
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
File: CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json)
Hash identifier: iR+ubihQAZT7O9TLD9yLo1NQx3LV1VK+sK4+pg0eERY=
Subject key identifier: 24:D3:73:96:28:4F:DA:37:C7:CA:B3:A9:B2:37:53:EA:ED:01:BB:17
Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
Manifest number: E1
Signing time: Mon 01 Jun 2026 07:22:26 +0000
Manifest this update: Mon 01 Jun 2026 07:22:25 +0000
Manifest next update: Mon 08 Jun 2026 07:22:25 +0000
Files and hashes: 1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: brbS3Fuvnm+drVLKS2NBxdXJW+0GQzk3uQBw5NIooVY=)
2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: cNFpk4xvE3+xhetFVsHGb9R/5Z63kJbCCHb2RP80z/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Validity
Not Before: Jun 1 07:22:25 2026 GMT
Not After : Jun 8 07:22:25 2026 GMT
Subject: CN=6a1d3332-dfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:fd:4d:3b:d2:c2:80:dd:fe:1d:de:ad:cb:
f6:a9:e5:b4:ca:a3:b1:3b:4e:2d:c1:c0:e7:8a:0b:
7a:0a:4f:78:11:fd:7f:e2:d8:f9:eb:02:97:e0:ca:
13:42:fe:66:85:fc:23:76:76:15:ef:1b:f3:39:f1:
b8:87:db:30:35:de:ab:86:d4:c8:ae:eb:6d:35:d8:
9d:fd:1b:02:9c:d9:78:b6:75:cc:7a:0c:5b:9f:66:
f2:d8:c0:7b:56:9f:a7:00:f0:ee:71:d4:ff:4f:90:
10:c4:ec:57:2e:f7:0d:e4:53:ae:0c:02:f1:9f:7e:
c8:b6:01:e4:69:6c:52:3f:d1:03:bc:61:49:ba:3f:
cf:a7:9f:20:75:71:41:dd:55:78:4f:23:5a:ca:43:
43:c6:cd:60:f1:54:5a:a2:bf:34:45:f7:ec:ca:72:
59:74:39:27:26:e2:45:4c:16:9e:3c:0d:d9:e6:29:
a5:b8:10:ab:6e:1c:f2:c2:3e:b7:46:b9:1c:2d:e8:
ed:06:a5:a4:20:50:d5:23:d9:a6:fe:9d:c2:5b:86:
6e:22:4a:0d:33:7b:b5:9c:31:31:bc:58:2b:8f:f7:
bb:89:3e:b8:90:bd:4b:8c:64:b8:c7:90:be:a1:62:
34:d7:a8:08:71:f6:f7:37:0d:42:a9:57:9e:ba:3c:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:73:96:28:4F:DA:37:C7:CA:B3:A9:B2:37:53:EA:ED:01:BB:17
X509v3 Authority Key Identifier:
keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f7:1a:24:60:a6:4b:48:d0:d3:af:70:4b:4e:d5:fc:8d:4d:
86:e3:65:09:9d:db:86:58:c0:b4:b6:95:8d:8a:5b:db:85:2a:
47:d7:5f:ad:8f:7c:4f:f5:b5:23:86:85:59:57:e2:06:95:aa:
a8:ad:87:a1:e6:da:cd:e4:ce:de:0f:e9:83:76:dc:dc:d4:5f:
54:d4:f5:69:d8:da:32:ca:3a:84:a7:10:f3:d0:1c:f5:83:40:
8f:ff:4e:af:62:03:32:e7:45:bd:52:22:e8:41:88:1a:d0:3d:
9a:6a:8c:10:ae:95:89:24:02:53:90:46:29:14:1c:ce:54:47:
42:b6:b8:77:a3:d5:08:5b:80:67:1a:39:23:52:4a:e3:a7:8c:
7f:04:9f:04:85:67:33:86:1e:56:6f:47:6d:3b:f4:c5:a0:e3:
bc:89:0a:f4:9e:d5:ee:57:2c:8b:24:c3:a9:ff:ec:e7:b1:2b:
2d:20:f6:5e:26:ef:9a:7b:29:a2:8a:5a:d5:28:03:87:00:b9:
15:46:76:a9:c6:1e:43:ef:d4:9b:bf:16:91:60:f9:f1:17:bb:
dd:a6:04:6f:bc:53:89:e8:58:3e:08:0f:d3:d2:55:e2:75:eb:
a0:fd:8c:c1:f3:71:9d:46:a9:e7:df:1d:a2:46:a9:58:2f:23:
4e:10:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:02:24 2026 by rpki-client