
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier: qP3jKDhAtSs+pt8Y8wfQ2YKKqGldqInF8ifau2xuUlU=
Subject key identifier: D6:65:16:DB:65:34:45:CA:8E:E6:67:7A:05:FF:E1:C6:18:D3:B4:3E
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number: 0112
Signing time: Sat 03 Oct 2026 06:45:52 +0000
Manifest this update: Sat 03 Oct 2026 06:45:51 +0000
Manifest next update: Sat 10 Oct 2026 06:45:51 +0000
Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: Vnl/IyZuCBP5b39mPEHqpLvo2904gOV8Z4vln8RltWw=)
2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Validity
Not Before: Oct 3 06:45:51 2026 GMT
Not After : Oct 10 06:45:51 2026 GMT
Subject: CN=6ac0a4a0-214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:f9:cc:f4:97:d1:f7:2d:c0:f5:95:b4:af:
4e:b1:d2:c6:ad:35:b6:ce:42:42:0d:4c:1f:25:88:
46:9c:d2:b0:0b:72:a8:44:16:20:15:e8:60:fa:f5:
5c:55:42:b8:15:ab:37:93:9e:68:a2:94:eb:2d:af:
d6:5e:04:94:79:5d:fd:8f:db:1d:cf:14:18:b4:f4:
26:6c:17:48:b6:28:e1:8b:45:23:46:de:e7:0b:69:
db:e9:a8:97:7c:ae:35:fa:b2:92:59:ef:a8:5b:19:
6b:89:e6:ed:7a:1c:15:09:99:14:29:01:58:34:3e:
b6:e4:bf:63:a6:ed:b5:79:3d:ee:49:c8:f0:be:3d:
09:39:b7:40:c2:25:f1:40:a8:82:05:0b:dc:7a:45:
c7:78:21:64:2a:33:55:9c:e8:73:b0:d6:08:ab:ad:
91:ba:ee:fb:76:41:f3:36:02:d3:71:79:e4:c5:b1:
88:5f:f9:df:1f:61:da:cf:76:81:57:b7:2d:dc:d1:
5f:b3:e0:2a:c2:d5:53:f2:72:a1:de:d3:5a:19:ac:
29:43:c6:52:64:42:43:56:48:64:c4:77:d2:db:4a:
46:f5:07:c7:33:ca:a0:0b:86:dc:6a:c2:df:a6:46:
66:28:ae:ee:b7:b1:ca:05:f0:b1:a9:75:21:93:d7:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:16:DB:65:34:45:CA:8E:E6:67:7A:05:FF:E1:C6:18:D3:B4:3E
X509v3 Authority Key Identifier:
keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fa:22:1b:14:08:42:ab:fb:33:c6:f5:f8:2c:fe:be:ce:8b:
6b:88:0f:88:de:08:42:ba:67:6f:df:3d:77:ff:20:c9:50:bf:
18:60:76:5b:59:14:c7:c2:56:30:c9:15:f6:d0:ee:3a:68:e2:
05:0f:45:6f:ff:d0:11:95:8e:5a:09:55:81:78:7d:cc:96:5b:
b2:e3:77:49:9f:27:06:d2:28:3d:85:75:8b:d6:51:51:b0:ce:
3f:9b:92:a2:44:c4:8e:fb:ba:28:3b:74:b7:11:f2:d7:f2:1a:
29:e9:0f:35:52:83:f8:08:df:2e:71:cb:c3:75:28:7b:ec:e3:
ad:52:6d:af:7a:e6:8c:b9:e9:c4:fa:1e:04:95:43:3c:64:a7:
75:74:8c:65:a0:08:5f:c7:08:c5:60:16:23:d3:e1:64:fe:1f:
df:19:3e:d5:5e:74:0c:71:b2:00:d3:e5:ef:f3:71:ef:de:e8:
03:00:e9:28:85:10:55:50:0e:ef:50:0b:ae:21:1a:d3:a7:27:
44:62:bd:a8:60:dd:9d:60:62:29:3d:63:6b:5d:ff:96:dc:ce:
8f:07:a1:2e:b3:a4:7a:5d:ea:ce:ef:bf:c9:98:b2:26:16:e9:
b9:8b:ff:03:3b:48:9e:62:7f:0b:bd:75:6d:cf:9a:ee:1c:b9:
7d:70:ed:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:42:45 2026 by rpki-client