
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier: iTbO8krjiECrn17PI+8ZXJ5CFuc5dzi633Uu7akBWcA=
Subject key identifier: 15:7D:45:9C:89:5B:84:FB:1D:53:9B:D4:76:07:94:71:E8:26:9E:8E
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number: 0205
Signing time: Wed 29 Jul 2026 04:13:59 +0000
Manifest this update: Wed 29 Jul 2026 04:13:59 +0000
Manifest next update: Wed 05 Aug 2026 04:13:59 +0000
Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: meu8Wfl023oD4XbMOPH/QKQSzbAkwjJtdzZ2SFo+9dM=)
2: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
3: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Validity
Not Before: Jul 29 04:13:59 2026 GMT
Not After : Aug 5 04:13:59 2026 GMT
Subject: CN=6a697e07-3252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:6c:09:a8:ff:ee:18:dd:55:cf:5e:61:70:
e3:e1:c2:1a:4a:65:70:c2:0e:3b:1b:a4:88:6a:17:
7e:bb:ef:31:97:8b:f8:e5:84:7c:cf:d7:3b:c9:81:
2d:f4:1e:38:c9:b7:e8:0d:f5:78:72:c8:ce:77:5a:
15:9c:2f:ea:5b:5d:f2:12:ec:65:4c:c0:bf:71:4e:
bb:81:4f:fa:0a:68:26:b8:c6:f3:8c:9a:f2:be:7b:
6f:4e:76:90:fd:9c:88:56:b6:a8:a9:91:9d:d4:e2:
5e:0f:5a:9e:bb:68:64:b7:bb:eb:8d:88:ef:16:56:
23:cf:00:8b:9a:30:68:90:e6:06:5d:f6:93:95:8e:
b3:38:34:7e:69:d8:e5:7d:66:57:9b:b9:3b:b0:9d:
71:34:24:30:e1:29:2d:d4:3b:c4:b3:69:51:1c:2a:
91:f6:c2:e3:d1:52:07:21:57:2b:51:14:2f:68:8a:
08:a5:41:14:7b:38:48:ac:28:6c:c3:f7:c7:a1:60:
ed:4e:a2:1a:3e:0e:d5:59:d8:6f:23:6a:bb:cf:f5:
38:38:26:b4:9d:e0:a1:8f:10:f3:85:73:55:db:94:
3a:22:e1:af:12:21:af:d4:f2:9d:fa:dd:27:a2:e7:
78:64:da:5f:72:02:74:db:76:fd:b5:f9:9f:53:bc:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:45:9C:89:5B:84:FB:1D:53:9B:D4:76:07:94:71:E8:26:9E:8E
X509v3 Authority Key Identifier:
keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:16:08:53:b2:8e:db:69:f1:0f:c9:74:42:3c:96:17:16:a1:
66:86:e0:c7:27:f6:f0:01:f8:1d:93:d2:32:88:6b:bc:fa:65:
0b:0d:36:bb:eb:5c:2f:e5:e5:a0:06:6f:d3:88:fd:51:db:f7:
0d:f1:b2:76:d8:4f:03:60:a3:0c:aa:61:f4:15:0d:ee:e4:f1:
30:f6:7a:b4:84:20:28:dc:2d:b4:11:1c:1d:bd:65:bf:72:8f:
9e:ed:ec:fd:70:cb:1f:cd:53:44:08:92:dd:cc:6b:99:ec:2b:
62:d2:e4:e5:3e:4a:74:92:16:34:af:27:55:1a:e9:a5:e4:05:
be:16:a6:7c:fa:bf:33:a4:01:7b:8b:94:73:66:3d:17:7c:26:
a2:06:08:45:2f:6a:f6:6d:1d:17:a9:61:87:d4:0d:6c:fe:ce:
08:f9:98:11:33:25:4b:28:64:e1:66:e4:72:32:60:69:79:ac:
0a:df:7e:ec:61:d3:00:06:44:e0:1e:56:a6:94:ff:eb:aa:19:
e8:a9:ad:55:37:52:62:1d:9f:3a:84:40:54:24:57:cc:60:2e:
86:d1:e8:90:cd:87:04:2b:09:8a:6d:d7:a3:5f:a9:2a:56:e3:
d7:17:db:bd:44:ef:9c:81:33:33:0d:0b:0d:09:ab:e3:bb:f9:
bb:5a:0b:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw
RTYxMUQwRjYwHhcNMjYwNzI5MDQxMzU5WhcNMjYwODA1MDQxMzU5WjAYMRYwFAYD
VQQDEw02YTY5N2UwNy0zMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArR1sCaj/7hjdVc9eYXDj4cIaSmVwwg47G6SIahd+u+8xl4v45YR8z9c7yYEt
9B44ybfoDfV4csjOd1oVnC/qW13yEuxlTMC/cU67gU/6CmgmuMbzjJryvntvTnaQ
/ZyIVraoqZGd1OJeD1qeu2hkt7vrjYjvFlYjzwCLmjBokOYGXfaTlY6zODR+adjl
fWZXm7k7sJ1xNCQw4Skt1DvEs2lRHCqR9sLj0VIHIVcrURQvaIoIpUEUezhIrChs
w/fHoWDtTqIaPg7VWdhvI2q7z/U4OCa0neChjxDzhXNV25Q6IuGvEiGv1PKd+t0n
oud4ZNpfcgJ023b9tfmfU7xkqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBV9RZyJ
W4T7HVOb1HYHlHHoJp6OMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy
Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw
LXp0SVdhTklNYUVPWVIwUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAixYIU7KO22nxD8l0QjyWFxahZobgxyf28AH4HZPSMohrvPplCw02u+tcL+Xl
oAZv04j9Udv3DfGydthPA2CjDKph9BUN7uTxMPZ6tIQgKNwttBEcHb1lv3KPnu3s
/XDLH81TRAiS3cxrmewrYtLk5T5KdJIWNK8nVRrppeQFvhamfPq/M6QBe4uUc2Y9
F3wmogYIRS9q9m0dF6lhh9QNbP7OCPmYETMlSyhk4WbkcjJgaXmsCt9+7GHTAAZE
4B5WppT/66oZ6KmtVTdSYh2fOoRAVCRXzGAuhtHokM2HBCsJim3Xo1+pKlbj1xfb
vUTvnIEzMw0LDQmr47v5u1oL3g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:14:53 2026 by rpki-client