
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json)
Hash identifier: R0IEr6z8Pp+c2SqavJGQoLnfJNlaDC3oBdS9iGgopvQ=
Subject key identifier: 77:38:89:EC:E0:6C:8A:82:66:0D:CF:3E:B0:86:61:88:C3:A8:D9:0F
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial: 139A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
Manifest number: 1390
Signing time: Thu 16 Apr 2026 16:54:36 +0000
Manifest this update: Thu 16 Apr 2026 16:54:35 +0000
Manifest next update: Thu 23 Apr 2026 16:54:35 +0000
Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: EdAvSUk+gzwKKgYThqBB/OdL7+lTJKcN/mu1SdB9sfY=)
2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: 5nBBVCtoHYCq4rwPHMRcZOxfv5m45SHxgbVpeR2AOJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5018 (0x139a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Validity
Not Before: Apr 16 16:54:35 2026 GMT
Not After : Apr 23 16:54:35 2026 GMT
Subject: CN=69e1144b-9ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:fe:2c:0e:8f:e5:4d:8e:96:9d:f8:c2:be:
b7:82:cc:38:22:99:7f:21:e2:6b:bc:f5:b7:e0:bd:
68:17:a5:a1:47:d3:c8:1b:c8:ea:a2:6c:44:5e:a2:
89:68:ee:09:80:a2:d7:a6:c9:88:c4:a4:06:b0:4e:
c8:4d:11:92:12:cc:03:79:f5:63:ea:f2:e4:ff:ea:
e7:70:0d:9d:78:01:cd:9d:6e:19:51:12:27:63:5b:
c9:fa:d2:6b:9e:d0:21:8d:2b:8e:57:b3:7d:41:40:
aa:21:0e:a0:41:5e:6b:e0:48:94:80:0c:2e:65:ba:
b4:dd:85:02:d7:b0:c7:a4:d6:4a:d0:91:96:97:a6:
ca:ed:fa:5c:a3:fd:6d:e1:e1:ee:7a:ff:45:f4:d0:
29:06:07:98:e3:1f:5e:60:dd:86:74:e6:b5:0e:d4:
7b:9f:c7:36:43:d7:6a:49:49:32:99:d4:a0:c7:53:
9a:e4:72:74:4f:bc:5b:ba:fc:ae:d5:66:87:1a:c9:
57:23:c1:62:6d:07:ef:59:c7:2a:53:26:a0:65:ea:
54:6e:e9:25:81:ca:a1:db:88:ba:86:cd:4e:3f:a7:
b6:27:a7:5d:3f:04:6f:2a:a7:d9:fd:50:40:89:03:
87:dc:de:0c:d2:00:18:34:96:a5:36:90:eb:8d:d0:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:38:89:EC:E0:6C:8A:82:66:0D:CF:3E:B0:86:61:88:C3:A8:D9:0F
X509v3 Authority Key Identifier:
keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:e6:ac:a0:7e:22:39:1d:df:97:ff:e7:b4:67:02:c4:a0:61:
08:14:bf:c9:29:cd:e8:76:cb:1e:e3:94:ca:f2:0b:ea:c8:37:
93:67:52:fa:d6:31:c2:71:73:b0:b2:5e:ee:ea:5c:26:d7:09:
bf:54:5c:68:02:67:9b:56:34:63:d8:a6:2f:05:c0:a8:6e:46:
db:ab:32:bf:99:f1:a2:e8:00:8e:bc:34:37:57:3c:14:31:8e:
9e:e0:46:9f:b9:0e:f7:bb:a5:fb:12:e0:f9:52:10:ec:d1:bc:
01:5d:8c:38:7a:b7:7a:96:82:33:69:66:ee:2e:bb:42:7d:a2:
08:ba:b5:87:29:47:d7:16:8f:76:7f:88:9b:6c:ae:ab:df:3f:
40:3c:83:5f:15:14:da:01:58:73:4b:c3:b1:dd:44:0e:51:02:
5a:f3:0e:66:4e:de:c0:26:34:2b:be:3c:32:12:d4:07:56:4b:
b4:a4:17:39:49:9f:3f:35:26:91:87:53:5d:9f:0e:b9:93:54:
96:17:4a:8f:0c:22:d0:63:05:cf:19:0d:4d:36:6c:be:8c:1a:
22:fc:53:bb:8b:b7:f9:35:8a:da:94:ab:b0:3b:6d:15:b6:fa:
00:cb:e7:5d:7d:f0:03:9b:1e:e8:03:b2:8e:1f:24:fa:fd:2f:
fc:76:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:38 2026 by rpki-client