
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier: qYWFhr+SGEslAejt10q7ovBXe3wVThBvT8iHcANzOQQ=
Subject key identifier: 1C:EE:0D:0E:F2:2E:16:39:89:F1:31:B4:A9:80:32:45:86:AD:A7:29
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial: 0786
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number: 077D
Signing time: Fri 02 Oct 2026 21:56:40 +0000
Manifest this update: Fri 02 Oct 2026 21:56:40 +0000
Manifest next update: Fri 09 Oct 2026 21:56:40 +0000
Files and hashes: 1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: RnykvlyD+Yl8vQ7FYZ2XmxvK2KYF6LjgF3PJnVrVSso=)
2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: Pjx2fk1ERBs14VqIaD9LJOxFbqs8w+2aRHPGV9fMHnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926 (0x786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Validity
Not Before: Oct 2 21:56:40 2026 GMT
Not After : Oct 9 21:56:40 2026 GMT
Subject: CN=6ac02898-1348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:98:97:61:16:49:19:73:b3:d2:16:18:e4:
ea:6b:22:b0:99:a7:1a:4b:53:7e:24:af:52:8c:ea:
1d:95:3d:9f:f3:d8:29:8c:31:77:43:d9:4b:44:db:
be:ed:a3:42:63:de:01:cf:44:f5:4d:ce:a1:5c:c6:
5e:cc:29:b0:f5:ea:89:21:c1:e1:37:b3:fd:f0:ea:
da:1e:3a:64:e2:90:fc:a1:4c:9f:8d:9f:87:94:d3:
0c:2b:de:af:fe:37:8e:5a:2d:ed:71:25:97:3f:c2:
ef:ab:1d:a9:2a:39:1e:70:33:c3:36:24:8a:86:72:
07:6f:cc:e6:dd:a9:eb:d2:37:fe:5d:4a:98:12:fc:
e6:c2:8f:2c:25:01:67:1b:04:f6:ae:70:61:4d:bb:
c1:fa:cf:76:b3:be:a3:aa:6d:ef:39:d0:6d:c0:21:
2c:df:54:d5:16:2f:98:3f:86:10:9b:fa:e6:1c:24:
66:aa:78:0a:64:5b:28:aa:fc:0a:7c:b6:19:b6:83:
1e:a8:1b:04:19:89:76:9e:f3:bb:96:8a:78:c4:62:
10:75:73:ed:78:0d:9e:be:cd:5f:61:8a:d4:03:bd:
ec:d1:16:7a:dc:b1:9b:1f:fa:9b:b9:9c:2b:cf:bd:
a5:26:c3:eb:ec:02:98:81:c3:7e:51:c7:f9:6e:ec:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EE:0D:0E:F2:2E:16:39:89:F1:31:B4:A9:80:32:45:86:AD:A7:29
X509v3 Authority Key Identifier:
keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:08:28:04:0e:25:87:ac:35:ad:de:13:56:27:60:1e:c4:
75:99:5b:d7:28:d6:47:2c:12:d5:34:65:27:67:e5:38:87:07:
0a:e5:46:e8:e2:65:eb:3e:52:37:82:06:b5:20:6c:7a:56:1f:
f3:5a:2d:e4:78:a4:94:a6:23:dc:68:fa:58:8b:bd:b5:35:f0:
a3:15:1e:1d:2a:02:fc:6d:76:fe:8b:80:b2:92:ce:7e:41:31:
7f:c6:0f:af:74:7d:4d:5c:d9:fa:0f:99:6d:5a:37:cc:b3:24:
94:3a:cb:6a:9e:ab:3e:00:8f:3b:d3:f0:87:b1:b3:82:f0:3c:
77:96:af:32:08:e3:fc:8d:72:b7:e0:ea:5c:e0:f2:8e:4a:21:
28:e0:12:e2:3f:a3:b6:2c:79:10:7d:a4:30:a8:fd:40:1b:1f:
5e:cb:6d:e8:dc:ad:5e:c7:f7:af:bb:d9:7d:63:f5:ac:9a:10:
ab:ba:cf:c0:8b:ec:11:75:12:ca:19:4e:31:27:02:9c:14:92:
07:bc:e9:d6:83:27:aa:7f:89:36:12:b2:70:2c:32:b8:f6:f4:
06:c2:fa:a7:d4:e8:9c:31:ac:10:96:be:4c:64:9e:c6:8d:51:
e2:6e:a4:02:a9:89:eb:79:ab:e5:c0:05:d2:e6:25:ff:77:95:
2a:1b:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:33:55 2026 by rpki-client