
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier: QM0JwDci0NSXRmSUGw4HwS394/sqbGFxDTc+QFXU+EQ=
Subject key identifier: 0F:8B:04:E3:16:A0:D2:5D:8D:4B:E4:5A:F4:74:23:76:15:CF:6B:6F
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial: 0730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number: 0727
Signing time: Thu 16 Apr 2026 21:48:12 +0000
Manifest this update: Thu 16 Apr 2026 21:48:11 +0000
Manifest next update: Thu 23 Apr 2026 21:48:11 +0000
Files and hashes: 1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: FWTGzZVPrH9u6vqfejVDoI92x+r12h0R7BjymHbRhN8=)
2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: Pjx2fk1ERBs14VqIaD9LJOxFbqs8w+2aRHPGV9fMHnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Validity
Not Before: Apr 16 21:48:11 2026 GMT
Not After : Apr 23 21:48:11 2026 GMT
Subject: CN=69e1591c-215b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:ac:ef:b2:22:08:15:78:a0:66:ff:42:ad:
c2:f4:cd:06:7b:40:63:d2:9c:5c:fe:4d:d4:f9:4c:
01:2b:a2:57:e8:2a:57:55:3b:c6:47:cb:84:f3:be:
37:94:2b:2a:3e:3b:8c:c7:fe:44:d8:58:36:8b:23:
e9:ca:1b:8b:4f:a4:d0:37:8e:73:f7:c0:16:5b:db:
4e:ab:09:71:8a:e3:62:a3:60:c1:20:b5:c2:53:e3:
ac:34:3a:05:07:59:7b:d8:6e:5d:5e:40:d9:5e:4e:
35:6d:53:55:e4:f4:05:25:ca:e5:37:00:d1:6b:6e:
75:ba:11:60:bd:5f:c3:87:99:39:09:e4:8a:8a:b3:
b7:1c:eb:15:10:69:44:5e:c7:09:3c:fa:5a:87:63:
ec:a5:30:6c:af:36:46:49:32:5e:33:41:a4:13:47:
70:7d:e1:d9:01:56:f0:12:25:57:67:23:a1:40:d1:
86:73:c5:9a:bd:8e:2d:c1:ed:47:8a:03:d4:89:70:
ce:d0:b5:a6:54:f4:04:e2:65:20:0c:5d:34:f0:c4:
3e:57:79:cb:5d:da:24:c9:93:83:d9:e5:39:61:1b:
a0:1a:54:14:2e:20:f8:ca:ec:2c:c1:91:ea:f3:e2:
ac:fc:15:3d:1f:88:63:a5:b8:af:f3:05:08:b9:27:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:04:E3:16:A0:D2:5D:8D:4B:E4:5A:F4:74:23:76:15:CF:6B:6F
X509v3 Authority Key Identifier:
keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b7:db:44:cb:80:ed:16:b4:b5:37:56:b8:29:d0:90:1d:0d:
2a:e9:63:45:b1:e3:f3:86:54:6c:0a:7f:4f:4a:b6:7a:4e:0a:
44:31:b7:3c:dd:5f:39:04:75:64:3b:f1:40:1f:0d:80:98:b8:
1f:64:81:ef:2d:b6:95:02:dd:b1:7d:63:88:78:81:0b:b2:a3:
3a:3f:70:8c:75:11:a8:f1:dc:09:9d:1c:7e:8b:66:2c:49:61:
85:4c:0a:86:6d:a9:0e:26:3e:5d:77:bd:0c:bd:7b:e3:28:06:
e7:82:2c:12:6e:e6:9a:c0:f0:76:4f:02:0b:69:34:cd:28:ae:
cb:69:f3:d8:cc:a8:2c:dd:6f:0d:53:06:62:11:78:cb:fe:9b:
29:1e:31:7f:22:02:aa:e5:40:75:eb:8e:fd:9e:00:8d:b8:75:
53:d8:91:ec:53:8a:8c:69:d4:f1:3c:95:82:45:df:ef:4f:21:
19:b6:44:2e:0a:0b:22:16:13:e1:bd:b6:a6:d8:ba:14:ff:4b:
80:f4:ff:e6:36:ba:98:b8:a9:01:51:f0:bd:50:b5:62:fa:8c:
e4:af:74:fb:41:7b:00:e3:16:ee:05:46:21:41:26:fa:06:79:
97:9e:3b:71:19:ec:f7:57:c5:80:45:7f:d7:cf:51:0a:87:00:
10:34:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:26 2026 by rpki-client