
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json)
Hash identifier: pHvdXCKQZhJjiFHQQwYSX2zE/cFz10J2koKSwKevn+8=
Subject key identifier: 3A:3B:54:C0:47:A8:F3:67:15:F0:05:6B:25:EF:94:7A:E1:3D:A8:0C
Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
Manifest number: 0105
Signing time: Fri 05 Jun 2026 05:43:37 +0000
Manifest this update: Fri 05 Jun 2026 05:43:37 +0000
Manifest next update: Fri 12 Jun 2026 05:43:37 +0000
Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: zgcrBnEubi0WHI5tfNdv0pHoMUIolLbWKFdpE4UzYZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 05:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Validity
Not Before: Jun 5 05:43:37 2026 GMT
Not After : Jun 12 05:43:37 2026 GMT
Subject: CN=6a226209-efc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:20:c6:e1:65:38:64:df:a8:8b:36:d9:51:
8f:5f:8c:e0:b1:13:34:1d:74:a6:99:47:57:b5:dd:
1c:19:ae:5b:86:57:9e:dc:73:18:1d:88:fe:4a:97:
cb:24:2a:db:e9:04:f1:8a:f0:55:f3:57:e4:5c:f4:
b6:b6:c7:94:a9:d5:ac:0f:57:b4:08:c5:00:91:38:
a2:d6:0a:8d:bb:c0:3c:cb:93:6a:67:90:48:41:e1:
a6:6b:b2:4f:3d:6a:83:af:a7:a8:e5:40:74:98:c6:
c7:44:73:68:3c:76:69:54:59:2f:23:6d:90:14:e2:
01:f5:af:d2:4e:c0:95:51:be:88:29:d8:5e:25:1c:
1a:42:9d:d7:60:e2:a0:1a:7b:d8:f3:a6:c3:b8:70:
87:5d:2c:5f:45:76:fd:9c:8f:52:78:e3:3d:14:ba:
9c:94:d3:17:6a:b2:32:32:4c:71:90:ff:4e:50:9e:
b3:00:8d:99:88:4a:74:55:2b:80:61:1d:8c:bb:ee:
f1:b5:7c:92:21:c8:36:03:db:2e:13:9e:7a:98:92:
b1:c8:af:3a:f9:2e:66:36:7a:c4:a2:d7:ba:02:b1:
37:fb:bd:a5:81:f6:4e:4e:9c:b4:e2:8b:10:82:4d:
02:c2:dc:ec:9f:a0:19:26:31:b9:91:f2:7b:73:81:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:54:C0:47:A8:F3:67:15:F0:05:6B:25:EF:94:7A:E1:3D:A8:0C
X509v3 Authority Key Identifier:
keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:d5:35:99:f3:a4:67:40:09:4a:45:d4:f5:d3:01:dc:be:
7b:bd:5e:ea:e1:a2:93:34:7a:88:59:2c:1f:08:7a:ae:56:26:
20:b8:fb:ba:17:e3:a5:4b:53:a1:92:d2:64:30:b2:f1:48:71:
83:81:31:e2:ed:a4:b9:3a:bd:8a:97:7a:65:5e:a6:2c:8a:85:
8e:3c:a4:4b:fa:a5:b2:db:8f:ec:32:8c:e6:0d:f1:76:40:c8:
37:4f:80:ba:d4:cd:a4:31:e7:8f:84:d8:6d:e7:22:ff:da:1b:
83:83:d5:9e:f8:79:b0:d8:14:cc:8c:dd:a6:4a:b7:79:e7:6d:
b6:f1:db:20:8d:be:c1:20:8f:31:70:23:61:45:44:61:e7:91:
93:4f:5e:50:b3:fe:17:1b:b6:c3:e5:7c:bc:b4:b3:ef:5e:ec:
d0:a3:0b:63:7e:4b:af:f2:22:56:ac:6b:c2:36:85:59:a6:f4:
85:05:37:c0:a4:53:a5:9c:c0:e8:90:c9:07:88:5a:d5:0b:fe:
f9:27:e8:8c:8b:ae:4e:4f:c7:ee:a9:a3:83:f2:7a:4a:0a:ed:
72:2a:39:87:7d:6d:95:e4:24:1b:f2:64:da:87:79:3d:11:16:
e5:eb:a1:cc:c6:b9:19:a2:5e:9e:6c:3b:7d:e2:2e:f2:b9:0c:
5f:e9:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:12:26 2026 by rpki-client