
$ rpki-client -vvf rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
File: C0io-y5r59-P7QejyRmyPKQL3so.mft (raw, json)
Hash identifier: oRqA0kl17pMP8ZZukXqvNszMjLfXBmJ0W9SWY8glakY=
Subject key identifier: 6C:20:84:F2:AA:1D:4A:98:7C:2D:8E:B9:95:85:3C:3D:DD:4F:FA:C8
Authority key identifier: 0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA
Certificate issuer: /CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA
Certificate serial: 0B74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
Manifest number: 0B64
Signing time: Sat 18 Apr 2026 19:07:30 +0000
Manifest this update: Sat 18 Apr 2026 19:07:30 +0000
Manifest next update: Sat 25 Apr 2026 19:07:30 +0000
Files and hashes: 1: C0io-y5r59-P7QejyRmyPKQL3so.crl (hash: SHWOFE58VFKWuzQ8vxUGLBFgl/v+QIBcAnH9UBH2pAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl
rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2932 (0xb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91442B0, serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA
Validity
Not Before: Apr 18 19:07:30 2026 GMT
Not After : Apr 25 19:07:30 2026 GMT
Subject: CN=69e3d672-d4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:e8:dd:72:8e:db:6c:82:5e:05:30:33:ab:
77:fe:6b:bf:d0:d9:55:85:d8:1f:59:b6:23:24:cf:
bb:9e:95:ec:25:e0:97:cf:c6:b6:cf:a7:0d:2f:5d:
06:7e:7e:42:08:52:a9:ca:0d:1f:4f:47:d3:75:eb:
ba:20:9d:b8:c2:f7:71:a1:6e:29:8d:fb:89:2f:13:
f4:a5:65:92:d3:0d:55:64:57:da:a4:3a:d1:b3:0d:
0c:04:79:46:3c:64:44:2c:a6:ae:7e:bc:a5:42:23:
8b:5f:28:a6:e9:25:70:71:c2:f5:6e:81:59:de:3b:
00:9f:07:ad:95:10:51:0f:13:92:10:6f:d9:5c:1c:
e4:03:82:f6:e1:f4:9f:d5:57:f3:48:9c:9f:77:b0:
82:58:e9:7f:a3:e2:ed:18:9c:b9:0e:1d:d3:9d:b1:
c8:8f:dc:f5:e3:94:cf:3e:ab:1f:2c:72:bf:2f:37:
1b:de:cc:b3:f1:22:80:c5:18:3a:bc:17:46:72:3d:
fc:f7:36:07:33:23:2b:93:2b:af:95:97:30:16:95:
92:aa:57:60:07:3c:7a:26:34:04:66:e5:6f:cb:f9:
c3:fd:9e:95:95:3b:b9:66:6a:a3:62:f7:44:21:87:
db:61:6f:6a:5c:e6:2d:c9:03:6c:7a:66:50:19:bb:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:84:F2:AA:1D:4A:98:7C:2D:8E:B9:95:85:3C:3D:DD:4F:FA:C8
X509v3 Authority Key Identifier:
keyid:0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:8f:3b:02:cf:c5:ab:a0:a4:bd:36:64:2a:0f:5b:ef:51:
66:92:e6:34:f4:09:41:83:21:9e:00:ec:b7:a2:82:69:e2:9a:
a2:9a:b3:14:d9:f0:45:d1:4c:6a:bf:9e:ba:8e:ae:74:bc:2a:
e3:bb:88:0c:20:18:79:d0:e3:7a:0b:08:11:00:ec:91:0a:81:
a3:45:95:0a:2b:34:a1:d1:06:92:e7:8a:59:a9:99:2d:74:4b:
a5:6d:5a:98:20:89:11:35:c3:0d:f6:bb:4c:2c:15:a2:8a:69:
7a:99:a9:76:83:2b:f4:32:d5:9e:96:81:76:4a:20:1c:a4:3b:
09:23:40:d6:9b:9d:85:40:7e:25:eb:cf:61:ec:4e:7b:64:12:
09:f0:1b:54:91:7b:8a:ec:61:15:bc:9d:ae:c8:95:33:bc:4d:
80:c9:50:80:68:5c:9a:f3:b4:4b:45:ed:a3:d4:47:c0:e9:6d:
83:56:d7:a5:77:52:ef:11:72:c4:fa:dd:b3:ff:a4:32:49:d9:
61:0d:ca:c8:b6:ec:5e:f3:4c:fc:81:ab:cc:92:aa:38:93:02:
3e:6d:4e:c6:18:6e:76:70:8f:c7:97:cd:17:3a:26:e2:4b:47:
be:5a:d1:73:4c:e9:db:b5:1f:aa:cc:d7:29:9c:06:de:57:fa:
22:48:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:21:40 2026 by rpki-client