
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json)
Hash identifier: 8/rxT43jpMsrJy9x3ywkLkecOZOr/ej8/e6rEpQp9bU=
Subject key identifier: 0D:42:05:6B:E7:FF:6A:68:04:E6:FE:BD:EA:FD:F3:7F:E3:F6:7C:CD
Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
Manifest number: ED
Signing time: Fri 17 Apr 2026 05:24:06 +0000
Manifest this update: Fri 17 Apr 2026 05:24:06 +0000
Manifest next update: Fri 24 Apr 2026 05:24:06 +0000
Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: P04/DxD8Djgd+VCPpS3QX2waJGXayg70buI2V9Zd7yk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Validity
Not Before: Apr 17 05:24:06 2026 GMT
Not After : Apr 24 05:24:06 2026 GMT
Subject: CN=69e1c3f6-186e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:aa:0f:c1:7a:91:3a:fa:39:24:5f:20:26:
37:89:b8:6e:9a:3f:98:a8:a0:b7:31:d7:35:cf:3b:
3a:18:fb:e1:5f:8a:2e:fb:b2:35:f2:4d:25:02:90:
61:17:8e:8b:39:52:d3:e2:c6:3c:d6:e7:2b:27:1c:
cb:85:66:8e:46:a4:1e:ee:01:4a:c4:b3:d6:26:7f:
86:65:29:8f:48:b4:24:fb:5c:c1:cf:db:96:c5:ca:
24:de:2c:83:9a:cc:6f:11:c8:62:a0:d4:b5:12:3f:
49:0a:a6:bc:5b:22:db:cd:50:e0:67:61:15:98:21:
7e:a4:48:ac:1e:02:90:00:fc:60:29:90:30:57:45:
9a:9c:03:a0:6d:11:c2:52:72:d0:83:91:6f:aa:39:
87:f4:37:36:fd:94:8b:fb:3b:b5:24:70:a2:96:f0:
e2:09:7f:8f:6b:44:bb:84:a8:9d:88:8a:1f:33:cf:
60:5f:f1:ab:9f:1f:96:df:ce:5e:55:3b:44:ad:1b:
03:1a:61:3c:2c:06:51:14:06:68:f0:6d:9b:66:5c:
41:b3:69:ab:ee:a2:71:b0:3c:6c:57:7b:9f:81:ee:
61:4b:76:86:c1:36:0e:ce:38:fa:02:d3:2a:b1:2c:
2d:67:47:76:87:24:0a:5f:90:58:69:ee:10:5d:3b:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:05:6B:E7:FF:6A:68:04:E6:FE:BD:EA:FD:F3:7F:E3:F6:7C:CD
X509v3 Authority Key Identifier:
keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ec:8d:b1:1f:cb:3e:f5:13:57:02:0d:75:17:74:0f:a8:3a:
5a:41:d2:5e:39:97:ca:f8:81:47:ca:33:6c:08:fa:8f:ae:9f:
8f:34:24:3f:a0:20:09:f6:32:51:d3:58:d4:a5:38:e0:a5:0d:
fd:c0:d3:f1:5c:3b:7a:5c:f1:0f:3a:ca:42:a1:56:50:61:b4:
a1:e5:dd:95:80:93:7c:b6:4d:2a:5f:c9:b5:9a:92:5c:e6:9e:
7c:06:22:a9:f1:0d:28:e9:07:27:7a:b5:17:9d:74:71:73:a4:
8d:5c:36:c5:a1:19:c1:35:db:6c:98:c5:a6:d0:76:85:ff:61:
97:69:bc:7c:a2:1c:c1:55:b0:c8:dd:d6:5c:01:c1:19:00:b5:
69:98:ee:d9:ce:b5:62:21:a8:82:cd:8f:d5:0d:88:83:9a:d1:
67:72:14:5b:4c:1b:a7:4d:09:1e:87:cd:8d:cf:99:06:d0:4d:
8f:1b:ed:37:77:b6:bf:65:af:12:2a:3f:cc:d9:8f:35:22:f5:
1a:64:c8:a5:e3:d3:c9:12:65:6b:77:e6:a1:34:0d:64:2e:23:
a7:0e:dc:60:12:9e:5f:1e:99:3f:30:3e:d7:39:c1:f3:fd:ce:
6e:4f:6f:4f:c6:ed:5c:77:29:8a:1a:33:3d:32:c6:1f:bd:98:
f0:5f:d6:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJFMUUxMTAvBgNVBAUTKDI4RURBN0I5NUQ1RThENDU2MkE3NTk3NEM2REQ3REE2
NEMyQTJBODYwHhcNMjYwNDE3MDUyNDA2WhcNMjYwNDI0MDUyNDA2WjAYMRYwFAYD
VQQDEw02OWUxYzNmNi0xODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzp2qD8F6kTr6OSRfICY3ibhumj+YqKC3Mdc1zzs6GPvhX4ou+7I18k0lApBh
F46LOVLT4sY81ucrJxzLhWaORqQe7gFKxLPWJn+GZSmPSLQk+1zBz9uWxcok3iyD
msxvEchioNS1Ej9JCqa8WyLbzVDgZ2EVmCF+pEisHgKQAPxgKZAwV0WanAOgbRHC
UnLQg5FvqjmH9Dc2/ZSL+zu1JHCilvDiCX+Pa0S7hKidiIofM89gX/Grnx+W385e
VTtErRsDGmE8LAZRFAZo8G2bZlxBs2mr7qJxsDxsV3ufge5hS3aGwTYOzjj6AtMq
sSwtZ0d2hyQKX5BYae4QXTtH4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1CBWvn
/2poBOb+ver983/j9nzNMB8GA1UdIwQYMBaAFCjtp7ldXo1FYqdZdMbdfaZMKiqG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS9ENDA5RjgyQUQx
NjkxMUVGQjc2RkI1MjBDNEY5QUUwMi9LTzJudVYxZWpVVmlwMWwweHQxOXBrd3FL
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0tPMm51VjFlalVWaXAxbDB4dDE5cGt3cUtvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkUxRS9ENDA5RjgyQUQxNjkxMUVGQjc2RkI1MjBDNEY5QUUwMi9LTzJudVYxZWpV
VmlwMWwweHQxOXBrd3FLb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApeyNsR/LPvUTVwINdRd0D6g6WkHSXjmXyviBR8ozbAj6j66fjzQkP6AgCfYy
UdNY1KU44KUN/cDT8Vw7elzxDzrKQqFWUGG0oeXdlYCTfLZNKl/JtZqSXOaefAYi
qfENKOkHJ3q1F510cXOkjVw2xaEZwTXbbJjFptB2hf9hl2m8fKIcwVWwyN3WXAHB
GQC1aZju2c61YiGogs2P1Q2Ig5rRZ3IUW0wbp00JHofNjc+ZBtBNjxvtN3e2v2Wv
Eio/zNmPNSL1GmTIpePTyRJla3fmoTQNZC4jpw7cYBKeXx6ZPzA+1znB8/3Obk9v
T8btXHcpihozPTLGH72Y8F/W8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:06 2026 by rpki-client