
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier: IeJivsoE9v2Ux9ZF6kun7kpL2fMtL79FiflFXMXr1Sg=
Subject key identifier: E9:74:C4:F5:B5:E8:0F:58:0B:B9:33:53:EF:1A:A4:09:CD:28:45:64
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number: 01EF
Signing time: Mon 15 Jun 2026 03:23:06 +0000
Manifest this update: Mon 15 Jun 2026 03:23:05 +0000
Manifest next update: Mon 22 Jun 2026 03:23:05 +0000
Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: oD5Z/do9X0/xWgsZRf3D+cOFeLI93Yq809rMNI07IvQ=)
2: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
3: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Validity
Not Before: Jun 15 03:23:05 2026 GMT
Not After : Jun 22 03:23:05 2026 GMT
Subject: CN=6a2f701a-cde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:b6:a0:80:fe:06:6a:c3:a2:c7:fc:67:8d:
0e:db:f7:c4:67:31:c7:a3:72:df:03:ca:f4:ed:f8:
37:38:88:5f:b5:90:ce:f8:df:e5:9f:c1:cc:32:a3:
62:cc:49:57:5d:2d:5a:ca:7c:3d:97:e1:38:ee:e9:
4d:a4:03:c5:a0:61:6d:dd:9d:a1:65:1e:4f:0d:c3:
63:52:35:c0:73:c3:87:1a:d2:b7:1c:d7:61:71:c0:
23:dc:78:45:63:08:5f:4f:88:5a:52:c5:1f:fd:44:
32:13:7d:2a:3e:64:13:b7:13:82:86:f7:3b:3f:b7:
c5:6c:0a:38:c1:99:fd:63:fa:9b:59:88:7c:a9:e6:
7f:48:4e:62:25:0f:aa:2a:de:c9:2c:59:07:2a:2a:
9d:02:63:d7:c6:2a:97:44:b1:f3:22:e2:59:2e:19:
58:84:a6:a5:5f:4d:af:86:4d:2c:54:16:31:16:bd:
f3:b3:86:78:f6:5e:8f:5d:2b:d6:a6:52:b1:90:ca:
1d:22:19:fc:50:0a:42:87:dd:69:b6:5d:48:12:31:
93:31:c2:6a:03:e9:ed:cc:9d:71:4e:9f:83:88:a8:
06:b7:e1:12:cf:1b:12:e5:67:03:6b:bb:63:51:ab:
47:d9:43:3a:9a:b8:cc:10:dd:47:c3:44:a1:98:fc:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:C4:F5:B5:E8:0F:58:0B:B9:33:53:EF:1A:A4:09:CD:28:45:64
X509v3 Authority Key Identifier:
keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:d5:9a:06:bf:93:05:fd:d2:1a:63:10:84:b2:17:4d:f3:e5:
11:d5:a3:3a:46:f8:a7:bf:7c:9e:77:38:69:74:34:24:2b:c0:
ee:32:7b:be:32:3b:f0:5c:6e:18:b5:26:41:52:26:b6:ec:f9:
29:84:d0:08:d4:b4:8b:35:a5:d3:bc:a8:19:bb:25:a9:fa:59:
45:cd:70:4e:0d:b2:3b:b2:47:81:b4:ff:49:5b:77:3b:ec:7b:
6c:03:14:25:f5:46:fb:3c:94:fc:7d:fb:b7:22:76:f0:d7:fb:
05:ee:c5:a3:8b:ff:b3:46:0c:fa:f9:5a:c5:09:96:34:ee:f4:
a7:7e:46:30:42:ef:d3:9d:3a:3c:22:8b:a9:23:cf:e3:a2:a1:
21:30:28:1c:9d:06:5f:76:d8:a8:4c:a9:ac:df:79:38:98:00:
ba:95:79:ba:e4:c4:99:88:39:9c:b0:cc:0d:81:ac:ca:25:97:
59:af:a1:d3:e3:68:f8:54:04:ac:88:3e:69:32:db:88:d8:fa:
da:56:75:4e:51:71:33:ac:35:62:12:7a:ee:ee:d8:9a:ec:f0:
80:78:13:fd:29:d6:e3:0d:c3:b2:bc:fc:2b:ff:52:0e:b6:43:
a1:01:2a:75:9c:18:1a:c3:cf:db:e1:23:21:2b:a1:32:de:e0:
41:a4:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:36:38 2026 by rpki-client