
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json)
Hash identifier: fh4PVR4p13FTAcGiAnkKlR3Bino245S6wqRkDbII/4s=
Subject key identifier: F6:63:05:CE:07:36:60:1C:05:9B:B6:F6:47:DC:FF:80:3E:94:48:CD
Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
Manifest number: 013E
Signing time: Fri 25 Sep 2026 04:49:32 +0000
Manifest this update: Fri 25 Sep 2026 04:49:31 +0000
Manifest next update: Fri 02 Oct 2026 04:49:31 +0000
Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: 1jYRHcSX4vN2LdfZw44jTkyglZ467qGrzXMH8d9QARc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Validity
Not Before: Sep 25 04:49:31 2026 GMT
Not After : Oct 2 04:49:31 2026 GMT
Subject: CN=6ab5fd5c-7769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:d4:d2:1a:8d:07:24:6c:4e:cd:e1:ad:25:
26:ac:51:3c:03:b4:1c:e4:df:66:d0:e6:1c:27:47:
80:7e:09:5e:d6:40:0c:1f:ab:b2:dd:1d:10:50:65:
a9:cf:b5:21:49:e6:46:de:ca:06:7c:2b:e0:8d:47:
85:80:ba:ad:9e:b3:5d:7f:24:0e:16:08:25:29:8a:
20:56:0e:b4:8e:ac:94:a8:53:cc:64:3b:f5:62:0e:
66:40:a4:f9:a2:3c:27:c4:d5:8f:b8:ca:b9:53:4b:
4a:09:7e:60:ce:da:24:0f:50:b5:5c:44:99:bb:c1:
f8:3f:82:32:9c:ae:fd:7b:49:1b:27:3e:68:4a:fe:
bb:d9:10:7c:90:28:d5:dd:fa:fc:a2:52:ac:b3:58:
85:69:4f:6d:00:64:8f:72:91:dc:0d:14:53:9b:96:
9f:e2:03:3c:2f:ce:a3:1d:f9:ac:d4:25:b5:0b:24:
5e:b3:54:48:1e:8b:2d:ec:4b:3b:30:1e:5d:8e:dc:
02:64:fc:9f:4f:06:f9:47:24:63:5a:e0:4c:d0:11:
67:09:3a:77:ff:f5:a1:d1:ff:1f:07:3e:a6:6c:96:
d2:b0:12:e5:36:00:85:93:32:8a:d0:16:e8:58:49:
66:81:44:a3:2f:b9:9a:f4:d2:f9:46:33:91:ae:ee:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:63:05:CE:07:36:60:1C:05:9B:B6:F6:47:DC:FF:80:3E:94:48:CD
X509v3 Authority Key Identifier:
keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:fa:dd:a1:28:f6:ec:8b:c0:71:0b:55:f2:f0:b8:69:b4:
fe:90:37:f5:96:81:43:6a:18:52:87:ec:56:cc:33:2b:48:ea:
31:44:27:26:2d:16:b8:c9:db:fe:43:10:31:b1:0f:eb:b2:19:
e6:e9:ff:6a:34:1e:d7:60:71:99:a5:4e:73:54:05:5e:39:11:
54:53:cb:d9:59:28:17:a1:1f:29:89:ef:ae:83:68:56:39:d6:
a0:8f:ac:5e:8e:b7:ed:ae:c5:d8:8c:5d:79:b1:21:5d:a6:f4:
52:70:ce:61:b0:7a:78:16:43:f5:e3:be:54:8c:5b:87:91:25:
a2:f7:03:46:35:38:11:77:72:c8:68:a3:d6:f5:8a:50:ec:1e:
43:4d:6c:3f:67:e4:e0:ba:f0:9f:bb:93:c7:b6:dc:43:e1:b9:
35:75:71:49:dd:52:d5:2d:2d:07:29:b0:af:bc:7c:35:52:81:
94:d8:e7:98:87:5c:12:62:3f:41:26:4a:d9:7a:0d:1e:b1:b9:
0c:a9:52:e2:9b:d8:91:7f:48:d7:3c:b1:ea:0d:87:e8:35:53:
b9:b4:20:55:73:32:4f:bc:b4:74:83:0c:2b:16:0e:7a:24:e5:
ef:70:86:cf:29:19:52:ec:91:f7:89:29:24:6e:33:04:7b:53:
49:d1:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:45:22 2026 by rpki-client