
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
File: ko6KqA2ZpyP2qQIa5eewMqzt23o.mft (raw, json)
Hash identifier: qcqlrwzZHEpZ56+PrwTgL34WKSNiuauLypzIH2G0bn8=
Subject key identifier: 9F:63:2E:08:42:20:BB:DC:AC:B4:66:78:81:06:D7:86:C8:F3:A8:B8
Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A
Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
Manifest number: B5
Signing time: Thu 21 May 2026 07:12:36 +0000
Manifest this update: Thu 21 May 2026 07:12:35 +0000
Manifest next update: Thu 28 May 2026 07:12:35 +0000
Files and hashes: 1: ko6KqA2ZpyP2qQIa5eewMqzt23o.crl (hash: DtTyxp3mFMMvGKMuRkAR5mR4wY7lY+FWRhS4/5yXomE=)
2: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (hash: /bxoDydlBnXQXqec5/Xh6lqt0u+nbWaabKQ7eRpi4K0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl
rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A
Validity
Not Before: May 21 07:12:35 2026 GMT
Not After : May 28 07:12:35 2026 GMT
Subject: CN=6a0eb064-68a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:2d:66:d5:dd:d1:78:67:0b:0d:38:ff:db:
6b:dc:83:00:4c:f7:dd:bc:c0:5e:a7:76:07:20:6c:
07:45:08:23:be:20:83:00:18:49:fa:1f:05:db:c2:
3c:8c:48:d9:fa:77:44:30:b0:0e:7c:40:b2:a7:31:
8a:06:ea:97:b7:f9:11:43:c2:93:f9:72:49:b5:0d:
d0:ac:f7:02:4e:38:27:dc:2d:6e:3b:88:80:04:bb:
48:80:e7:23:38:d7:4a:e0:b2:29:f7:fb:b5:c3:dc:
30:90:04:c1:7d:a7:2f:8b:b7:f5:9b:54:d1:43:92:
7c:8a:8d:6a:57:25:0b:26:36:13:4c:3c:89:f4:c5:
df:7a:09:02:44:e4:00:41:e0:12:a5:15:f5:b1:b7:
87:76:59:6a:c2:b4:3e:ec:89:5c:7f:09:b6:35:a9:
eb:64:42:bc:26:df:9e:55:f9:d6:0a:4f:80:87:e6:
c5:5c:ce:02:06:d0:14:f5:b4:ad:ca:9b:80:49:25:
12:b1:8c:73:cb:07:62:ad:69:30:95:48:44:c2:ff:
b3:d2:60:c6:41:83:8a:0e:c4:d6:db:04:6f:48:09:
6b:08:2e:d4:94:fb:b6:b6:2e:80:f9:ac:73:c5:a9:
47:2f:d5:eb:7b:35:81:b7:2d:1a:ce:c5:a2:aa:01:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:63:2E:08:42:20:BB:DC:AC:B4:66:78:81:06:D7:86:C8:F3:A8:B8
X509v3 Authority Key Identifier:
keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:57:81:56:86:06:c1:0c:4d:28:5f:6d:35:23:57:15:17:0d:
6a:da:36:d1:00:39:6b:2f:cf:7e:cd:65:a2:c9:bf:cc:43:26:
64:d3:83:6f:f8:88:24:cb:70:92:73:c8:bf:72:65:8b:39:84:
94:c2:ee:b2:6f:fd:30:99:e9:ca:c6:39:2d:99:36:db:1e:23:
4c:c3:3f:20:b9:ac:7b:33:4d:ff:e6:7f:89:16:71:0d:96:a1:
9c:16:ae:98:04:83:22:05:76:38:e7:dc:9b:30:b2:ee:f2:4a:
52:81:25:8b:34:fb:4a:2a:15:29:6f:e5:9a:e2:61:45:98:b4:
d2:56:40:8a:da:d0:dd:95:24:3d:1d:40:a4:15:19:bb:75:dd:
fc:f8:1b:be:e0:4f:1e:9c:57:bc:48:34:d9:af:d7:e5:c8:89:
d9:66:bb:66:0b:28:8a:f0:2a:b3:f6:27:5a:43:99:39:12:8e:
b0:e6:36:99:14:e9:fb:9d:ab:52:5f:c7:f5:7a:75:d6:a7:ec:
29:ec:ad:7d:68:7e:42:88:4a:18:bb:92:94:38:76:78:70:2b:
9f:3f:4e:43:35:c5:fa:4a:67:b2:72:3f:dd:87:c8:24:b7:13:
f6:19:0d:01:9a:b1:d9:0d:61:61:94:96:b1:fe:86:8e:39:e5:
bb:e7:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:20 2026 by rpki-client