
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier: 0PDAmXEjxlrnOGxNNn5reJz0bKaP9ACxdI06IP8RBKg=
Subject key identifier: EB:C9:C5:65:81:77:9D:85:C4:1B:82:1D:54:C5:78:E3:CA:4B:32:0D
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number: A4
Signing time: Sat 07 Mar 2026 06:34:13 +0000
Manifest this update: Sat 07 Mar 2026 06:34:12 +0000
Manifest next update: Sat 14 Mar 2026 06:34:12 +0000
Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: 7jW26kek/8szNFSbOwctse2BdaiLh7VoXGUMwqKc45A=)
2: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: O3pM7qvbKmvbVcKlOqt9J2PpCos6mHEcxUkjQ35Bo3o=)
3: 05F9354AB48011F088AD0013C4F9AE02.roa (hash: X7BI5odsB6N538z/96kUX+IcSGhjCzOymMiDq7Wpvv4=)
4: 07D143BC294811F0BE054340C4F9AE02.roa (hash: kzSsxZ682v8/ERGLhjD9XrRbqG/U1pi7dFHad+/CXo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 06:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Validity
Not Before: Mar 7 06:34:12 2026 GMT
Not After : Mar 14 06:34:12 2026 GMT
Subject: CN=69abc6e5-c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:ad:9a:af:74:43:2c:df:c8:b2:26:70:fe:
3f:08:6c:07:5c:67:a6:36:ad:fa:da:31:ce:a4:8d:
9d:26:33:18:54:21:00:9b:26:81:81:e6:e3:63:2c:
77:17:ff:87:7a:f2:95:13:b6:c8:f6:78:5a:c4:7f:
72:01:2c:05:09:0a:89:a6:ae:f8:60:2b:12:60:30:
c8:3a:f3:0a:07:9d:d3:fa:72:f7:7d:b2:e5:2b:fa:
06:4e:d8:ce:38:94:c2:47:7e:a6:66:87:30:ba:17:
6b:d7:f7:87:05:5a:87:c5:8e:d1:6c:be:0f:bc:e6:
14:54:9a:d3:d6:0e:7c:b7:4e:fc:e7:fe:20:4e:6a:
a8:1a:3f:ea:e4:bc:9e:20:fc:97:fc:9d:3a:95:95:
f4:60:6d:39:f5:84:58:cf:64:69:61:e4:75:78:28:
72:99:e3:cd:7a:fd:0c:ca:8d:c5:b0:1b:f7:cc:bd:
01:d0:1e:5a:7b:9a:8d:97:e9:95:88:7b:07:2c:47:
d5:6d:ce:75:cd:77:2a:15:f7:f2:9c:20:73:46:ee:
8d:b0:13:5b:cb:ce:2a:81:00:9a:c7:02:b6:6d:34:
fc:19:d3:3e:6f:f8:7f:c7:7b:5f:63:6e:89:a8:77:
67:71:c2:f2:49:21:47:93:8b:8d:2d:76:05:ac:22:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C9:C5:65:81:77:9D:85:C4:1B:82:1D:54:C5:78:E3:CA:4B:32:0D
X509v3 Authority Key Identifier:
keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:53:73:0c:55:54:14:42:3e:3e:4b:d8:a5:93:2e:e1:ab:53:
06:07:9c:e3:3b:e8:ce:cf:1e:b7:df:59:c6:77:88:6a:44:f3:
6d:54:8a:ee:9c:1e:ab:22:85:1b:e7:ad:68:99:0d:f9:27:dd:
5e:23:48:a7:d1:fa:e9:03:2a:7a:a1:2c:17:17:f9:31:ea:41:
0d:5e:9a:8b:4e:1e:da:f3:82:10:31:21:36:c4:8a:1c:32:44:
ea:f0:9c:ac:1f:87:35:68:76:3f:94:bb:c0:0b:98:52:a4:b7:
ab:15:00:15:f8:de:39:f6:e3:d7:ac:1e:05:be:fd:7c:69:89:
8a:42:23:60:17:71:db:82:82:80:16:39:ec:40:61:36:60:ae:
6a:8e:42:6d:0d:3c:4e:5c:27:cc:82:8e:da:64:07:d5:4a:c6:
65:77:77:80:30:df:4e:e8:ec:60:70:a2:dd:a7:a7:c9:ff:50:
c1:bc:91:49:9e:92:9a:f5:12:3d:ee:fb:42:42:80:76:c8:29:
97:ee:62:13:7e:de:6b:aa:63:ba:be:94:f1:5f:be:6c:1c:78:
fb:de:9e:a7:20:2f:73:73:7e:79:93:c0:82:19:3f:d7:02:8a:
ed:bf:80:78:a4:75:82:c2:84:b1:5c:22:16:9c:ff:5b:f9:6b:
ce:98:94:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdEQ0IxMTAvBgNVBAUTKDBBMkEzMzEyRTA4QkE5QzQxQkU3RTBGQjU4QUE2NDJD
NkQwMUI4NzUwHhcNMjYwMzA3MDYzNDEyWhcNMjYwMzE0MDYzNDEyWjAYMRYwFAYD
VQQDEw02OWFiYzZlNS1jNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuoKtmq90QyzfyLImcP4/CGwHXGemNq362jHOpI2dJjMYVCEAmyaBgebjYyx3
F/+HevKVE7bI9nhaxH9yASwFCQqJpq74YCsSYDDIOvMKB53T+nL3fbLlK/oGTtjO
OJTCR36mZocwuhdr1/eHBVqHxY7RbL4PvOYUVJrT1g58t0785/4gTmqoGj/q5Lye
IPyX/J06lZX0YG059YRYz2RpYeR1eChymePNev0Myo3FsBv3zL0B0B5ae5qNl+mV
iHsHLEfVbc51zXcqFffynCBzRu6NsBNby84qgQCaxwK2bTT8GdM+b/h/x3tfY26J
qHdnccLySSFHk4uNLXYFrCKvLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvJxWWB
d52FxBuCHVTFeOPKSzINMB8GA1UdIwQYMBaAFAoqMxLgi6nEG+fg+1iqZCxtAbh1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi8wMTUwNUEzMDI5
NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFjUWI1LUQ3V0twa0xHMEJ1
SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVIVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0RDQi8wMTUwNUEzMDI5NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFj
UWI1LUQ3V0twa0xHMEJ1SFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaFNzDFVUFEI+PkvYpZMu4atTBgec4zvozs8et99ZxneIakTzbVSK7pweqyKF
G+etaJkN+SfdXiNIp9H66QMqeqEsFxf5MepBDV6ai04e2vOCEDEhNsSKHDJE6vCc
rB+HNWh2P5S7wAuYUqS3qxUAFfjeOfbj16weBb79fGmJikIjYBdx24KCgBY57EBh
NmCuao5CbQ08TlwnzIKO2mQH1UrGZXd3gDDfTujsYHCi3aenyf9QwbyRSZ6SmvUS
Pe77QkKAdsgpl+5iE37ea6pjur6U8V++bBx4+96epyAvc3N+eZPAghk/1wKK7b+A
eKR1gsKEsVwiFpz/W/lrzpiUnQ==
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:18:11 2026 by rpki-client