
$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json)
Hash identifier: XlpO2W8Qc5SsBHzeGrBXEn4PKZ0am+zxqrmYwlAE6co=
Subject key identifier: 4F:A9:91:0C:EB:56:5C:F4:05:FF:34:E8:82:78:DA:77:F7:5A:49:62
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial: 0B33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
Manifest number: 0B10
Signing time: Thu 16 Apr 2026 19:15:48 +0000
Manifest this update: Thu 16 Apr 2026 19:15:48 +0000
Manifest next update: Thu 23 Apr 2026 19:15:48 +0000
Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: JIofUYSSVKvr9CwazQGvnpLuBTqxCAgaycSKM8y7xZc=)
2: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: R80zYFXAGNuiLEHBcWVsWKSrFWqFnL6T6UaG1t7i+uI=)
3: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (hash: QY+bthQF2Cfpys9yYvINeSfBdpf0jyAfuLij+QPlVvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Validity
Not Before: Apr 16 19:15:48 2026 GMT
Not After : Apr 23 19:15:48 2026 GMT
Subject: CN=69e13564-4856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:d1:86:36:5d:78:62:00:07:e3:da:55:f0:
c5:3c:58:44:14:af:b5:0b:29:49:37:53:26:22:d4:
e7:c3:f9:74:21:e2:b9:dd:91:20:1b:67:47:0f:19:
37:d4:22:27:0a:21:5c:46:1f:a3:ad:68:7d:2e:d5:
0c:e9:1c:29:7d:e1:47:95:42:3f:61:37:5b:fa:66:
0e:ad:68:6f:6b:09:e4:1b:ee:34:d3:41:fb:a1:d4:
ba:e0:4e:52:9b:8e:72:88:97:8a:eb:cd:17:30:09:
50:a3:a3:a5:e4:55:4c:88:c6:b7:c6:ff:6f:6d:38:
83:57:a1:3c:2a:64:63:50:fb:a2:c6:f0:4e:e9:e6:
6d:43:83:2d:b8:2b:43:ac:80:09:21:4a:dc:a3:4a:
bb:dd:78:8a:bd:93:0f:c9:8d:36:00:5e:1b:78:7b:
02:65:43:25:df:1d:89:5b:a9:7d:4f:68:17:db:91:
86:9f:bb:ff:c4:29:b4:f0:ce:21:fc:a2:aa:42:6c:
85:2a:fc:10:ce:db:25:69:7f:32:09:95:ff:8f:2d:
59:68:d1:af:18:74:bb:1a:17:e3:9a:29:80:43:75:
3f:08:91:f7:48:70:34:8a:f7:b1:29:bd:88:b1:50:
71:65:ba:ec:8a:dc:98:a4:d9:4e:08:94:57:3c:8f:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:91:0C:EB:56:5C:F4:05:FF:34:E8:82:78:DA:77:F7:5A:49:62
X509v3 Authority Key Identifier:
keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:a9:04:01:01:6c:e6:46:b2:d7:f4:d9:2f:c2:2e:6c:71:9c:
c7:e5:d9:95:5b:59:e2:38:46:0c:9c:45:0e:3b:b6:55:14:66:
40:ad:5d:20:f2:da:28:5e:24:47:d1:41:63:e9:7a:de:cf:1b:
a2:ca:a7:e0:45:df:78:f3:fd:18:6c:16:85:58:6d:1e:a2:0d:
c8:f0:cc:9a:09:13:c3:1f:7b:24:86:9c:71:97:78:b9:cd:bd:
63:0a:31:ff:21:be:d1:b3:30:c0:88:f5:ab:7c:19:db:6a:f3:
03:f5:c5:7b:cc:10:b5:de:84:1e:86:10:61:ab:cd:1f:57:82:
98:5b:b2:84:f3:bf:57:fc:04:90:25:bd:6f:9c:90:e2:c0:7c:
de:ed:a4:fb:30:91:eb:b0:ec:51:39:2c:d5:2c:5f:44:ee:ce:
ef:a4:74:e8:fd:02:d7:3d:9c:da:31:6e:71:1b:cd:e5:62:b9:
a6:13:2b:25:af:ba:8f:04:2e:da:8d:d1:02:ef:7b:1d:f2:54:
02:1c:6d:27:17:39:db:d8:09:80:7f:a5:df:47:34:0b:b7:29:
ba:c9:10:cc:dc:37:fa:a3:61:c0:48:38:2a:54:a1:a2:76:34:
ee:6e:f3:4b:cc:a1:72:3d:ae:b1:15:76:e9:6f:8d:60:be:fe:
56:c5:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:31 2026 by rpki-client