
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
File: koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft (raw, json)
Hash identifier: fIuOH2Ay9QbiFFCZuVFhH4A/puVPBfnw4C3WxF72kD8=
Subject key identifier: 8D:8C:DA:1B:FC:84:6D:C5:B6:19:9F:0D:D6:60:CC:87:2C:3A:D6:D3
Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
Manifest number: EA
Signing time: Wed 13 May 2026 06:34:13 +0000
Manifest this update: Wed 13 May 2026 06:34:12 +0000
Manifest next update: Wed 20 May 2026 06:34:12 +0000
Files and hashes: 1: koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl (hash: H4yScPl2Ukx+EvXy71GRrEDlmwL2Tx19exIGO7EuAR0=)
2: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (hash: 9Odwd+Tnh1umFLR0TM5Ak3v8LLc0vsp9acB6OkgzFHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Validity
Not Before: May 13 06:34:12 2026 GMT
Not After : May 20 06:34:12 2026 GMT
Subject: CN=6a041b65-bc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:cc:6c:8d:4f:ba:01:d1:41:6a:fc:d4:2f:
07:43:7c:94:03:4f:04:be:45:f0:d7:bf:bd:da:e9:
38:18:2d:bd:5f:f6:c0:93:24:26:6d:76:e4:26:cf:
a2:4a:54:e7:09:b6:7a:4b:4e:13:b8:ac:e5:4e:f0:
0b:24:7e:7a:8a:19:f2:ec:a3:42:9e:43:0a:bf:65:
17:07:a1:2e:f3:7d:8a:d9:ef:6a:e1:91:1b:77:5b:
ad:61:ac:70:13:21:14:81:0c:ff:7a:b5:78:66:26:
77:cc:10:0d:c4:f7:ef:1d:6b:f5:d8:c0:f7:9c:05:
22:75:f9:b0:76:49:41:4f:55:12:76:d8:fb:44:5e:
9f:0f:77:c2:24:dc:bc:07:3a:ee:ab:bb:d7:ae:31:
8d:94:fb:d3:47:1b:fa:b9:0e:6b:93:54:ae:fe:aa:
4d:af:4b:f0:8f:61:84:ff:dc:9d:ea:84:a6:f1:14:
00:3e:4d:3c:8d:f3:b5:fb:37:22:a7:4c:e0:41:6a:
28:2f:a1:77:3c:77:89:45:3a:08:a5:96:ad:b9:0f:
b8:99:2c:92:95:f0:9b:da:76:8f:cb:7c:76:c1:bc:
ef:03:d2:a6:9d:88:4c:f9:18:17:53:b5:41:ae:04:
97:49:5b:f0:52:4b:01:a6:72:30:08:a3:0b:39:20:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:DA:1B:FC:84:6D:C5:B6:19:9F:0D:D6:60:CC:87:2C:3A:D6:D3
X509v3 Authority Key Identifier:
keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:5d:3e:f2:10:90:8c:35:1c:f1:76:c5:eb:45:59:e6:0c:3a:
7a:8b:1c:1f:2f:9a:91:08:9f:6e:3a:09:f7:ba:35:f1:aa:37:
6e:4a:37:ab:ba:c4:01:e8:8e:59:91:0c:a2:b6:2c:a2:1e:f6:
49:da:f5:c7:48:b2:25:8a:4a:a9:e4:aa:bd:6f:66:3a:e8:d3:
74:a3:c3:6f:ad:12:bd:8e:c9:cc:f1:f0:12:ce:ea:7e:24:23:
e5:16:14:59:03:79:a3:e3:f0:d2:02:7d:86:53:22:37:ef:f9:
d9:24:23:4d:87:cf:dc:c9:ac:5c:ec:0c:d9:13:07:04:9e:5f:
99:24:18:80:31:5e:e6:02:3a:4c:0b:f1:88:73:77:ad:fe:67:
5f:b9:1b:dc:45:a3:90:f4:05:20:09:1b:15:4c:47:c7:34:14:
35:8b:a7:47:2d:c3:fd:6a:c5:f5:c6:50:40:78:76:dc:87:89:
0e:01:5d:87:38:13:53:b0:01:91:e5:0b:32:3b:80:67:e9:47:
3d:bd:56:d3:21:be:35:1a:80:48:68:fc:96:11:d2:3c:4c:85:
b0:49:4c:44:6a:ec:f1:cd:4d:40:19:a4:59:36:20:f4:f9:f9:
6d:13:bc:14:0f:83:30:33:39:bd:43:db:b5:50:f7:51:f0:74:
f9:9a:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:38 2026 by rpki-client