
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json)
Hash identifier: z1kPdB6CpyFlZylbQpCBwpeC/shwLSD5IYkU4grL92c=
Subject key identifier: F6:17:A3:72:F5:FA:4F:7E:8D:54:31:2A:A8:92:5F:8C:63:3A:B9:31
Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Certificate serial: 066D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
Manifest number: 065B
Signing time: Sun 01 Mar 2026 23:41:35 +0000
Manifest this update: Sun 01 Mar 2026 23:41:34 +0000
Manifest next update: Sun 08 Mar 2026 23:41:34 +0000
Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: C2HW9mKzZTXnQRwj69sFO9eE8RlztUoJ4Bvy28Y29GU=)
2: 590697D6465611EE8128031BC4F9AE02.roa (hash: 8NcFmfcZYrRsP7z1vxHhvTJh2ryA3DW6xQ/HYbHt6tE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Validity
Not Before: Mar 1 23:41:34 2026 GMT
Not After : Mar 8 23:41:34 2026 GMT
Subject: CN=69a4ceaf-89b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:17:75:bf:09:42:02:bc:48:3e:5f:70:c4:aa:
a1:12:61:65:7c:94:da:61:12:37:f8:a5:2e:5c:54:
f9:9e:aa:70:03:56:0d:0e:fe:47:3b:49:27:c3:db:
39:b3:b4:f2:e4:b1:76:56:65:a3:db:23:43:70:d5:
2c:b4:c1:12:83:17:11:c6:da:94:1a:96:cd:1e:09:
96:a5:02:c3:bb:72:79:37:f0:9c:8e:8c:8d:ba:a0:
22:4a:9c:61:42:66:d4:06:5b:8b:17:56:3c:ac:67:
83:af:15:d8:8f:e4:37:fa:0f:95:e8:e5:81:94:5c:
95:4a:2a:93:db:9f:50:54:1f:38:2e:c2:d8:73:e1:
c0:c7:08:4c:46:9e:0e:66:92:7d:63:75:be:46:46:
66:fc:9d:8c:32:1c:f9:ae:11:4e:31:c5:86:d8:88:
51:cc:44:45:92:00:79:98:27:76:d2:9a:a9:c4:7f:
07:7f:e1:ea:69:8e:4c:02:f9:77:f0:7d:cd:a4:32:
7f:c5:28:02:5e:e9:60:76:f2:31:0d:ad:07:ef:de:
81:76:70:f4:e6:b1:28:b9:da:fc:66:63:a4:2b:d5:
1c:4e:a3:56:e4:88:17:a9:84:05:2b:c8:9d:fb:91:
e5:06:c2:fc:0b:19:9e:fd:2c:e5:25:47:05:f8:c5:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:17:A3:72:F5:FA:4F:7E:8D:54:31:2A:A8:92:5F:8C:63:3A:B9:31
X509v3 Authority Key Identifier:
keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a8:88:69:70:c8:b9:2a:07:a2:1a:16:28:a7:a6:cf:e5:a4:
cd:4c:94:f9:2d:a7:49:c3:d2:4d:dc:0f:c9:7a:e7:8d:f2:56:
2e:69:b2:e8:98:ef:65:8c:58:e8:20:a4:d3:70:72:20:58:4d:
e2:ad:65:51:f2:06:7f:b3:c6:c8:01:80:ad:83:10:c4:b5:59:
41:09:48:71:5b:26:ef:48:be:ba:22:e8:7e:b7:49:3e:9d:6b:
88:46:87:d6:5a:b6:b8:75:1c:e0:62:61:50:f7:98:5d:5c:23:
11:a8:96:8f:ce:fe:69:4c:b7:85:a6:ea:b2:47:c7:50:5c:64:
16:93:4e:6f:f4:d0:8f:62:50:06:66:2f:2d:7b:fc:50:e9:bf:
2e:bd:ed:c3:78:4e:ce:f1:2a:7b:19:f2:57:7d:c4:5a:e5:d6:
2b:10:98:86:86:e2:be:b2:bf:40:72:30:f7:c5:fc:d8:32:ee:
00:61:25:7e:ae:25:d8:be:cd:b6:87:33:2f:02:01:5f:6e:29:
b4:3d:42:de:6f:82:27:51:35:0f:4a:a4:df:f6:c4:1e:c2:4c:
88:cc:ce:89:71:f2:33:32:70:b6:c7:52:9b:cb:bf:d7:9a:e2:
0b:45:8b:f2:ea:e9:7f:65:48:75:da:7b:fd:5a:84:8b:00:ae:
6b:7b:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:37 2026 by rpki-client