
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier: xw3yemzgITz9WV6p2zvCvzrx04ZfGMyHmrK/XHIRod4=
Subject key identifier: F2:FF:1C:85:FC:10:C7:36:78:30:30:91:37:BB:ED:29:3E:2A:F5:A1
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number: 01EE
Signing time: Sat 13 Jun 2026 03:20:36 +0000
Manifest this update: Sat 13 Jun 2026 03:20:36 +0000
Manifest next update: Sat 20 Jun 2026 03:20:36 +0000
Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: BxI0yKnAcMBfpwT8t+96SDwopuTkX2qXKQRgsVBenuQ=)
2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Validity
Not Before: Jun 13 03:20:36 2026 GMT
Not After : Jun 20 03:20:36 2026 GMT
Subject: CN=6a2ccc84-9296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:7f:52:a5:ef:74:00:13:e2:e2:0d:c7:63:
5c:45:38:2a:0d:74:20:00:09:08:12:02:0b:04:4d:
83:43:e9:71:0f:57:87:0b:1b:7e:a0:34:71:fd:c3:
15:26:79:9d:a3:95:f5:6c:22:00:98:4d:83:c8:c9:
aa:66:fc:3b:59:35:04:77:82:76:48:72:7a:63:ea:
b9:2e:9c:8e:7e:20:b2:ba:a2:88:bf:0a:56:de:f1:
87:d2:28:11:11:79:83:2c:f7:38:dc:b8:92:c5:48:
30:02:ec:41:10:c3:6a:69:33:85:81:51:0e:5b:c3:
d4:5a:8b:a5:7f:e5:5e:82:b0:68:68:d0:58:ba:56:
38:74:ee:13:35:cb:e8:f2:54:61:e4:57:3a:95:02:
83:6c:76:51:40:c9:c1:a8:04:77:a5:c4:89:42:58:
77:2e:e9:06:27:3b:d3:24:80:66:63:8f:fb:ec:82:
19:eb:22:0f:6c:d7:30:48:f8:06:89:7c:49:54:a9:
03:a6:56:b7:a0:84:d2:af:38:e8:b0:0b:f9:08:73:
71:d3:cb:e6:3e:da:81:10:0a:4b:05:f7:b6:f7:82:
25:92:27:da:31:a1:36:d3:c3:80:cf:19:29:d2:f0:
0d:6f:27:a6:77:0c:f6:ce:6e:56:ed:e1:61:69:9b:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:1C:85:FC:10:C7:36:78:30:30:91:37:BB:ED:29:3E:2A:F5:A1
X509v3 Authority Key Identifier:
keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:86:6f:cd:33:c3:40:1e:9f:38:0e:ab:15:14:a1:58:67:42:
a2:75:f8:38:a5:ce:70:55:75:96:e1:9a:ed:0f:16:ef:39:a1:
16:a1:33:76:4e:50:5b:ae:5e:6a:84:51:63:87:b4:68:9c:21:
2c:3b:87:11:8a:27:ff:ce:02:ab:56:91:cc:83:9b:89:af:9f:
12:a5:70:c4:c2:15:5f:98:55:a2:c4:9d:5b:c1:53:b5:6f:e2:
84:83:52:c7:88:f9:8e:e2:17:35:f6:b8:4d:43:90:bb:85:a5:
3d:94:37:cf:af:b1:91:ec:bd:72:b4:0a:f4:45:f3:64:8e:b7:
56:95:d8:5e:f1:b5:d2:84:38:af:3b:06:11:e9:a7:f9:6c:de:
fa:36:c2:4e:9e:39:6f:0c:42:d5:b6:12:85:e4:df:d9:26:f1:
45:72:c5:2a:b3:9d:d5:8b:93:35:90:95:c5:c0:a2:54:96:36:
9c:41:68:d7:d3:67:ca:59:96:85:86:d5:cc:63:ea:1f:77:85:
11:e9:4d:53:0b:fe:a1:60:80:ed:7b:72:1a:93:bb:4d:bd:53:
8b:f4:2b:cd:01:dd:04:ee:d5:d4:06:64:41:90:ab:b8:06:93:
a8:f4:7a:06:c2:5b:96:ee:a3:ff:a7:40:02:ba:71:87:a9:77:
a0:a0:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:01:47 2026 by rpki-client