
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json)
Hash identifier: 1X70cBr8CR8/RdKMOofgf2MgdQZOvnhnOKAEvNhwVHc=
Subject key identifier: AA:B8:0C:62:50:EC:03:73:9F:05:35:0A:4B:C6:EE:BF:EE:39:D1:C3
Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
Manifest number: E2
Signing time: Fri 27 Mar 2026 05:20:53 +0000
Manifest this update: Fri 27 Mar 2026 05:20:53 +0000
Manifest next update: Fri 03 Apr 2026 05:20:53 +0000
Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: TFGXURY4n/IdiasT+WbuhiyTcdclbweppTOLwDUnnOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Validity
Not Before: Mar 27 05:20:53 2026 GMT
Not After : Apr 3 05:20:53 2026 GMT
Subject: CN=69c613b5-7e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:54:db:e9:93:4a:1f:69:34:28:f8:2a:ac:
bf:24:66:1c:c5:44:4d:fa:46:2b:4e:6e:34:35:e2:
54:5c:dc:91:28:79:01:c9:b2:96:3f:f8:f6:ec:ee:
fa:3a:c7:2b:c1:e5:97:99:89:67:d3:a4:98:dd:58:
6b:28:51:1e:27:67:ab:fa:29:4d:78:1b:70:b6:bb:
27:b7:51:57:15:2a:d1:e1:fb:c0:0e:3d:0e:bc:fc:
2a:46:cc:a1:2e:2c:36:2d:4c:0f:3c:51:49:86:c5:
f0:e2:a5:a2:5c:a0:9f:55:ef:69:9b:0e:e2:a1:e5:
83:16:63:6f:d3:4e:1b:ed:d5:07:c2:03:2f:79:25:
8f:bd:3a:28:11:a6:b4:7e:02:1a:b7:a2:f9:9c:f6:
cc:89:a0:55:64:08:22:92:d6:3c:04:23:5f:e4:7c:
df:ab:45:95:a6:7b:22:a0:2e:42:94:a1:ed:48:f9:
56:89:17:bc:22:64:c0:2d:b7:c9:b0:46:c6:21:54:
84:e9:a5:52:ef:8f:70:91:58:8b:04:e2:e1:2c:a6:
ce:cd:96:92:da:67:78:a2:f4:72:36:d7:5f:7f:6e:
90:33:97:69:ec:e0:d6:e3:5b:02:fc:93:62:e0:82:
15:a1:99:a4:7c:5a:95:4d:52:e8:cd:5a:ef:79:91:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:0C:62:50:EC:03:73:9F:05:35:0A:4B:C6:EE:BF:EE:39:D1:C3
X509v3 Authority Key Identifier:
keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ed:c9:43:d6:70:4d:f5:01:ba:22:03:c0:6b:c4:28:07:55:07:
e8:d0:bc:b1:8f:80:d1:d1:a8:c5:2e:d6:47:3f:94:40:5c:68:
3c:b1:df:4c:ae:d2:68:89:e7:88:a4:7f:4a:52:a1:eb:9d:6f:
49:41:f9:f2:9e:4f:c3:bd:67:64:17:1c:71:70:1d:84:f0:7f:
1e:b8:c0:4f:d7:85:69:c4:d8:fe:c5:54:cd:db:d9:4e:d2:f2:
16:e6:56:92:97:87:17:5a:37:71:9e:2d:89:ac:be:cb:3b:29:
a7:da:be:77:93:88:3f:ff:79:b7:b6:f7:3d:ce:1a:82:af:bd:
11:ce:bd:1a:df:a4:ca:7a:69:f2:f3:42:b6:4c:56:b0:a2:b6:
94:67:06:d8:cb:81:aa:67:60:b7:7d:ea:8a:7b:d7:2f:34:8a:
1c:6f:2a:67:34:12:55:9b:bf:35:e6:14:0a:cc:8f:c7:e4:8d:
46:c4:b9:0e:44:b5:44:ec:0b:3d:97:ef:61:c3:54:87:82:1c:
9a:8a:9a:c4:52:da:ef:b8:7e:7b:81:bf:05:4f:aa:14:88:ff:
75:21:e1:e6:ed:a6:6a:31:8e:47:5c:0e:c2:43:7b:ef:d9:15:
b4:7d:44:9a:3e:d9:a1:54:80:1d:cb:9c:7c:85:2e:1a:6c:f7:
31:15:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:57 2026 by rpki-client