
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json)
Hash identifier: id/8S+p7uImhWAaMqg0FuF5i/IoL3O/ClM/5BqAzbK0=
Subject key identifier: D2:77:96:2A:12:9D:9A:44:05:21:63:8D:95:94:94:C0:C1:AA:64:C5
Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Certificate serial: 0289
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
Manifest number: 0282
Signing time: Sat 13 Jun 2026 01:54:52 +0000
Manifest this update: Sat 13 Jun 2026 01:54:52 +0000
Manifest next update: Sat 20 Jun 2026 01:54:52 +0000
Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: CXOyV+NpdYGroWmjBVjM/D729NmjOKGyqWff9LZ88Zw=)
2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 6ViEjGiRPk0ms0lSl5+ohXm8W2evvF29tI66T/l8bLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Validity
Not Before: Jun 13 01:54:52 2026 GMT
Not After : Jun 20 01:54:52 2026 GMT
Subject: CN=6a2cb86c-67c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:17:6c:89:6a:64:2e:8e:4d:c1:87:49:a8:
32:10:6a:db:2b:46:2c:10:a2:e7:7f:72:51:59:2e:
18:1b:b5:74:90:c5:d5:e2:44:97:14:86:8e:ca:dc:
0e:7f:8d:fd:bd:b4:d6:f7:7e:fa:fe:0d:60:74:24:
13:8f:08:f7:e0:71:12:39:02:63:25:2a:c7:41:da:
40:7a:ea:33:29:0d:11:5b:88:cb:c7:79:40:a7:d7:
05:71:d2:b9:ef:15:66:83:59:30:a5:3c:be:3a:1d:
e7:11:c6:ee:62:f9:a5:a7:ff:cd:90:3c:42:e5:72:
5f:94:45:9d:1e:2a:2d:26:ed:f5:6f:d5:42:60:4a:
13:d0:f3:34:b5:26:d6:be:95:90:ae:fd:fa:23:7c:
1d:b9:62:99:4e:e7:95:d4:eb:3b:87:65:c3:c7:3d:
77:ed:42:fb:36:c2:86:a5:bc:03:3d:e1:5b:37:12:
bf:b4:b6:ff:3b:17:5e:d6:92:fc:1d:e9:b9:3d:83:
8d:46:b8:21:03:32:7c:83:03:cc:e7:e2:a0:3b:05:
5e:af:52:1d:37:4d:fa:a5:1e:87:15:e2:9b:f1:1c:
4c:f8:5b:4c:7e:c4:e7:20:34:ad:23:3b:8a:f3:10:
d9:41:d8:c1:5f:4c:1d:fe:f3:f0:45:dd:d5:b4:7b:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:96:2A:12:9D:9A:44:05:21:63:8D:95:94:94:C0:C1:AA:64:C5
X509v3 Authority Key Identifier:
keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:75:d0:0b:cc:0b:0d:ff:98:e3:fc:00:0f:ed:01:12:bb:14:
1d:f7:3d:68:c7:08:14:8f:99:57:fc:01:ed:aa:be:31:19:1a:
0a:0f:b4:1c:49:ab:69:fc:b1:fc:ef:c0:f2:93:58:1a:72:da:
38:0b:d5:57:d4:42:e7:c7:27:43:a7:de:99:f5:ea:79:8d:27:
e6:6c:12:23:2a:57:73:2e:4c:86:ea:f3:22:7b:18:16:d8:dc:
8b:3d:7e:1a:ab:b4:5e:81:3a:ae:55:0c:54:bb:7c:9a:e6:d9:
b7:85:75:19:a1:86:e8:7b:ae:b4:b2:72:d4:b8:d1:3a:5e:d1:
43:18:18:e3:0e:90:99:2f:de:eb:3b:6d:ab:2d:c6:51:bc:de:
47:c5:9d:db:f2:49:89:be:61:ef:3f:3d:50:6c:31:59:0a:c4:
d9:c4:a5:57:08:e7:68:f8:3e:52:24:f0:00:6d:b2:64:28:c9:
a1:ee:8c:3d:ce:2b:3f:b2:b8:73:a3:c7:42:72:2e:e1:5c:32:
c8:e8:78:f3:61:81:1d:be:83:dd:73:30:2e:3b:74:b1:a3:76:
09:4d:2a:d8:0a:49:ce:85:a9:af:28:33:8b:96:43:13:67:62:
f0:1d:d3:b7:c6:7b:77:89:34:1a:c1:37:f5:3a:64:18:13:41:
23:d4:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:30:31 2026 by rpki-client