
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
File: KozvQUIwYkfgXyYUwTFpXx7uChM.mft (raw, json)
Hash identifier: mppHb0Z7TQQHxrM7dloXhm72qlvSpfERYedO9m5P82s=
Subject key identifier: F7:85:7B:42:5E:4E:61:C1:F5:2C:00:31:FD:F1:A7:A1:7E:44:C4:89
Authority key identifier: 2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13
Certificate issuer: /CN=A9112762/serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
Manifest number: 3E
Signing time: Wed 19 Aug 2026 09:11:50 +0000
Manifest this update: Wed 19 Aug 2026 09:11:50 +0000
Manifest next update: Wed 26 Aug 2026 09:11:50 +0000
Files and hashes: 1: KozvQUIwYkfgXyYUwTFpXx7uChM.crl (hash: cU6PzHCjJ4K6YEDLSPI4UOM0wo04K4jmxLo01w742gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl
rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112762, serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13
Validity
Not Before: Aug 19 09:11:50 2026 GMT
Not After : Aug 26 09:11:50 2026 GMT
Subject: CN=6a857356-aca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:52:9e:59:4b:41:2a:52:7b:72:f0:03:db:
ed:10:cb:70:c9:62:5a:58:39:a3:de:93:fd:bb:1c:
68:22:93:2e:5d:84:0f:ad:d3:06:a0:cb:c8:e4:ca:
3e:0b:c0:5a:ca:e5:bc:41:f6:82:a9:e1:33:60:aa:
30:8b:83:30:7f:f8:5a:7a:e2:10:da:6e:db:ad:99:
6f:90:18:9a:32:59:65:9c:1f:da:1e:3a:8c:53:c1:
ba:d6:e4:81:43:14:9c:ac:39:cc:b1:3f:69:aa:33:
bc:9e:38:e3:ce:7a:c7:bc:ab:0f:26:12:d4:8b:cd:
ba:a6:35:c0:5e:62:35:4e:af:32:a8:7f:70:29:4f:
50:93:d0:32:4f:59:8f:c4:ec:9c:dd:95:22:42:e5:
41:1c:3c:e8:31:cf:68:08:36:0a:46:d9:c2:c1:e3:
14:ce:b6:52:25:17:fe:d4:68:83:df:7d:02:52:a2:
71:02:5c:cb:39:73:71:8e:b0:0e:95:6a:d8:e9:d6:
91:b2:a0:d3:42:51:d9:f1:c0:44:da:f4:54:cc:32:
94:70:b0:30:0a:b4:d5:d1:bc:b0:f3:81:4c:af:1e:
12:b3:7f:11:f1:4f:59:1d:f3:c0:55:99:21:13:6a:
d9:80:45:c3:65:19:5b:92:59:df:ec:43:6c:fb:fe:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:7B:42:5E:4E:61:C1:F5:2C:00:31:FD:F1:A7:A1:7E:44:C4:89
X509v3 Authority Key Identifier:
keyid:2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:9b:94:d6:e8:41:76:ba:8c:fb:d3:08:11:59:5f:de:08:
0d:73:23:e3:46:ea:40:9a:22:80:ba:21:01:5d:79:57:e8:ce:
f6:c4:5a:12:41:2e:e1:58:24:5c:a9:c2:a2:2c:bb:ea:23:64:
80:39:a3:5e:f5:02:fd:c9:76:30:08:e4:13:50:87:3f:e7:d7:
82:fa:5f:c9:4e:44:cd:42:ae:ce:6c:0f:9c:13:7f:c9:84:2f:
99:01:d5:95:83:f5:5e:2d:3a:ff:66:1c:f7:80:b4:55:db:66:
91:7a:21:64:55:55:79:37:6b:8a:91:0f:60:d2:1a:8e:bd:0a:
dc:8f:a9:e2:40:64:cb:dc:05:d7:db:31:75:de:37:9c:bf:bc:
1d:16:05:29:01:f6:68:12:e9:a6:0d:4d:6a:c9:65:aa:75:5b:
54:e2:bf:8a:3d:ef:05:1d:71:63:7a:59:3c:ba:f2:b2:3e:83:
7f:af:15:67:67:7e:ca:2f:da:08:3a:4f:6d:2d:6c:bb:e4:87:
12:24:3c:e2:91:7f:6c:38:74:fa:41:5d:55:0b:c5:9b:10:c0:
00:9a:d9:7c:04:d9:a6:82:d5:7b:e9:1d:39:c1:e9:7b:37:81:
4b:de:13:0e:90:a0:ef:ea:9b:b1:87:62:5a:19:bc:d8:f2:35:
5b:87:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:07 2026 by rpki-client