
$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json)
Hash identifier: 4M9DJ0ESI+MrsAqzJBRc1IMWbygBViVsA/CbKIgPOdU=
Subject key identifier: A9:93:92:D9:6E:49:CE:37:6E:3D:E5:02:C5:02:AB:7F:02:9E:0E:DB
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial: 0781
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
Manifest number: 0779
Signing time: Thu 16 Apr 2026 21:30:42 +0000
Manifest this update: Thu 16 Apr 2026 21:30:42 +0000
Manifest next update: Thu 23 Apr 2026 21:30:42 +0000
Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: Us6FoBS8W8UWnckluC+sFgs+OWrZhoNHd7qM1dbNbkE=)
2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: IhW0qxbo8h3sFHYh2PU8II7oZ+tmgZjeNcwWwyZj0fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Validity
Not Before: Apr 16 21:30:42 2026 GMT
Not After : Apr 23 21:30:42 2026 GMT
Subject: CN=69e15502-ba3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:cd:5a:66:f4:b4:34:d0:7c:24:92:a5:d6:
2a:86:4a:62:fc:2b:dd:ec:a8:c4:e7:06:53:36:4b:
0e:73:90:e2:aa:8f:66:1d:e2:87:8a:25:63:e0:d3:
e4:61:3d:49:a3:a4:8a:c0:2a:2e:78:c2:21:11:81:
28:61:e5:3f:77:41:32:15:b4:43:a0:ca:a1:84:45:
84:8d:9e:fa:9d:2b:c0:dd:d4:5f:4e:46:3e:99:cc:
ab:ad:5e:be:65:0b:48:cc:e3:43:4f:c2:25:3a:75:
ce:28:a4:8d:08:78:bd:7a:d2:a7:26:af:e9:e3:58:
09:d1:ce:5d:f8:d0:27:5f:ab:c5:07:86:c3:23:5e:
98:8b:65:44:02:4c:4a:44:43:de:97:fa:92:75:9c:
38:34:cd:7f:d3:86:bf:ef:b0:0a:01:75:01:ab:c7:
26:61:76:00:79:b0:02:c4:17:a4:6b:7f:2d:50:30:
69:0c:d6:a7:03:74:b0:5c:ef:64:df:2b:8c:97:bf:
b7:97:91:fc:6a:da:09:95:26:ad:0b:98:90:52:eb:
43:ee:2f:02:e3:fd:0c:3c:e8:ca:2c:20:68:83:ec:
de:bc:e1:d6:b8:3c:5e:bd:24:27:72:c9:bc:03:bd:
20:52:69:b5:de:b8:86:d9:52:c3:f8:b8:15:a7:c1:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:92:D9:6E:49:CE:37:6E:3D:E5:02:C5:02:AB:7F:02:9E:0E:DB
X509v3 Authority Key Identifier:
keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:db:ab:25:19:f3:18:88:c3:ef:10:11:33:18:64:c1:bb:f4:
13:31:bc:1b:4f:a8:94:5e:d0:28:7b:7c:e9:0f:54:44:a6:95:
e3:cc:ef:72:9a:04:cf:0b:c6:ca:c2:3d:77:4d:2a:50:30:e4:
61:8a:b5:ff:40:85:d8:41:a7:9b:b1:0c:c7:98:01:c1:5a:7a:
82:61:51:9a:8f:6c:49:db:0c:da:ea:0d:4f:4b:83:af:34:e4:
a7:86:af:c4:9b:52:a4:04:97:fa:a7:56:2a:02:4a:39:d1:2a:
71:06:b3:d1:1a:c4:ff:bd:5c:ad:81:d6:32:b7:43:02:97:b8:
4c:7c:88:78:84:c3:aa:1d:37:fb:ee:6e:3e:93:df:d7:2f:3d:
8a:4d:4b:b1:e4:78:6c:3a:77:de:94:bd:73:89:c0:47:6f:22:
51:53:ff:58:0c:70:c7:bd:ca:d4:a8:27:c2:7f:6e:51:d0:0c:
3a:4f:d2:52:0f:e0:b7:d9:03:c1:63:cc:e2:d6:72:34:20:95:
54:87:be:ab:18:05:8f:c5:2a:57:ae:03:44:0e:e6:1a:68:2b:
aa:08:3a:2c:ce:0c:26:a3:05:00:48:71:bd:40:5f:04:62:df:
10:c1:e4:c0:8c:b0:8b:3d:47:fc:28:bb:65:4a:33:b9:47:0d:
11:da:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:56 2026 by rpki-client