
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json)
Hash identifier: Oc1rzG+DHRk1PlWF84HfPGiIHzMceWNvINC60ecRq5Y=
Subject key identifier: 16:AF:95:0D:15:C1:A6:6B:4A:24:17:D7:BC:22:0C:1A:B3:C6:36:E5
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial: 0B87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
Manifest number: 0B62
Signing time: Sun 20 Sep 2026 19:09:27 +0000
Manifest this update: Sun 20 Sep 2026 19:09:27 +0000
Manifest next update: Sun 27 Sep 2026 19:09:27 +0000
Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: ABWH92CNxE/ra/1qoJA7qZPDruKG6VP/aShvWo6bLHA=)
2: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (hash: cYz3Bt/NzG3jsypwU8wZb70N3q4qzO53RXOkiUxW3vQ=)
3: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: vHCnER0HBPmI45K/3yOU34zHXm+KOmRlpynpCbK+T3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2951 (0xb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Validity
Not Before: Sep 20 19:09:27 2026 GMT
Not After : Sep 27 19:09:27 2026 GMT
Subject: CN=6ab02f67-49b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:37:4a:e7:e7:6f:c3:78:9d:2b:c8:f1:ed:
99:1f:bb:4e:41:cf:44:28:8b:27:f8:bc:5a:57:f5:
de:54:a2:91:a6:92:8d:0f:4e:be:d5:02:31:ca:cf:
54:4e:c3:1e:98:a1:cd:8e:a1:25:e9:b4:d9:c4:f6:
d3:36:14:34:84:2d:88:96:42:a2:1c:f4:0e:b3:64:
46:ab:9d:dd:da:19:a2:0b:60:a4:80:00:06:76:f3:
eb:9d:a3:4d:a7:5e:12:06:8a:7e:ee:09:88:b3:1a:
81:40:70:30:e9:b5:6d:23:1a:0b:e6:8b:43:f8:2b:
8b:6b:0a:af:43:d0:80:81:48:08:ca:67:ab:17:b8:
12:10:1c:e3:0e:d5:6e:a9:ba:34:1f:12:62:1f:bb:
bc:a9:a0:02:f3:de:01:44:3c:38:49:d3:3c:4d:66:
ef:bc:f1:19:3c:3e:d8:84:56:2a:34:aa:25:66:ab:
b5:5f:a5:8d:b1:af:5c:cf:ac:ad:5a:d1:32:e3:68:
f4:df:f2:86:d4:23:6b:bc:e6:96:db:a6:0a:43:ed:
12:9c:dc:b0:62:57:aa:01:08:53:65:ad:73:2d:eb:
27:f1:66:74:0c:59:52:c9:ad:65:a9:2a:25:38:4e:
eb:84:21:47:bc:63:a1:73:91:23:9d:25:ee:55:9a:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:95:0D:15:C1:A6:6B:4A:24:17:D7:BC:22:0C:1A:B3:C6:36:E5
X509v3 Authority Key Identifier:
keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ed:39:7f:a4:28:d4:36:d3:53:db:77:37:ee:fd:e8:76:50:
39:a8:fa:95:1d:35:a5:79:08:3d:55:75:a2:40:33:7d:b9:1f:
d7:cc:82:20:14:52:0e:55:42:ce:a4:9e:4a:8a:f6:a8:66:c9:
44:7e:ef:c6:26:0c:8d:72:04:ae:8e:25:65:4f:cf:a0:23:41:
8a:5d:4f:d2:58:ae:99:90:3c:e4:0f:20:ef:bc:15:b8:ae:e7:
c6:e6:b0:fe:32:c1:5d:02:31:1f:d4:70:07:20:36:07:40:fd:
83:96:1d:6f:59:3c:44:02:fb:52:b6:db:17:f7:d7:65:5c:4c:
f8:79:31:4e:ee:95:df:00:b9:cd:96:d4:63:03:9b:02:bc:89:
7a:c7:a6:cb:b9:e9:b0:e3:c1:34:2c:1a:c6:5b:b0:6d:f8:f2:
81:69:9e:62:6e:16:22:f5:7e:4c:c3:6f:04:9f:c6:f0:d2:74:
89:9f:8a:c3:ab:42:bd:0d:a0:19:35:ad:8e:8c:d8:a1:9a:91:
e2:b0:9b:70:e8:a8:6c:5a:d7:45:f0:d0:e5:34:38:61:6e:18:
be:20:da:80:13:ed:ec:a9:d6:ac:6b:e1:91:1c:1b:7e:01:07:
6c:41:db:6e:fe:03:17:4d:bb:ac:a7:ac:1b:bf:f0:bc:fe:55:
52:a6:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:10:29 2026 by rpki-client