
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
File: koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft (raw, json)
Hash identifier: 9Eos5dhGCGauChoXA83d71xuNmT4qAgvDR4l7Wrb7N4=
Subject key identifier: 40:78:3D:22:55:BB:B6:85:1C:FA:DD:4C:0D:AB:A7:AE:F0:3C:10:DC
Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
Manifest number: C4
Signing time: Sun 01 Mar 2026 08:07:06 +0000
Manifest this update: Sun 01 Mar 2026 08:07:05 +0000
Manifest next update: Sun 08 Mar 2026 08:07:05 +0000
Files and hashes: 1: koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl (hash: 9LtH4MnBZ04fWiXN61pYU9UeXc4rBuHX5JQ7pkarfcY=)
2: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (hash: guOkrCtWFoq8Lg0AXDAskb6dB7b68BfvYrXJ0gD0vek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Validity
Not Before: Mar 1 08:07:05 2026 GMT
Not After : Mar 8 08:07:05 2026 GMT
Subject: CN=69a3f3aa-5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:36:29:77:5e:b7:eb:3c:d2:b7:4f:e4:d0:
f1:50:9a:b6:0f:d0:35:1b:92:75:1b:63:7c:93:a8:
bf:54:5f:98:1e:17:80:fa:0d:b3:5f:03:8c:31:13:
5a:91:93:45:26:0d:36:d7:4d:07:cd:09:34:f7:e1:
85:a4:73:fb:c4:a0:60:13:f3:7b:35:eb:19:41:6d:
77:7e:eb:83:2f:b2:c9:32:4e:c1:78:bf:75:1b:24:
1b:e8:67:ae:86:f1:e9:18:81:30:9f:9a:36:82:d5:
f5:74:08:36:ba:37:06:2d:9d:ce:de:80:8f:6f:38:
e0:31:1b:b4:50:34:7d:7b:2f:a4:84:25:7d:eb:91:
aa:d9:48:32:c9:66:e1:9d:db:44:a5:bc:e1:1a:bb:
58:f4:2d:f3:99:27:cd:8c:c6:69:2a:fb:7b:cb:54:
c7:89:72:23:4e:43:d5:86:5f:76:65:ae:02:5f:d2:
83:09:ae:bc:e8:b8:fd:6f:b9:f8:3d:68:99:b2:e9:
8c:10:8f:8f:f7:f7:3a:25:18:a4:a5:e4:bb:11:05:
a3:d4:79:2d:3b:0a:76:15:a5:09:2c:81:f2:3d:0e:
99:ff:5a:38:2e:05:99:84:97:7f:7d:b5:ba:55:6e:
be:ba:c8:09:ba:a6:c2:71:05:6f:a7:19:8b:15:5c:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:3D:22:55:BB:B6:85:1C:FA:DD:4C:0D:AB:A7:AE:F0:3C:10:DC
X509v3 Authority Key Identifier:
keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:e9:19:9c:c0:58:78:07:86:85:79:b8:04:68:08:f7:07:68:
19:07:58:c5:8b:5b:5f:ef:c2:09:df:00:d6:a5:1f:aa:bd:5b:
e2:10:59:78:2c:23:31:ef:0f:f5:52:9a:9d:76:ce:a2:ac:b5:
59:de:c3:cd:37:40:e8:ae:e6:cc:44:5c:85:43:18:2f:4b:82:
b9:95:9a:27:67:e7:80:6f:7d:d1:8b:df:7d:3c:f3:40:0e:0d:
07:fd:a5:22:e7:3f:e0:b1:4e:71:21:67:2a:d0:b2:05:29:14:
5f:23:b9:b8:8a:1e:34:8f:b4:ee:94:07:9c:31:0c:03:83:ce:
35:b7:47:a3:a6:d3:43:61:30:98:9a:44:85:3b:35:43:85:11:
f8:ed:c8:17:cb:0c:e6:df:ec:d1:dd:50:6d:86:f1:60:68:67:
74:3d:44:48:c0:c9:50:46:14:a4:8e:03:ca:1a:ec:34:28:bd:
00:e9:2c:40:e0:dc:65:da:46:92:f7:27:28:72:b1:ef:32:04:
06:0f:7a:16:50:8c:4c:5f:98:a5:8c:f5:39:ec:dc:66:07:ab:
2d:96:8a:ef:7f:69:7c:9b:41:fb:4a:25:36:67:93:cc:a3:93:
4f:a6:01:64:72:25:57:d4:80:1c:0c:a1:ce:24:c0:b0:fe:3c:
1e:bb:20:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:29 2026 by rpki-client