
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
File: Ok9ILhJcCNuDBRbVGkot8eCqiso.mft (raw, json)
Hash identifier: 8Znnxpe8ngAENk5NIaV7ly+sxLQtbwbmXUjPif+qdvc=
Subject key identifier: AE:B4:CD:4A:84:91:21:61:50:0F:2F:AE:A9:75:F1:52:96:43:D9:52
Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA
Certificate issuer: /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
Certificate serial: 0B1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
Manifest number: 0B12
Signing time: Fri 12 Jun 2026 19:21:04 +0000
Manifest this update: Fri 12 Jun 2026 19:21:03 +0000
Manifest next update: Fri 19 Jun 2026 19:21:03 +0000
Files and hashes: 1: Ok9ILhJcCNuDBRbVGkot8eCqiso.crl (hash: TrPvsWFLANyxSGmQHHfKKbHJaTZy/pkFZZZGOQtwYts=)
2: F25A6266796A11EB82E0EE24C4F9AE02.roa (hash: gg5YRxm/OG8ParGdDVWKapchKMYooC3n6Om94oqfGGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl
rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2842 (0xb1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C158, serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
Validity
Not Before: Jun 12 19:21:03 2026 GMT
Not After : Jun 19 19:21:03 2026 GMT
Subject: CN=6a2c5c20-3764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:ba:be:27:1c:6a:9f:ec:e0:3c:ad:e2:62:
3a:1c:69:1f:b6:6a:bd:36:85:f0:fe:87:03:cf:c8:
9f:82:f6:f9:32:9d:2b:a0:33:12:80:fc:c7:71:90:
e6:2a:66:a7:da:c9:08:69:29:2e:6e:ee:9f:b2:5c:
d4:07:ef:60:79:ab:1e:b9:34:20:37:be:04:a7:45:
95:3f:0b:4c:2d:db:f3:12:30:ee:8d:5a:3d:5b:5d:
95:80:b7:93:61:1c:cf:87:ff:a7:eb:25:f3:f9:2a:
9b:3c:7f:aa:46:45:7f:24:38:a5:ce:c0:b5:c6:83:
05:59:c7:df:64:b8:30:44:d0:6a:15:41:1e:ed:e3:
5a:3d:4a:9d:a3:cd:d0:cd:bb:57:eb:86:b8:1c:7e:
eb:f7:4d:e9:25:b3:77:0a:04:54:aa:b3:22:10:f5:
29:45:24:ac:27:a4:bf:bd:1b:8f:25:77:9d:cd:78:
7f:d9:54:35:08:6e:d1:8e:29:0c:30:b6:4e:51:fd:
fd:74:f8:a5:01:75:76:8c:cb:a6:38:42:96:43:72:
a1:85:f7:9b:f2:bb:d7:19:fa:24:b8:55:9d:71:5e:
69:fd:22:c2:3c:31:5f:e9:b9:f4:6e:29:7f:d4:46:
11:d1:b3:f3:db:93:88:84:04:ab:29:53:7d:88:e6:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B4:CD:4A:84:91:21:61:50:0F:2F:AE:A9:75:F1:52:96:43:D9:52
X509v3 Authority Key Identifier:
keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e3:9c:5c:a3:5e:f2:f8:3c:17:7f:86:ad:71:dc:3e:c5:13:
81:7c:13:02:78:f4:49:29:55:26:d2:aa:58:0a:b6:1e:d1:0a:
5f:92:c5:5e:a8:fd:14:6a:5b:3e:30:02:2d:f1:cc:90:68:47:
0d:fd:87:1d:28:ee:69:ab:ee:0a:41:d2:53:46:61:e1:e7:3b:
89:c7:88:7f:7f:3b:93:81:b1:b0:8a:a7:08:19:73:df:0b:26:
a4:d5:78:10:9d:cf:89:5d:3b:25:28:5a:d4:af:41:36:48:01:
45:d5:54:90:e6:24:82:f0:b2:0a:55:e5:b3:9a:5d:04:da:40:
59:47:e3:ec:fc:68:14:02:71:f5:22:84:52:91:15:28:3f:72:
66:79:78:5e:e5:0f:94:62:ed:13:ab:dc:7e:56:5f:42:32:cd:
57:e7:7e:86:57:3c:53:26:18:2c:c2:a2:6a:65:bc:4e:a3:39:
16:61:f0:6b:bc:ff:8f:24:61:73:09:30:c0:78:f1:eb:c1:33:
53:a2:b5:79:b4:20:cf:d9:b4:94:78:9c:ce:76:26:ce:a5:b2:
b5:19:ce:aa:fe:bc:bd:c7:c5:22:64:a2:d9:b9:6e:1e:4a:0e:
46:69:91:1c:ee:18:9d:aa:de:45:c2:7c:c5:12:75:d5:67:aa:
87:e1:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:42:55 2026 by rpki-client