
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier: k+IW9UmfbcH/joQgZKPRD8/Ya/mqzRfm1eoKFhwcqM0=
Subject key identifier: A9:31:3D:67:D9:0A:9B:25:11:78:45:36:3F:E1:F3:D5:D5:D9:AF:A5
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number: 0266
Signing time: Wed 29 Jul 2026 03:10:08 +0000
Manifest this update: Wed 29 Jul 2026 03:10:07 +0000
Manifest next update: Wed 05 Aug 2026 03:10:07 +0000
Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: TDI6DblkffPikcWUx4iWMMqCWpPvUMXcgF6LYPc6qpY=)
2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: 72/bCWar4kI1SS9FjdRKOsQjDQzMinFfK2s3pr0xemY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Validity
Not Before: Jul 29 03:10:07 2026 GMT
Not After : Aug 5 03:10:07 2026 GMT
Subject: CN=6a696f10-ec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:31:03:a3:1e:05:bd:ed:01:32:88:12:b1:
44:62:a5:0f:7d:04:43:cf:bc:7d:02:66:18:ea:ae:
ab:9c:db:c2:31:f1:10:7d:0e:93:a5:a4:3c:1f:56:
63:02:61:47:2f:4a:f3:7d:9f:65:1c:cc:87:2b:60:
51:09:17:81:5f:be:f5:45:3e:51:72:e4:fb:2b:48:
7e:bd:f8:c7:52:8b:71:18:95:e1:18:3f:6c:1e:73:
2b:74:a6:5b:c0:a3:a4:fb:4b:cd:fa:e2:06:fd:c1:
38:39:2e:f0:22:44:97:ef:5f:2d:58:e1:8e:25:cf:
14:46:80:df:83:6c:0a:5c:eb:05:88:a7:5f:8a:d7:
40:1a:a0:9d:a6:32:ec:de:df:7b:60:c0:45:fd:36:
eb:49:cd:8f:b8:49:e4:83:e3:f1:a2:86:95:94:1f:
82:43:a4:26:72:90:21:32:b7:79:7c:66:8a:98:54:
7a:35:6d:fb:e3:09:ec:f6:77:fe:df:ee:50:d7:74:
a7:3d:7d:56:5a:d5:1d:79:b3:6e:f5:f8:26:2f:4d:
57:ba:a7:40:4a:03:76:e1:d2:ba:9f:bb:df:f1:31:
0e:f5:27:30:cd:93:56:c6:a3:0f:20:13:5e:47:da:
70:de:fc:bc:0a:88:76:df:75:33:38:fd:a5:19:e8:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:31:3D:67:D9:0A:9B:25:11:78:45:36:3F:E1:F3:D5:D5:D9:AF:A5
X509v3 Authority Key Identifier:
keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:6b:f5:cc:ac:d8:bd:1b:f3:b3:a2:0f:5a:1d:24:05:a5:7c:
91:b4:28:f4:01:22:ab:b4:86:38:c4:f4:21:a2:8f:2c:a4:e5:
8a:4e:15:09:a8:ac:33:f6:7c:44:7a:85:7d:da:7d:6c:cb:60:
bf:15:8e:6d:64:e9:26:04:1d:c6:4c:39:3d:56:f6:25:c9:fd:
20:35:28:9c:e3:95:3b:8f:a6:18:81:0f:7e:1d:a2:bf:87:87:
15:52:c3:05:a5:a9:74:ea:e1:a2:78:14:53:2a:2c:5c:4c:aa:
79:f3:02:47:f7:23:22:f6:c3:c0:ac:30:66:bb:47:40:05:70:
2a:07:25:64:85:be:f8:24:4f:66:c5:0c:1b:91:bc:c7:83:50:
45:dc:28:52:f6:83:d9:14:96:94:a2:98:fd:bb:8b:9f:14:37:
0d:47:59:6e:2c:9e:1d:2d:49:cf:dc:85:8b:ca:99:2c:2e:e8:
8e:ea:04:36:5f:f2:99:02:27:3d:6b:07:c2:6d:1c:e1:59:d4:
ae:6a:e8:ce:2c:80:e0:84:f3:ad:b6:a4:19:81:2e:fa:42:24:
b1:e2:3d:5e:23:a0:72:c1:4a:95:aa:ad:0e:2f:75:0d:30:86:
bc:7b:ee:81:43:f7:d8:02:af:91:10:b6:d9:11:97:60:1b:59:
c5:49:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:27 2026 by rpki-client