
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
File: koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft (raw, json)
Hash identifier: XxGIVglPoTRwKgQa0P0xw+hNz+bJCcAyRAnyjgFnqhE=
Subject key identifier: 8A:0F:28:2F:44:B3:D9:62:0C:99:EE:B3:FC:00:83:55:53:20:2A:C6
Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
Manifest number: F5
Signing time: Fri 05 Jun 2026 06:38:23 +0000
Manifest this update: Fri 05 Jun 2026 06:38:23 +0000
Manifest next update: Fri 12 Jun 2026 06:38:23 +0000
Files and hashes: 1: koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl (hash: 3hKgm/QH0fSB44ms/QGndcmDc3i/ozfGtSyCIO12rts=)
2: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (hash: 9Odwd+Tnh1umFLR0TM5Ak3v8LLc0vsp9acB6OkgzFHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Validity
Not Before: Jun 5 06:38:23 2026 GMT
Not After : Jun 12 06:38:23 2026 GMT
Subject: CN=6a226edf-6727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:09:1f:1d:19:db:71:18:42:74:62:28:d5:
96:3f:1d:01:5e:aa:b5:1f:cb:fc:5f:c0:ce:69:20:
f8:d0:29:da:89:3b:c2:ed:24:b1:ae:87:30:ab:8f:
6c:59:f1:11:4e:30:5e:b5:f6:64:44:cb:8b:52:34:
bc:3c:27:0e:b4:0c:15:d1:76:27:08:6d:ce:f2:d2:
56:3b:61:4c:46:54:86:7d:d6:bd:39:82:c1:1e:24:
58:80:23:ff:c8:20:9c:ec:77:18:9b:0c:ae:55:09:
71:7d:c8:e8:d1:ea:da:e7:a7:4c:33:ef:76:ef:7f:
b2:7f:27:90:25:99:b8:1d:f3:67:5a:5e:03:b6:77:
2e:e8:45:39:96:11:2b:0b:5e:bb:98:00:7e:e8:01:
e0:da:eb:3f:3d:a6:80:a8:84:92:4a:ba:38:68:a3:
a0:5e:89:f1:3e:fe:2f:73:4f:1e:08:1d:31:5c:4f:
54:6c:6a:09:81:c7:49:1a:32:17:12:04:56:ad:7a:
3c:1e:15:d4:78:0f:a1:bc:fc:de:6c:86:a5:dd:31:
53:e0:5b:f2:6d:2b:91:41:37:03:60:c5:3c:aa:0e:
24:7c:80:8d:d2:99:be:b5:ae:9f:7d:d0:2f:af:69:
82:34:eb:01:1f:8c:4e:e2:3d:91:95:04:62:6e:85:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:28:2F:44:B3:D9:62:0C:99:EE:B3:FC:00:83:55:53:20:2A:C6
X509v3 Authority Key Identifier:
keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:87:83:21:cd:e2:ac:3c:28:1c:2f:ff:08:cb:8a:44:60:97:
62:1b:ed:36:73:1e:51:44:04:92:c4:84:bf:03:74:c5:a3:4e:
8a:83:a9:53:d5:ca:62:95:55:19:72:67:66:6a:8f:fb:50:c7:
28:d2:94:7b:9c:6a:c3:eb:7a:dc:c5:85:d9:51:90:ef:f0:c2:
62:96:10:1d:8a:22:28:6c:34:fc:c5:2e:b0:15:71:ed:91:d5:
79:3c:a2:06:da:48:63:12:69:5e:cc:6d:f6:d9:ab:fd:bf:a3:
95:3d:3d:ee:a0:2f:28:8d:1a:18:08:eb:8b:4b:02:b1:53:ef:
5b:49:de:c3:96:50:b7:f7:8b:e0:9a:04:f9:76:89:5b:d7:f5:
ce:10:da:4f:6e:53:2a:22:53:06:ba:5c:29:92:75:b5:17:f3:
a1:91:f1:97:2d:05:00:03:3c:ef:57:95:f2:e0:c4:d4:94:38:
40:cc:d9:e3:2d:a0:89:a3:0d:e8:5f:6d:db:cb:d9:94:25:dc:
38:e5:dd:af:95:d8:bb:da:cd:ea:e3:bb:7d:c6:54:a4:0b:4b:
3a:1f:3c:7b:83:16:05:16:71:4e:c8:1c:5c:d1:01:09:2e:5b:
88:d9:61:fd:67:68:bf:db:06:c2:56:f5:ff:ca:43:aa:17:ba:
03:e8:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:28:49 2026 by rpki-client