
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json)
Hash identifier: r2eDpuv4neo6lcYLjhRQ3Esk5y+OnTNQF7rooakhm9k=
Subject key identifier: E8:B6:07:01:F9:FA:3B:B4:D3:71:65:A9:CD:F8:CD:02:E3:1E:51:7A
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial: 052A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
Manifest number: 0523
Signing time: Mon 01 Jun 2026 00:13:19 +0000
Manifest this update: Mon 01 Jun 2026 00:13:19 +0000
Manifest next update: Mon 08 Jun 2026 00:13:19 +0000
Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: 5lFA/SvEOGDUkDPsDRmv7W2r+XIet3hIDtP1vgWcTcw=)
2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: ecqh96rlJZPd66W+GRhUvcvW/439i3jELOA0IH7jsks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 00:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Validity
Not Before: Jun 1 00:13:19 2026 GMT
Not After : Jun 8 00:13:19 2026 GMT
Subject: CN=6a1cce9f-8036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:cb:d5:c8:d7:28:35:73:4d:30:3b:28:d8:
43:21:f8:01:51:80:f8:63:f5:3c:10:e4:8b:bd:e5:
b9:26:7e:a1:39:bf:d3:80:df:ad:37:8b:84:b9:b9:
6c:82:75:9a:77:e3:37:c0:d5:2d:80:3e:5f:55:e6:
94:d2:5d:57:af:aa:da:f8:02:d6:51:b5:4f:5a:14:
e6:95:5e:c1:d3:5b:3c:13:a4:3f:5b:85:5e:a0:ac:
b5:54:ff:f9:b1:2d:52:e7:ee:0e:37:65:ad:fc:b1:
38:ac:88:3f:5b:78:9f:f9:af:4c:8b:4f:b4:cf:8f:
77:77:9f:a7:0a:a1:de:cc:10:b6:55:8f:a2:a6:cf:
6c:78:6f:74:8b:b6:be:21:9f:8d:c4:44:4c:94:28:
31:d4:ad:3b:38:3c:a0:4c:ff:35:0d:03:77:07:26:
d1:13:39:98:ca:f4:59:b2:df:85:0e:40:bb:16:7d:
07:7e:d5:23:e2:da:4b:5a:41:e5:1b:e8:2e:82:b6:
3a:08:e1:b4:ef:6c:c8:e0:a0:dd:62:89:69:f8:88:
c0:5a:22:03:16:33:ce:1e:07:e1:4d:2d:41:9e:78:
46:20:d8:df:b2:24:84:7a:fd:94:74:08:e1:92:dd:
2c:60:b1:54:b1:4a:e1:ec:e6:2e:fb:81:03:94:76:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B6:07:01:F9:FA:3B:B4:D3:71:65:A9:CD:F8:CD:02:E3:1E:51:7A
X509v3 Authority Key Identifier:
keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:aa:82:f7:59:00:52:b2:63:4d:a8:e4:14:6a:a6:02:a5:06:
aa:18:3c:a0:2b:15:f0:da:9c:3f:f6:3b:11:cc:f8:c6:94:48:
7f:45:93:25:9f:01:d7:89:fd:76:87:7f:e3:e2:41:c2:ae:47:
e7:cd:d0:86:1d:99:10:3d:f2:c1:b0:3f:e0:43:3e:9e:44:dc:
e9:b1:f5:72:d2:89:c5:5d:22:cd:42:0d:52:ac:c7:10:31:81:
3a:7f:40:5e:5e:9f:77:26:a5:c3:71:ff:6b:dc:b3:94:b9:b0:
c6:02:91:d9:95:7c:2e:ba:b4:ee:b8:42:cb:c6:22:db:49:cb:
d5:13:56:d5:a9:f2:14:ec:5e:d5:0b:5f:83:e8:29:64:95:a1:
8c:f5:55:21:6c:6a:5b:d6:4c:b6:7d:2a:cd:f8:af:c5:b9:b0:
5e:b5:8c:f0:b9:4d:f0:55:31:a1:14:7b:cd:d0:61:b3:98:87:
8b:06:b3:44:6e:c1:1b:5f:c8:24:a6:3c:d3:ba:6b:e8:6f:09:
86:7e:5c:7c:eb:74:ed:27:ee:2c:f9:5d:6b:58:3f:2e:8b:f0:
cc:20:a0:a9:60:6a:14:22:3d:6c:7d:25:a9:db:8f:be:9f:d1:
d8:80:be:9d:db:f4:4b:30:e2:2a:f5:2e:6c:cc:32:ac:a6:1f:
13:75:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:17:19 2026 by rpki-client