
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json)
Hash identifier: Ar9kShWFJmEk8NG3j1ZCZPqZknxVv9vtndNMW8UgF9I=
Subject key identifier: 55:27:FE:65:06:C3:03:4A:39:B6:A0:E2:6C:66:E1:39:1B:60:EF:A8
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial: 0B8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
Manifest number: 0B68
Signing time: Fri 02 Oct 2026 19:27:07 +0000
Manifest this update: Fri 02 Oct 2026 19:27:06 +0000
Manifest next update: Fri 09 Oct 2026 19:27:06 +0000
Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: XLd16B5rqV6/vhc+mTE0t9MX/oSrXSCgza5dzc+npD4=)
2: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (hash: cYz3Bt/NzG3jsypwU8wZb70N3q4qzO53RXOkiUxW3vQ=)
3: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: vHCnER0HBPmI45K/3yOU34zHXm+KOmRlpynpCbK+T3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Validity
Not Before: Oct 2 19:27:06 2026 GMT
Not After : Oct 9 19:27:06 2026 GMT
Subject: CN=6ac0058b-4df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:b3:96:e0:16:e4:6b:09:f2:5e:21:14:e4:
34:54:1b:6b:24:6d:1e:5e:d1:e4:f1:a7:20:25:49:
bd:4c:0c:18:d9:7a:fd:d5:aa:f3:82:a3:99:c9:41:
83:9c:81:4f:64:e8:38:e6:08:ab:5e:6e:6a:23:77:
67:96:d4:30:80:1e:45:02:b6:08:aa:37:b3:cb:5e:
66:5d:fb:aa:0d:2a:8d:a0:2e:0a:4f:cb:39:d0:da:
d0:d2:8a:ba:e5:63:d5:f3:a7:f3:3c:4c:c6:d0:31:
5f:fe:4a:76:ac:ed:89:28:bc:96:bf:24:c7:ef:cd:
50:01:6d:b3:d0:74:e4:4a:99:7e:27:b6:eb:46:6e:
70:3e:52:e3:8b:db:5d:04:e5:ce:d3:f3:09:c0:48:
a0:cb:b8:a7:3a:6c:ff:8d:97:0d:d1:cd:5c:d3:1c:
c1:d7:66:9d:3c:3f:3a:f0:39:32:42:ad:74:92:79:
95:7c:3a:a5:ac:7a:0b:80:10:44:9d:57:6c:5c:38:
63:72:cc:43:37:05:0b:ca:90:ef:67:cc:a6:7b:25:
78:e1:df:8e:26:25:ed:67:23:8c:f7:ba:c8:f8:07:
7f:b1:d9:93:c4:2e:f9:68:66:a7:78:b7:56:0d:7f:
38:13:33:b4:d1:f5:94:a1:24:f7:ae:c2:01:58:33:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:27:FE:65:06:C3:03:4A:39:B6:A0:E2:6C:66:E1:39:1B:60:EF:A8
X509v3 Authority Key Identifier:
keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:86:57:1b:4e:78:ac:c0:4a:bf:9c:15:9e:c6:8a:52:fe:49:
91:28:f5:ac:01:22:8c:76:34:80:d7:61:c8:19:88:a2:0f:8a:
85:09:8d:02:51:de:7b:74:5e:e6:01:51:ff:1a:82:f1:36:aa:
06:ed:92:52:97:45:11:17:60:15:23:5e:bd:6e:c6:d0:86:3b:
e6:b4:0c:dc:dd:bb:b4:53:c9:4e:35:b6:f3:09:4d:2e:4d:df:
8e:b5:33:2e:b9:b4:14:78:72:ee:da:eb:41:68:ee:20:d9:99:
69:38:43:cf:29:11:b8:e3:fb:c8:94:b6:0d:ec:25:85:5c:df:
5a:33:5e:34:ca:3e:16:bd:bf:da:b0:5a:ac:05:67:25:d8:e8:
5e:52:cc:fa:ce:db:6d:fe:9f:f2:27:58:91:9e:a7:4f:77:e4:
7b:d6:4d:69:e1:6b:bf:7c:d5:bd:3e:8f:53:59:61:a6:14:35:
94:1d:63:41:cc:56:67:e3:39:e2:53:50:11:5e:f9:6b:77:89:
a3:be:75:91:5a:e8:62:35:3b:56:53:4c:d2:28:b5:9a:e2:24:
82:a4:7d:c1:36:30:14:29:68:cf:ff:a6:20:f0:be:92:41:1c:
7f:b2:cd:c1:65:2a:04:41:51:1c:a4:da:7e:3f:fd:07:d5:97:
60:ee:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:36 2026 by rpki-client