
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json)
Hash identifier: s9MkEThIpRTBboEfKyahNiKgWX5SmkbyRen/lTD1sHw=
Subject key identifier: BF:23:5E:AC:CC:88:50:1D:93:66:ED:03:BF:5D:E3:FB:E6:DD:27:14
Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
Manifest number: 06CA
Signing time: Wed 30 Sep 2026 22:39:32 +0000
Manifest this update: Wed 30 Sep 2026 22:39:31 +0000
Manifest next update: Wed 07 Oct 2026 22:39:31 +0000
Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: HOY5PcRXE3ysyWZzwFg8eXtOGcfxdDzjz2zzeaMwqiI=)
2: 590697D6465611EE8128031BC4F9AE02.roa (hash: VAtwg4JA7DKaiR1Y/aQYlkU3CfV+E/YtMAPsl8ob9cY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 22:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Validity
Not Before: Sep 30 22:39:31 2026 GMT
Not After : Oct 7 22:39:31 2026 GMT
Subject: CN=6abd8fa4-8025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:66:34:af:86:14:8a:16:66:c4:cd:67:20:
a2:33:73:d9:97:25:5c:0e:55:d7:e2:fb:18:fb:bf:
d1:74:bc:e7:35:b6:f3:27:b1:02:c1:c6:68:9c:9b:
1d:5f:3a:14:50:ef:3d:37:d0:6d:88:1b:86:73:87:
f2:71:39:cd:0c:47:c7:dd:49:a4:28:dc:0d:e5:14:
e5:c2:42:be:fa:c1:4c:69:45:06:ab:d4:fd:f4:22:
c7:53:ed:bc:98:71:82:0b:c9:e8:34:fb:e7:17:77:
72:18:57:1a:d2:95:cc:12:83:cf:8c:63:77:8a:b4:
c6:4b:33:d5:ad:1f:3b:8d:aa:f9:6b:72:e3:87:54:
8f:17:54:d7:32:21:70:46:63:fa:1d:ff:77:28:42:
9c:27:2a:ae:4c:3c:97:a3:75:f4:72:e3:5c:24:f6:
51:19:1e:ff:8c:7b:58:25:85:3f:af:ff:08:8b:10:
76:50:8f:5a:68:66:73:fb:43:74:f0:41:a6:66:07:
09:6a:33:9a:09:a4:26:77:ba:7c:6d:e2:9c:2f:f2:
38:f9:3b:57:51:18:e6:cb:4d:ad:32:bd:e1:a1:0d:
83:ba:a7:20:98:0f:a2:1c:7a:8c:e1:6f:fd:83:ca:
5c:21:fa:f7:2d:ff:22:5c:50:8c:25:7d:82:47:7f:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:5E:AC:CC:88:50:1D:93:66:ED:03:BF:5D:E3:FB:E6:DD:27:14
X509v3 Authority Key Identifier:
keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0e:c6:91:d6:e9:28:06:76:bd:e8:33:59:03:ca:fa:62:46:
97:67:09:86:81:ec:a6:ef:6f:25:06:9b:d9:6f:7a:fd:a6:5b:
99:eb:aa:74:67:70:e5:b9:c9:73:e6:6a:12:1e:4c:af:d5:9d:
e3:3a:0e:f8:1d:0b:89:c0:ae:67:3d:0f:39:60:ae:65:1b:08:
e7:4a:36:68:7b:e0:5e:74:56:32:a7:69:4d:0a:25:f9:2e:ca:
8d:85:e3:98:5d:ea:a6:6b:7b:ea:e8:09:57:76:28:ba:e1:71:
31:90:0e:90:b3:12:ac:6a:08:9e:ba:18:86:36:80:b8:86:a3:
ed:cd:21:25:b0:ae:9e:7a:73:6b:b2:98:72:5c:0c:09:51:e1:
c4:43:cc:7a:94:ec:00:e0:24:c9:f2:b8:a1:95:ed:6e:da:36:
92:4c:5e:12:43:82:e6:d5:27:af:cb:90:71:9b:d3:17:cf:ab:
1e:ee:ce:b1:d1:8a:84:b8:66:28:26:2a:6c:5f:93:e9:90:40:
7c:1c:97:95:5e:82:ca:a3:7e:c2:7d:c5:be:46:cc:6f:6a:28:
2c:42:1a:0c:f7:cd:b1:2a:78:ef:9b:35:aa:42:92:bd:e8:2a:
70:41:8e:70:69:7c:a0:f6:cc:5c:bc:de:99:5d:0f:bf:04:48:
34:7e:4f:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG
ODE1NkUwRTkwHhcNMjYwOTMwMjIzOTMxWhcNMjYxMDA3MjIzOTMxWjAYMRYwFAYD
VQQDEw02YWJkOGZhNC04MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1BmNK+GFIoWZsTNZyCiM3PZlyVcDlXX4vsY+7/RdLznNbbzJ7ECwcZonJsd
XzoUUO89N9BtiBuGc4fycTnNDEfH3UmkKNwN5RTlwkK++sFMaUUGq9T99CLHU+28
mHGCC8noNPvnF3dyGFca0pXMEoPPjGN3irTGSzPVrR87jar5a3Ljh1SPF1TXMiFw
RmP6Hf93KEKcJyquTDyXo3X0cuNcJPZRGR7/jHtYJYU/r/8IixB2UI9aaGZz+0N0
8EGmZgcJajOaCaQmd7p8beKcL/I4+TtXURjmy02tMr3hoQ2DuqcgmA+iHHqM4W/9
g8pcIfr3Lf8iXFCMJX2CR382bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8jXqzM
iFAdk2btA79d4/vm3ScUMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1
MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr
Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqA7GkdbpKAZ2vegzWQPK+mJGl2cJhoHspu9vJQab2W96/aZbmeuqdGdw5bnJ
c+ZqEh5Mr9Wd4zoO+B0LicCuZz0POWCuZRsI50o2aHvgXnRWMqdpTQol+S7KjYXj
mF3qpmt76ugJV3YouuFxMZAOkLMSrGoInroYhjaAuIaj7c0hJbCunnpza7KYclwM
CVHhxEPMepTsAOAkyfK4oZXtbto2kkxeEkOC5tUnr8uQcZvTF8+rHu7OsdGKhLhm
KCYqbF+T6ZBAfByXlV6CyqN+wn3FvkbMb2ooLEIaDPfNsSp475s1qkKSvegqcEGO
cGl8oPbMXLzemV0PvwRINH5PrQ==
-----END CERTIFICATE-----
Generated at Fri Oct 2 14:55:12 2026 by rpki-client