:c8:a6:a7:9c:20:0e:ed:39:6d:3c:16:53:04:0e:7b:ab:d7:
15:f9:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:27:36 2026 by rpki-client