
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier: xDfGCf89mtrgpEuJ0YvQZ6VDyCDiW36ygvRlGqvvGOQ=
Subject key identifier: 79:13:93:0B:66:B3:66:1E:7F:20:CF:6C:FB:FA:31:81:DC:A8:35:1B
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial: 0712
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number: 070B
Signing time: Sat 28 Feb 2026 22:27:25 +0000
Manifest this update: Sat 28 Feb 2026 22:27:25 +0000
Manifest next update: Sat 07 Mar 2026 22:27:25 +0000
Files and hashes: 1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: fCJuTChHigiqCDII1/bL/B1pAQJWUErnO3mmIPr5YcE=)
2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: vUduh0w3eSZesFepaO929FwqL1Ap+OkfqL7IQgJ/yu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810 (0x712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Validity
Not Before: Feb 28 22:27:25 2026 GMT
Not After : Mar 7 22:27:25 2026 GMT
Subject: CN=69a36bcd-d5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:3f:b7:36:f3:ef:e5:c4:1b:b3:65:58:21:
d1:ca:33:b2:fc:fc:ac:67:bc:70:b3:20:b1:6c:f6:
d8:a7:96:93:d8:21:15:f6:74:5f:c3:f2:45:b7:49:
d2:7c:b4:62:3b:e1:c3:ad:9a:23:ea:87:2c:b9:2b:
1a:68:2f:f3:a5:96:d7:f1:8a:bc:3e:5e:6e:e1:d5:
89:20:83:6b:40:39:25:78:a8:27:30:d6:4a:84:ee:
35:06:d0:df:60:dc:b5:34:b8:fc:5f:27:0e:d6:01:
0c:4f:3b:ca:f5:88:74:2a:07:cc:f5:9a:6f:91:a5:
56:65:11:43:4c:41:7d:41:a9:45:a9:90:54:4d:7c:
0d:5b:73:80:bc:10:a2:5b:41:48:25:15:2e:6d:97:
4a:d0:e6:05:6e:30:d8:6e:87:04:db:81:79:93:48:
65:ea:c3:b3:44:b1:67:58:40:a2:81:f8:7b:fc:56:
1f:f8:0e:ec:b0:d1:7b:50:88:fc:dc:35:6f:fb:86:
37:f2:5a:09:71:f2:c2:e7:5d:33:17:d4:0c:70:9f:
69:97:6a:84:d6:c2:79:5f:f7:25:19:b8:2b:4f:ab:
74:04:32:fb:3d:50:85:60:86:65:59:18:e2:80:c0:
75:ca:c3:8d:0b:59:0e:47:29:06:92:54:fd:36:42:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:13:93:0B:66:B3:66:1E:7F:20:CF:6C:FB:FA:31:81:DC:A8:35:1B
X509v3 Authority Key Identifier:
keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:d9:3b:40:c1:41:09:0e:53:60:db:85:16:d4:94:32:66:47:
19:6f:fd:d1:2f:eb:5c:f7:c8:ba:b6:dd:43:d6:ee:22:d9:47:
52:f3:20:a3:eb:45:ef:9f:5e:45:be:f9:3e:1b:99:f7:8b:95:
f5:b3:32:3d:51:84:00:c3:c5:bb:59:78:9e:31:b2:04:7d:29:
ae:82:b4:15:19:d4:3f:b7:c0:6b:19:9a:89:4b:71:6d:ff:4c:
d3:74:18:29:b9:bd:06:68:51:65:2f:24:e4:9d:a2:31:a2:a7:
a2:5a:53:78:79:48:2e:b9:34:6f:c0:ae:cb:f5:b0:e1:92:a7:
68:7a:0a:8f:be:9a:d4:d4:4e:ae:43:83:ac:fb:6b:ab:43:52:
a2:a8:d1:7a:33:85:27:ed:14:89:61:41:4a:47:ff:95:47:51:
79:a3:42:23:fd:9a:3c:fd:6c:b7:2c:94:4a:b5:06:0b:b4:4a:
4a:f4:0f:94:ae:01:e0:52:50:aa:40:01:c3:6a:b7:ce:81:ad:
16:1c:50:68:bb:9f:55:4c:af:4f:da:0b:10:f8:24:d9:6e:a5:
9f:dc:03:e6:f3:47:78:e4:c5:9b:5c:3a:63:cf:f2:ec:5d:13:
1b:32:1c:10:63:36:97:d9:1d:88:35:80:cc:0d:68:f7:92:02:
dc:4f:a0:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhGODAxMTAvBgNVBAUTKDZDQTJDRkE2ODhCREY5RTJENjU2MTYwODY3N0EzMEM5
MTUyNDNEMEMwHhcNMjYwMjI4MjIyNzI1WhcNMjYwMzA3MjIyNzI1WjAYMRYwFAYD
VQQDDA02OWEzNmJjZC1kNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Po/tzbz7+XEG7NlWCHRyjOy/PysZ7xwsyCxbPbYp5aT2CEV9nRfw/JFt0nS
fLRiO+HDrZoj6ocsuSsaaC/zpZbX8Yq8Pl5u4dWJIINrQDkleKgnMNZKhO41BtDf
YNy1NLj8XycO1gEMTzvK9Yh0KgfM9ZpvkaVWZRFDTEF9QalFqZBUTXwNW3OAvBCi
W0FIJRUubZdK0OYFbjDYbocE24F5k0hl6sOzRLFnWECigfh7/FYf+A7ssNF7UIj8
3DVv+4Y38loJcfLC510zF9QMcJ9pl2qE1sJ5X/clGbgrT6t0BDL7PVCFYIZlWRji
gMB1ysONC1kORykGklT9NkKkAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkTkwtm
s2YefyDPbPv6MYHcqDUbMB8GA1UdIwQYMBaAFGyiz6aIvfni1lYWCGd6MMkVJD0M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY4MC8wNzFERUE0MDdD
Q0UxMUVCQkI4ODI5NzZDNEY5QUUwMi9iS0xQcG9pOS1lTFdWaFlJWjNvd3lSVWtQ
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLTFBwb2k5LWVMV1ZoWUlaM293eVJVa1BRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEY4MC8wNzFERUE0MDdDQ0UxMUVCQkI4ODI5NzZDNEY5QUUwMi9iS0xQcG9pOS1l
TFdWaFlJWjNvd3lSVWtQUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgNk7QMFBCQ5TYNuFFtSUMmZHGW/90S/rXPfIurbdQ9buItlHUvMgo+tF759e
Rb75PhuZ94uV9bMyPVGEAMPFu1l4njGyBH0proK0FRnUP7fAaxmaiUtxbf9M03QY
Kbm9BmhRZS8k5J2iMaKnolpTeHlILrk0b8Cuy/Ww4ZKnaHoKj76a1NROrkODrPtr
q0NSoqjRejOFJ+0UiWFBSkf/lUdReaNCI/2aPP1styyUSrUGC7RKSvQPlK4B4FJQ
qkABw2q3zoGtFhxQaLufVUyvT9oLEPgk2W6ln9wD5vNHeOTFm1w6Y8/y7F0TGzIc
EGM2l9kdiDWAzA1o95IC3E+gfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:24 2026 by rpki-client