
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json)
Hash identifier: /vPSa951eSevbF5mf4EpjN8w+CqiRsPLp5B3ohxHUvo=
Subject key identifier: CF:E4:B9:6F:8E:85:16:59:4F:98:44:BA:4A:51:FF:5B:7A:0E:D2:6F
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial: 0530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
Manifest number: 0529
Signing time: Fri 12 Jun 2026 23:34:38 +0000
Manifest this update: Fri 12 Jun 2026 23:34:38 +0000
Manifest next update: Fri 19 Jun 2026 23:34:38 +0000
Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: FoVuC0qmi/4lZa95q2vhbfei3f3CcW1Tg92usexn8Rk=)
2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: ecqh96rlJZPd66W+GRhUvcvW/439i3jELOA0IH7jsks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Validity
Not Before: Jun 12 23:34:38 2026 GMT
Not After : Jun 19 23:34:38 2026 GMT
Subject: CN=6a2c978e-dda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:bc:72:ac:ca:22:35:1c:6f:1e:a8:4c:fa:
02:c0:67:90:87:03:e8:48:ab:df:34:79:33:21:5b:
9c:48:e0:70:d5:e2:37:5c:37:71:db:db:f4:fb:83:
66:b3:ea:45:d0:3e:eb:36:2f:ff:a6:6b:df:e9:69:
86:85:c3:de:96:66:6e:b8:ca:30:1d:0d:86:ae:80:
72:10:af:40:71:1f:5f:97:80:43:6b:2c:3b:5b:70:
2e:62:b0:b9:62:b2:b7:56:95:54:7e:c8:3f:45:22:
c5:9d:6d:ec:58:65:1a:3a:08:17:82:ac:46:86:9a:
3d:0e:fc:ec:39:1a:50:ae:36:fe:59:f9:a6:79:be:
56:62:77:51:fc:91:47:3a:f8:4d:64:e3:de:1d:ce:
bb:14:ef:0a:52:ae:49:6f:94:3e:e0:87:40:a2:34:
25:80:ba:83:c6:9a:2d:9e:d4:b6:94:ca:3a:f8:22:
87:29:34:6b:83:27:64:d1:86:82:9f:da:5c:95:2e:
10:09:71:eb:fb:ca:53:c2:10:e8:d3:05:ee:da:1b:
ef:d5:fe:21:29:f6:99:8d:8f:da:e6:b3:d0:ba:a1:
40:0e:0f:fa:86:fc:14:d1:3a:36:d8:07:c9:ec:40:
43:50:98:68:82:33:82:26:36:0e:dc:61:91:7d:19:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:B9:6F:8E:85:16:59:4F:98:44:BA:4A:51:FF:5B:7A:0E:D2:6F
X509v3 Authority Key Identifier:
keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:f3:bd:b1:99:9d:84:88:df:a4:ea:ff:9e:0a:f5:da:15:a0:
50:de:61:0b:3b:30:97:c2:cd:73:01:91:de:1d:8b:53:c1:71:
32:b9:14:42:1c:97:aa:7c:b7:f3:51:05:01:9d:f6:2c:6c:12:
1a:6d:fb:cf:96:0d:f9:56:16:ef:65:8d:09:8c:b9:7a:af:c0:
4a:a5:00:ce:89:e4:d5:d8:fa:19:6e:00:f3:d5:0d:0a:31:69:
8a:f3:47:e7:76:c2:8d:c7:5b:84:75:47:71:04:1f:bf:06:86:
c3:a6:a7:1e:7a:fb:6b:39:b5:55:89:10:bd:f2:81:29:30:e6:
f8:0b:59:e1:df:53:dc:59:e3:53:2a:6c:4c:4f:e1:a6:dd:38:
f3:09:e6:e0:c8:ff:a3:47:6f:0c:44:98:91:cb:7f:94:03:31:
16:65:df:54:bb:dd:e1:cf:f0:50:78:fb:3d:2c:3c:3e:93:fd:
78:49:9b:2a:c2:96:1c:e5:f6:9f:47:ec:e7:fa:d7:5e:d3:60:
29:02:e7:16:ad:c4:b9:70:0b:63:28:61:da:f9:8d:08:b6:8e:
c3:1e:f2:60:54:ce:ac:34:ba:cb:0e:11:99:3b:66:ae:a1:29:
69:1c:ab:08:53:e4:ac:c7:ff:cf:66:66:89:e1:3b:4b:b9:99:
7b:70:e4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:45 2026 by rpki-client