
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier: KNCLBZqzb1KsFBnnToywaKfzVWkM0IncRxM8Q2ALQW4=
Subject key identifier: 0C:67:5A:1C:36:34:91:7E:A7:26:ED:BE:6C:3F:67:4C:DB:16:DF:BF
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number: 028D
Signing time: Fri 09 Oct 2026 02:16:50 +0000
Manifest this update: Fri 09 Oct 2026 02:16:50 +0000
Manifest next update: Fri 16 Oct 2026 02:16:50 +0000
Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: F8Tx+GIhVqjiO+snH8S15RU+g88yBs2aed/goP2er6g=)
2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: 2mQOZhorMosfPHcn+LmzBqbrRN1zMlGU1bgw29KMwX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Validity
Not Before: Oct 9 02:16:50 2026 GMT
Not After : Oct 16 02:16:50 2026 GMT
Subject: CN=6ac84e92-8454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:de:43:38:2a:72:2e:8d:8b:7a:1c:1d:25:
8b:80:0b:fd:20:73:6d:6f:5a:49:1a:40:4f:e5:0b:
99:1b:bb:80:46:8e:da:e7:64:2c:34:5a:d9:07:1a:
cc:d2:02:1d:c9:59:ae:09:7e:4a:9e:fd:a4:8f:fb:
77:1b:ab:d3:c4:99:e7:6a:ed:34:54:04:c5:0e:85:
d4:67:a9:c2:28:d3:57:e8:38:98:9c:db:2a:25:fd:
48:17:3a:5b:f5:d0:e4:21:2a:17:df:a9:62:79:ec:
9c:8f:61:40:1a:aa:21:6e:a2:52:2f:38:40:c1:3a:
51:0c:8e:a7:47:ed:7f:28:dd:ef:2e:e5:71:d3:fb:
14:b0:40:76:90:f5:29:dc:bb:59:3e:7f:cc:be:b1:
79:04:ad:1e:70:90:b2:cb:bb:a9:75:9a:8b:a8:5f:
76:91:02:f8:7e:b2:9b:75:48:81:c5:b4:86:a8:69:
a4:7d:be:18:2b:96:c0:02:0b:ed:11:ee:e5:b3:87:
38:31:bb:b2:1f:fb:57:ce:fe:25:eb:18:9a:1a:63:
2a:7a:a7:84:f9:e1:7e:70:11:0d:13:d5:5a:76:21:
5e:b2:c2:92:67:13:18:cd:f0:d5:56:72:da:6f:a0:
62:b0:49:23:8d:24:9b:31:e6:d4:bd:25:e8:a6:9c:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:67:5A:1C:36:34:91:7E:A7:26:ED:BE:6C:3F:67:4C:DB:16:DF:BF
X509v3 Authority Key Identifier:
keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a5:d2:99:9d:54:9d:a4:40:f3:02:ab:6d:05:f4:8c:f7:02:
ee:f0:0d:76:2e:db:7f:bc:47:63:55:f3:45:b5:d1:fe:43:08:
3d:b3:5a:55:5e:b3:96:8d:97:4e:3a:fa:e1:59:5c:e0:3b:fb:
6e:70:7d:e3:38:0e:88:eb:ec:b9:d4:35:78:d0:32:05:3a:23:
85:16:49:28:58:1d:cf:f2:41:c2:8c:49:fa:87:6a:6d:20:37:
c2:57:31:9f:78:1f:3e:04:75:c0:71:13:88:cc:16:cc:c1:62:
ce:2b:22:08:6d:85:2f:01:98:48:e0:0d:7b:ea:49:d4:d0:68:
fc:aa:a8:31:37:9c:72:d5:37:2d:72:b5:d9:9d:54:d1:18:7d:
58:57:b0:1e:49:f2:1f:ac:3f:fa:00:72:da:e0:dd:d2:1d:35:
ba:98:d7:53:24:5d:28:ac:2f:c1:61:2c:8f:dc:03:fe:12:de:
22:be:1c:08:ae:77:d2:fd:c2:b0:c4:83:f3:38:e7:a6:f3:d1:
bc:76:72:53:ec:41:5c:b3:d4:ed:a3:a2:e6:2e:aa:f7:c0:91:
f3:cf:e8:e8:65:a3:e3:2e:3d:89:8b:94:7c:4a:33:06:33:b6:
fa:c5:e2:83:8b:82:38:63:3d:b4:12:e4:b3:94:d2:b4:2e:20:
53:5e:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:09:38 2026 by rpki-client