
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
File: KozvQUIwYkfgXyYUwTFpXx7uChM.mft (raw, json)
Hash identifier: c6vo6TsVxhPNi662Gn/nk/i+rh6kMEMXzIZk+5YwpAE=
Subject key identifier: 44:2E:3B:5F:11:0D:C5:FA:CB:7F:AB:6B:BD:9C:4F:6E:B9:AB:AA:36
Authority key identifier: 2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13
Certificate issuer: /CN=A9112762/serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
Manifest number: 32
Signing time: Mon 27 Jul 2026 10:57:13 +0000
Manifest this update: Mon 27 Jul 2026 10:57:13 +0000
Manifest next update: Mon 03 Aug 2026 10:57:13 +0000
Files and hashes: 1: KozvQUIwYkfgXyYUwTFpXx7uChM.crl (hash: BzVWZ+tZvApg/xZxV+NM8eDKAP+c8JQZDPFyDyOuUnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl
rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112762, serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13
Validity
Not Before: Jul 27 10:57:13 2026 GMT
Not After : Aug 3 10:57:13 2026 GMT
Subject: CN=6a673989-bdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:b9:93:14:bf:6f:06:f2:7b:39:63:78:1a:
69:78:76:3c:2c:ba:1d:b4:16:b9:17:bb:5f:c0:a1:
24:1c:d7:60:74:d0:1e:28:17:30:96:63:d0:fc:63:
9c:05:b9:1d:22:c2:f6:35:8c:94:52:3f:15:9d:cb:
fd:8c:e2:59:51:f0:50:1c:09:2c:74:fc:ec:f5:57:
a9:50:3d:a0:35:c2:62:67:64:bc:3d:84:d5:5f:6e:
af:82:8d:8b:ce:4c:7d:7a:27:ad:6d:ec:2c:e1:ca:
95:b9:f2:08:7a:6c:a3:62:c5:0c:7d:18:9e:18:ab:
be:33:0f:ac:cf:e7:08:48:78:29:da:e8:c7:6f:7d:
65:80:2e:92:04:bc:f4:21:71:ea:2e:37:ae:5d:04:
04:d1:3e:bd:e7:75:14:aa:f8:3e:42:c6:3c:a2:2f:
19:75:5a:17:e1:0a:aa:3e:d4:b9:dc:49:ef:02:fd:
11:3a:6b:e4:eb:4d:46:52:06:87:23:59:c8:73:01:
e7:67:cf:98:c0:8c:e6:fc:b0:96:7a:e9:c8:c6:d4:
e1:c0:0e:dc:e9:aa:6c:1f:4a:a1:0d:9f:c0:db:05:
17:b3:92:22:13:96:3b:31:f7:66:6e:b0:b2:15:73:
54:b7:40:46:69:71:d3:92:1a:46:50:05:15:3a:59:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2E:3B:5F:11:0D:C5:FA:CB:7F:AB:6B:BD:9C:4F:6E:B9:AB:AA:36
X509v3 Authority Key Identifier:
keyid:2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:e5:0f:32:de:80:2d:ee:ed:33:da:fd:b2:ba:52:84:8f:c6:
8f:15:60:35:f1:09:15:e0:a7:8b:51:9f:2b:51:90:a0:7e:a2:
00:a3:e4:bb:dc:f1:c7:cd:91:52:dd:8e:ef:20:bb:07:bc:88:
d8:6f:29:2b:be:10:58:a3:29:a9:91:4e:ad:92:15:89:0f:01:
cd:61:02:51:df:67:0b:93:a5:ae:80:2d:4d:a9:2b:2e:8b:ec:
30:cd:8c:6c:43:24:60:4a:a7:d4:b3:ba:32:40:0c:91:39:95:
53:6e:1c:08:24:3c:d1:2e:ba:30:6b:57:3b:fc:67:3f:be:1a:
f3:d0:d6:69:4d:f1:42:0c:bc:39:55:33:e5:97:07:78:06:45:
f0:b6:de:25:80:47:d0:80:35:92:de:f5:18:72:7f:37:78:6b:
10:ec:8b:ec:4a:9a:05:d0:95:b0:18:37:f1:d0:49:38:30:71:
c5:6f:60:36:21:42:5a:93:89:a7:dd:b0:b5:46:ff:25:9b:03:
f1:47:9d:57:59:98:cb:9e:34:1b:04:b7:20:4a:63:37:29:f3:
41:e8:ff:07:7f:77:02:b9:01:b8:e6:a5:73:f7:ce:82:06:27:
b9:c7:93:9b:23:0b:89:51:60:c1:3c:2a:86:0a:77:1f:b1:09:
2a:fa:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:13:48 2026 by rpki-client