
$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
File: CO_XGTj3-dyHpp9cs_hMektyoAo.mft (raw, json)
Hash identifier: uRgtccdfE2zzVEtvgKl3lP9XPvYfg63MUjiwZ8Cyieg=
Subject key identifier: E8:46:D4:FB:2B:96:A8:A3:2B:DA:C4:1A:6D:2B:6E:46:53:37:83:A7
Authority key identifier: 08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
Certificate issuer: /CN=A91218BB/serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
Manifest number: DD
Signing time: Mon 02 Mar 2026 02:04:40 +0000
Manifest this update: Mon 02 Mar 2026 02:04:39 +0000
Manifest next update: Mon 09 Mar 2026 02:04:39 +0000
Files and hashes: 1: CO_XGTj3-dyHpp9cs_hMektyoAo.crl (hash: DVQW/55XanHczENJQ66t2zkQeI7lU6F5LkfRyRA6kac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91218BB, serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Validity
Not Before: Mar 2 02:04:39 2026 GMT
Not After : Mar 9 02:04:39 2026 GMT
Subject: CN=69a4f038-e19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:57:6c:10:96:ee:2b:52:78:86:0a:62:03:
27:b8:eb:46:23:a3:c2:0f:53:98:a4:51:3c:c0:19:
c5:21:09:0d:fb:88:b2:0e:6f:4b:31:70:82:2d:48:
e0:f9:29:2e:49:b3:d3:d6:8c:25:0d:c2:08:5c:dc:
a4:77:27:2d:1f:de:69:17:4d:f0:36:1e:3c:4d:34:
c7:8a:69:b0:36:5f:7c:dc:9b:f3:14:93:4d:d9:ea:
2b:60:51:d2:db:19:28:15:27:ba:d1:35:8e:e9:75:
1b:78:89:43:2c:63:c2:3a:28:da:26:72:2f:ac:07:
25:6e:fc:bc:60:fa:64:a8:83:88:fa:c5:5d:fa:e5:
6e:24:ea:67:5c:3c:6d:84:b5:77:e9:0a:68:49:ec:
bb:4d:3e:ea:99:cb:29:da:b4:83:35:35:76:82:ad:
8a:d6:8f:c5:11:99:f4:b4:18:c3:1d:3b:68:47:7c:
bc:59:20:82:17:ac:76:b2:09:98:4e:7d:30:27:db:
c7:15:ef:e3:da:93:78:c0:19:d5:c4:48:8b:3d:fe:
8d:a8:5a:e0:d2:80:82:e7:ef:df:c9:ba:5a:29:d5:
5e:94:cd:70:c6:3c:5b:bb:fd:96:7f:09:b2:8b:fd:
ba:7a:b6:07:4b:f1:41:94:c3:08:fa:f2:a7:0c:9d:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:D4:FB:2B:96:A8:A3:2B:DA:C4:1A:6D:2B:6E:46:53:37:83:A7
X509v3 Authority Key Identifier:
keyid:08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:72:a6:f4:1d:38:a4:fe:3d:76:d4:f9:e2:b3:73:4a:4d:e8:
93:7b:aa:ff:3b:44:e0:e5:ff:30:17:cf:77:26:76:c7:0d:83:
03:cb:75:55:c3:3c:15:2a:39:be:a2:e7:cb:e6:ef:75:9a:25:
0a:b5:44:bc:bf:a8:70:1e:9e:44:55:62:e7:13:78:47:97:18:
c4:01:38:2d:50:b7:fa:49:36:79:ee:51:26:b0:69:01:c2:e5:
1a:56:b5:78:d8:af:d0:ac:0f:6a:b1:3d:93:b8:33:94:9d:28:
f9:6f:4b:30:05:6a:51:8a:99:d1:cc:b8:0a:89:41:59:e4:79:
5e:69:26:a2:34:41:c6:57:5a:94:e5:5b:c1:72:eb:77:25:29:
8e:7a:89:df:7e:99:e7:d8:f1:51:59:47:42:22:c9:d7:63:7b:
17:51:7a:86:15:f1:d8:75:47:2d:3c:a8:3b:a7:e0:57:a8:a8:
ca:b2:a9:34:e2:25:7c:09:dd:02:a9:5d:3f:0f:e6:17:6c:17:
67:28:8d:8f:f6:6c:9e:92:38:dd:b5:f7:f8:c8:53:1b:3a:db:
75:fd:ce:4c:d0:80:a2:99:1e:0e:0d:16:16:fc:fb:6a:bc:e4:
22:e8:d8:49:9e:1d:d0:53:10:47:6b:d3:c7:36:59:e6:f2:eb:
d8:60:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:54 2026 by rpki-client