
$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json)
Hash identifier: s5lqlkCS9J5G9SADEVWRyf2T4ObL84M6+r/ttuw2plI=
Subject key identifier: 31:9A:1D:46:86:4D:30:C0:30:BB:E4:BA:06:B0:E1:EA:31:AE:51:05
Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Certificate serial: 052F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
Manifest number: 0528
Signing time: Wed 20 May 2026 23:36:59 +0000
Manifest this update: Wed 20 May 2026 23:36:59 +0000
Manifest next update: Wed 27 May 2026 23:36:59 +0000
Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: /lKIBr4E8qpqtudFmjMFcK25GAzJfKt3z1Tn3BxiwN4=)
2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: SOuuEngzMzJn6tRotSYMuHwkZUu/qid4gvYTernifnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1327 (0x52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Validity
Not Before: May 20 23:36:59 2026 GMT
Not After : May 27 23:36:59 2026 GMT
Subject: CN=6a0e459b-fe5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:2d:36:19:0f:6b:a3:b7:43:d9:eb:f3:ff:
d6:c4:39:b9:e8:8a:64:ba:ec:1a:86:ae:4b:83:6d:
88:87:e5:68:d9:da:3a:10:86:52:b4:ff:e2:8c:bd:
23:d9:b0:c1:3c:fb:0e:88:f0:02:2c:49:8e:e9:4b:
11:33:07:ba:a9:03:8a:12:a9:cc:59:b7:43:b6:59:
0d:83:15:22:d5:4d:0a:f9:b6:4e:2d:a1:5a:86:26:
06:07:ef:2c:1d:25:c1:d4:ca:30:33:21:77:df:c9:
38:a9:22:10:3d:14:ce:25:dc:11:53:fc:ec:67:cd:
d4:5a:16:d4:b2:3a:32:87:f8:4f:15:16:1f:25:2d:
ef:9d:0a:d1:54:0f:09:82:f4:29:f4:00:88:4d:43:
c2:dc:d9:15:4f:9e:d2:6a:e7:ae:2b:91:02:9c:d6:
dc:34:7e:7e:c3:4d:2a:c0:b1:24:5d:bb:ce:f6:7e:
a8:81:85:5c:b4:e0:a7:3f:55:0f:48:41:9d:51:02:
69:cb:06:5c:5a:b2:1f:55:9e:3d:e5:81:24:03:e5:
c8:e7:1c:09:c8:b3:44:6b:96:c4:7e:04:57:82:ed:
c6:68:e4:08:d8:f8:5a:24:7b:94:0e:f4:a3:a5:25:
06:b5:8e:c4:ab:b3:2f:40:d3:7a:1c:13:34:0f:7e:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:1D:46:86:4D:30:C0:30:BB:E4:BA:06:B0:E1:EA:31:AE:51:05
X509v3 Authority Key Identifier:
keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a0:1b:bc:f4:48:e0:fd:b1:48:78:d3:9c:80:c5:6e:24:39:
5b:47:02:68:68:2c:10:d7:38:dd:58:e3:ef:ce:44:d3:5b:a8:
28:ee:a3:c1:31:51:41:4d:a2:b5:d8:28:f4:86:5a:5f:4b:12:
9b:5e:12:5f:da:38:f7:13:3f:ca:fd:af:35:fd:d6:6e:40:9d:
b7:93:34:45:ef:0a:d2:a8:ff:31:7b:77:51:33:a4:7a:d2:77:
7b:d0:c0:be:f4:5a:e0:f1:55:63:d7:fa:6f:25:00:56:85:30:
37:cc:ce:e3:7c:9f:ad:df:0f:1f:a3:90:aa:44:00:b1:ff:f1:
bd:06:f4:c8:40:41:75:c0:28:7d:ce:2f:da:cb:2f:85:ce:73:
eb:0e:98:00:15:c5:8f:c4:80:a5:87:f9:05:b0:20:62:34:3e:
e1:0b:b0:9c:f0:05:c0:b0:96:6a:8f:a2:7a:bb:76:ca:4a:09:
8a:b3:14:9e:24:31:8e:43:4b:82:70:a2:a0:ef:db:a3:39:e5:
93:0e:c1:34:cd:28:28:d2:0e:98:87:9e:58:0a:06:bd:05:3e:
0f:c4:05:86:fa:c0:79:29:75:cc:67:62:3e:54:a9:78:2b:8a:
aa:6f:1b:43:e9:b3:7d:39:e9:3d:6b:eb:20:6c:d5:d9:a4:3d:
2f:57:57:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx
Qzg5QzMxRkQwHhcNMjYwNTIwMjMzNjU5WhcNMjYwNTI3MjMzNjU5WjAYMRYwFAYD
VQQDEw02YTBlNDU5Yi1mZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApUktNhkPa6O3Q9nr8//WxDm56Ipkuuwahq5Lg22Ih+Vo2do6EIZStP/ijL0j
2bDBPPsOiPACLEmO6UsRMwe6qQOKEqnMWbdDtlkNgxUi1U0K+bZOLaFahiYGB+8s
HSXB1MowMyF338k4qSIQPRTOJdwRU/zsZ83UWhbUsjoyh/hPFRYfJS3vnQrRVA8J
gvQp9ACITUPC3NkVT57SaueuK5ECnNbcNH5+w00qwLEkXbvO9n6ogYVctOCnP1UP
SEGdUQJpywZcWrIfVZ495YEkA+XI5xwJyLNEa5bEfgRXgu3GaOQI2PhaJHuUDvSj
pSUGtY7Eq7MvQNN6HBM0D36IgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGaHUaG
TTDAMLvkugaw4eoxrlEFMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4
MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW
aW15cXR3ZTNsVlVjaWNNZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc6AbvPRI4P2xSHjTnIDFbiQ5W0cCaGgsENc43Vjj785E01uoKO6jwTFRQU2i
tdgo9IZaX0sSm14SX9o49xM/yv2vNf3WbkCdt5M0Re8K0qj/MXt3UTOketJ3e9DA
vvRa4PFVY9f6byUAVoUwN8zO43yfrd8PH6OQqkQAsf/xvQb0yEBBdcAofc4v2ssv
hc5z6w6YABXFj8SApYf5BbAgYjQ+4QuwnPAFwLCWao+iert2ykoJirMUniQxjkNL
gnCioO/boznlkw7BNM0oKNIOmIeeWAoGvQU+D8QFhvrAeSl1zGdiPlSpeCuKqm8b
Q+mzfTnpPWvrIGzV2aQ9L1dXAA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:52 2026 by rpki-client