
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier: 8PAN62BRVbQdcELpK9Ab47TMbgUPF2rN7WgM7skHuzQ=
Subject key identifier: 94:58:3D:21:76:21:2D:DF:9D:18:D6:8C:79:D6:AF:1A:91:8B:77:8A
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number: 0208
Signing time: Mon 03 Aug 2026 04:10:38 +0000
Manifest this update: Mon 03 Aug 2026 04:10:37 +0000
Manifest next update: Mon 10 Aug 2026 04:10:37 +0000
Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: Otj2WJOjkQac2EApVVubwoSYcpZaqQdp6GAYxfEK5l8=)
2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 04:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Validity
Not Before: Aug 3 04:10:37 2026 GMT
Not After : Aug 10 04:10:37 2026 GMT
Subject: CN=6a7014bd-8083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ea:1e:b9:91:4c:83:54:d7:19:3b:52:b2:66:
0b:81:e6:af:29:fa:46:f8:93:42:c4:3c:f6:30:e4:
e5:d2:77:97:ba:2c:2a:54:b2:4b:bb:d5:4b:37:c5:
16:30:81:b8:78:75:3b:17:04:ea:ce:33:24:a9:58:
45:35:5e:36:5f:84:ed:e3:69:47:3d:ee:ab:79:cc:
0c:b5:bb:0d:11:ec:94:ca:2b:1e:45:45:0d:d4:6c:
44:d4:43:8b:6e:f6:79:bd:35:34:3f:e4:66:80:9c:
b3:1e:14:6c:2e:23:2d:c3:43:b3:87:15:ac:7f:9b:
d3:da:08:e5:0b:a9:1b:65:8e:27:d7:b9:7f:4e:e4:
eb:7b:bf:d3:9e:f4:99:4e:49:60:28:7c:87:f3:c3:
2f:80:62:9f:e9:3a:92:18:81:ea:8e:43:4d:61:06:
17:40:8b:eb:13:b5:6c:65:68:78:82:d2:d2:86:35:
67:44:0c:99:3d:76:63:25:78:8c:52:6e:42:94:da:
c3:5b:db:24:83:00:aa:7a:b8:ab:f3:a6:a1:aa:51:
c8:8f:2a:ef:d4:37:f5:c8:98:a9:fa:84:aa:ca:af:
4e:11:85:2a:5d:0d:8d:2f:f2:66:ec:c6:95:b1:4a:
9a:eb:09:f8:8a:70:2c:49:3c:73:8f:99:c8:80:60:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:3D:21:76:21:2D:DF:9D:18:D6:8C:79:D6:AF:1A:91:8B:77:8A
X509v3 Authority Key Identifier:
keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b6:a4:9a:0d:18:92:90:4e:90:36:8f:cc:ed:2d:f9:05:c7:
92:59:a6:5f:42:d0:e4:88:e4:a6:53:da:b8:49:21:15:93:f4:
33:f3:78:ec:66:8c:5d:53:0f:34:55:dc:38:a4:d2:11:e8:05:
af:81:39:35:18:4f:ab:bb:8e:e8:db:56:3f:a1:fd:e4:82:73:
5a:2b:13:65:88:25:01:7a:d0:a9:96:de:07:6b:54:6f:2b:8f:
6d:ae:85:ca:96:e7:e0:95:0a:cd:17:c4:25:80:76:85:80:9d:
8e:94:f2:0d:6b:f1:46:fc:d9:78:1b:a2:90:3e:61:e5:6d:cb:
75:9c:d1:fc:9a:1f:9c:43:9f:e5:df:41:32:7a:60:4f:59:f7:
e7:2f:8f:96:ab:1a:ee:1d:06:f5:76:93:af:c3:91:50:3e:ad:
f9:9e:e7:f6:05:e2:92:be:71:be:1d:40:05:89:7d:d8:72:4d:
97:40:5a:79:ea:3d:4c:17:e8:a9:1a:8e:bd:6d:d4:01:9b:b0:
b4:34:80:34:65:ea:83:e8:ac:7f:97:b1:8e:28:5c:8a:e4:cf:
1a:54:c7:9b:68:40:31:18:28:15:b4:0b:e1:c3:26:a4:fd:4d:
85:74:5a:a4:bf:0a:be:14:72:72:12:d5:61:c9:b3:84:5e:c5:
4c:a3:ce:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:11:26 2026 by rpki-client