
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier: dyowCRNqz6saaWKFOXY8EvCKLnHSjVhRpsPpy8ZJW1Y=
Subject key identifier: 84:EA:23:35:AD:2C:FE:2B:C1:59:45:89:12:FC:89:65:B0:43:B7:C1
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial: 0764
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number: 075B
Signing time: Tue 28 Jul 2026 22:15:21 +0000
Manifest this update: Tue 28 Jul 2026 22:15:21 +0000
Manifest next update: Tue 04 Aug 2026 22:15:21 +0000
Files and hashes: 1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: jREQ5iY8WCrumM8fhCT35eKdOnZQUyWHFy0UHtHjcvg=)
2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: Pjx2fk1ERBs14VqIaD9LJOxFbqs8w+2aRHPGV9fMHnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Validity
Not Before: Jul 28 22:15:21 2026 GMT
Not After : Aug 4 22:15:21 2026 GMT
Subject: CN=6a6929f9-d567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:55:51:6a:da:8e:c5:8e:fd:d0:9c:f6:aa:
66:28:cc:e8:96:7f:b4:1c:59:ed:37:2d:75:32:5c:
21:aa:3b:a8:d9:6c:96:3a:e5:2d:98:d8:b0:68:fc:
65:9a:cd:d0:dd:af:78:f0:22:ed:07:4c:64:21:f2:
34:fc:a0:39:8e:d4:1b:bb:14:0e:f9:e4:54:b2:0d:
5d:c6:9f:43:30:93:92:e2:85:a6:0d:10:aa:55:ee:
42:bb:0e:9b:a2:aa:45:4c:bf:f7:a4:64:a1:18:3e:
c2:6e:6e:8d:5e:c1:dc:36:3c:5d:42:94:3e:5a:c7:
d9:11:b5:65:02:ee:34:00:73:bf:93:29:d3:21:ae:
86:99:66:bf:85:6a:8f:ca:a5:d5:20:53:bc:de:fa:
11:9f:53:f9:3c:ac:45:22:45:18:b5:0e:63:b2:ea:
83:04:3a:11:59:07:4e:c0:84:47:8a:3d:50:5e:70:
67:cd:88:91:ad:c7:67:03:a3:44:d6:10:50:e2:b9:
41:10:3b:e0:1d:81:86:85:fd:66:6d:5d:3d:81:69:
01:3a:97:6d:10:e3:85:c8:25:2a:01:d3:81:9d:c3:
e7:b2:c9:b8:6c:b0:f7:6c:90:8b:63:a5:22:06:3d:
ca:fa:20:a4:6c:ba:1c:c7:0e:32:9e:4e:94:2f:01:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:23:35:AD:2C:FE:2B:C1:59:45:89:12:FC:89:65:B0:43:B7:C1
X509v3 Authority Key Identifier:
keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8c:be:dd:48:8a:7a:2c:82:aa:31:0a:c4:0c:f8:0d:d9:9c:
02:9c:bb:7f:95:e2:86:fd:2a:d1:13:b7:58:5a:b1:24:5e:ee:
25:0a:93:48:61:c9:20:59:87:c3:16:12:3f:32:1b:0e:ec:93:
7b:14:f3:0f:9c:de:3f:d6:20:86:9e:10:aa:b8:b9:a9:db:94:
96:68:d5:07:75:b1:dc:55:2d:7d:31:24:ad:b5:0b:55:f4:86:
ed:c7:87:98:84:0e:18:6b:ac:dc:a6:08:ca:d7:cd:34:0b:db:
c2:e4:c3:dd:68:34:e7:b8:c5:73:f5:f6:71:af:30:c8:46:3e:
19:d4:f2:0c:50:3a:0c:ad:a2:ff:50:5d:26:0f:5b:29:9b:ac:
58:d3:f1:69:bf:39:06:16:b1:ac:be:df:c3:7f:ec:bc:44:ad:
68:1a:ff:9d:5c:09:94:58:29:83:c5:ac:69:e2:86:92:40:7a:
38:4d:ae:90:23:60:ff:4d:37:23:00:78:d9:69:74:b9:e0:13:
f3:ac:c2:2a:2d:bb:f6:f1:95:46:15:96:df:a5:a5:ce:12:02:
46:25:70:0e:5b:8a:61:7a:33:ac:58:77:d1:8a:66:b5:25:5f:
d6:b5:c8:be:8e:93:57:fe:65:c7:14:69:8f:2d:86:91:47:a8:
b8:75:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:49 2026 by rpki-client