
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft
File: 0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft (raw, json)
Hash identifier: S4E2xplrRevsUo/AGeKMCl7Yg58hKYCZjcVCbNZS+1Y=
Subject key identifier: 10:81:E4:CF:D0:6F:37:DA:10:93:D8:17:8B:2F:84:95:6B:34:ED:BD
Authority key identifier: D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01
Certificate issuer: /CN=A9181292/serialNumber=D248E5B7859738417219C739320BDAFB83B50501
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft
Manifest number: 0E
Signing time: Wed 19 Aug 2026 09:51:54 +0000
Manifest this update: Wed 19 Aug 2026 09:51:53 +0000
Manifest next update: Wed 26 Aug 2026 09:51:53 +0000
Files and hashes: 1: 0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl (hash: 4dcOS9+GOIbqNOgnjibfgxdPVdrb7NsONO8J+XTMI04=)
2: C735270A8B4911F197B84AD94811F970.roa (hash: +LKnrorxjBkm1K+JOzimfHxI4AeC1+1bODCZ0IR/L8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl
rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181292, serialNumber=D248E5B7859738417219C739320BDAFB83B50501
Validity
Not Before: Aug 19 09:51:53 2026 GMT
Not After : Aug 26 09:51:53 2026 GMT
Subject: CN=6a857cb9-9ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:6d:f5:87:3f:1d:76:ce:38:b2:21:e0:e1:83:
86:8a:40:6a:2d:cc:f5:ea:f8:2f:b0:74:a3:52:6d:
68:cf:c7:fe:18:ac:80:ed:3a:14:90:46:1c:7e:35:
a1:db:68:6c:51:94:f8:67:88:f7:03:9f:6c:7e:e1:
cf:86:51:f3:43:fc:04:b8:a3:0a:b9:99:d7:b4:d0:
18:98:5f:f5:fc:be:cb:50:01:3d:f1:a4:ae:c3:e3:
e7:87:ec:b7:10:92:46:6a:7a:78:f2:be:fa:80:9f:
11:cd:57:3f:6d:50:9d:c0:05:5b:8c:e4:d1:c6:0a:
9a:c0:04:23:c3:4a:eb:79:f8:f6:eb:ab:e2:6d:f3:
8a:38:6b:13:e8:cf:b2:56:fb:1c:00:62:12:8d:9a:
36:8d:c3:e8:53:9a:b8:f9:90:1c:b0:1d:0b:26:15:
33:40:85:64:ea:b4:00:61:6c:50:5c:db:91:e2:99:
af:b3:c7:12:ae:ef:52:b8:f7:36:1c:5e:17:9a:1d:
b4:6a:8d:b2:55:ec:39:90:9b:1f:17:c8:05:84:93:
57:1b:66:11:08:b0:0c:91:a6:d8:04:2b:0b:a5:cc:
de:c2:bb:95:0d:41:d5:bb:67:3a:ed:14:82:a2:60:
9a:c3:76:9b:53:6c:16:1f:d4:47:f7:c2:73:8b:e5:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:E4:CF:D0:6F:37:DA:10:93:D8:17:8B:2F:84:95:6B:34:ED:BD
X509v3 Authority Key Identifier:
keyid:D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:96:47:7a:68:a0:51:7a:e7:7a:5c:54:5f:f8:7a:b1:d5:c4:
3d:27:2a:eb:cc:8d:6c:1b:aa:fd:5d:90:ff:f5:66:ac:d0:ca:
e2:7b:ad:aa:c9:40:5b:14:b1:78:b7:b7:33:1d:89:10:a3:3f:
88:0f:63:23:4d:60:af:ec:2b:92:96:79:e3:89:7e:8d:4c:84:
04:82:c5:98:d8:29:3c:61:3c:ff:26:c5:79:1c:83:78:d5:a9:
34:8b:db:07:25:3e:dc:02:74:ba:8c:22:bf:e6:3c:fc:16:e7:
37:9e:d4:70:0d:1f:22:19:54:a3:b6:74:b0:c1:d5:99:fe:72:
46:c8:7c:cb:98:7e:e7:7c:54:cc:b7:8a:61:ef:0b:66:d2:7f:
d8:e6:d6:0a:c6:51:73:ae:31:ae:22:1e:b2:d8:e8:c9:f1:cb:
99:42:e1:63:ea:ea:2a:be:4b:5f:d8:68:40:1f:2f:e8:26:7e:
2b:bb:26:08:1a:ad:8e:88:ff:f0:ac:db:d8:6c:5c:1a:1c:a5:
18:b4:52:4c:8b:1c:6b:64:99:82:5e:a6:37:88:a8:4c:f1:e9:
38:22:0f:02:0a:52:bf:d3:44:21:31:15:bc:b6:93:5a:46:08:
33:27:fd:e8:2a:b8:2a:bd:2e:94:7b:42:0e:9d:89:3b:cd:9d:
b4:5a:d5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:39 2026 by rpki-client