
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json)
Hash identifier: Lq5vVbBBi47n1V5fpIXN58vbnFwL/xCMlMAHuS81+D4=
Subject key identifier: F9:94:32:78:B7:33:FC:BA:08:C7:F8:5A:CD:E6:F6:24:10:2A:B1:C3
Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
Manifest number: DA
Signing time: Sat 13 Jun 2026 06:43:12 +0000
Manifest this update: Sat 13 Jun 2026 06:43:12 +0000
Manifest next update: Sat 20 Jun 2026 06:43:12 +0000
Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: Ads0J8+iWaZc03KSLSh95SNtBQ93pllt0TywHDCDlzA=)
2: C028C06E18E211F081A75558C4F9AE02.roa (hash: zKW/ra+nJQMWUbM8Pae8IdbHSNQ3IifmscVyx7k0qbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Validity
Not Before: Jun 13 06:43:12 2026 GMT
Not After : Jun 20 06:43:12 2026 GMT
Subject: CN=6a2cfc00-32af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:11:28:16:3b:0b:08:ec:5d:d6:5a:d7:b9:
76:af:a7:96:92:84:f0:2e:d0:8f:95:bc:9e:c0:22:
04:22:89:8b:d1:89:69:a6:38:6b:ab:eb:bc:59:b4:
87:0d:e8:b8:23:6b:65:f6:8c:96:d1:3a:b1:3f:e1:
64:bc:b7:bc:98:d7:4d:03:20:ff:ff:9a:4b:c5:07:
df:47:64:0a:c5:34:c2:91:8c:79:fc:ad:20:fc:05:
c2:03:86:7d:aa:84:6c:a2:30:a9:6d:bf:9f:24:fe:
96:43:ff:90:a9:a5:97:b2:80:0e:39:74:e9:85:6a:
2d:07:3e:d7:39:dd:2a:d7:33:07:2b:7c:c9:ad:cb:
dc:5a:3d:7c:ef:df:0a:0a:c1:d8:22:82:df:f1:b6:
46:00:31:18:ab:16:cf:e6:3d:15:b9:ed:12:bf:80:
5d:e7:09:af:87:3f:31:af:d7:e0:ad:7e:41:26:b2:
86:48:77:4c:14:45:8d:b3:c4:fa:92:cb:bc:32:bc:
59:22:a3:35:7b:3f:c7:a2:83:f7:74:6f:b9:c5:f4:
03:87:02:89:03:e1:c0:6e:17:5d:27:68:ff:ff:47:
b6:f5:17:91:1c:fb:d2:83:20:8c:4f:86:37:20:1f:
3a:16:3c:a5:4d:31:e9:c8:5a:fc:59:a6:31:fd:e9:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:32:78:B7:33:FC:BA:08:C7:F8:5A:CD:E6:F6:24:10:2A:B1:C3
X509v3 Authority Key Identifier:
keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:46:11:56:56:e9:75:63:73:27:32:8f:d2:da:d1:04:07:
65:5c:82:d1:8b:76:d9:96:fd:60:37:04:4b:94:da:c5:34:5b:
46:72:2f:11:3c:db:c7:71:69:c9:27:27:d4:30:4c:5b:de:bc:
d6:0f:ef:9a:97:25:c7:59:f3:11:42:27:5e:2d:1e:8f:f9:83:
cf:78:69:be:65:f6:65:74:2e:32:28:9a:8e:a2:95:e6:c0:e2:
b4:ff:2b:9d:5b:e4:5e:79:e5:b4:ed:68:69:26:35:4a:3d:dc:
9a:2f:6d:2c:b9:d7:c2:cf:35:51:74:91:93:a6:9d:ae:34:c7:
f8:01:68:e7:ef:b2:a4:c6:d7:2e:59:c8:e1:8c:13:b7:a4:61:
3a:e8:55:66:b3:21:3c:f9:05:3c:ae:4b:60:43:2e:76:63:c0:
4a:04:12:b6:98:9f:8a:2d:55:36:67:ce:15:29:4b:ee:9a:da:
78:82:36:99:66:cb:23:5b:2b:11:bb:75:ae:af:49:29:0e:f5:
f0:cb:2d:13:a0:73:f5:77:f5:f5:da:ef:b6:cd:dd:ee:71:fb:
0d:b3:58:9b:14:6e:71:8a:bc:e0:82:9d:0a:7e:f2:05:b8:3e:
e8:d7:b9:f3:61:d3:61:3f:44:d9:72:2d:bb:b9:84:fd:65:40:
2f:e4:84:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRFM0YxMTAvBgNVBAUTKDI4QkVFNzA0MDRCMjQzMDk2NEMzMDI5MjkwRDNFQTYw
NEM5MTBFQjEwHhcNMjYwNjEzMDY0MzEyWhcNMjYwNjIwMDY0MzEyWjAYMRYwFAYD
VQQDEw02YTJjZmMwMC0zMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5FYRKBY7CwjsXdZa17l2r6eWkoTwLtCPlbyewCIEIomL0Ylppjhrq+u8WbSH
Dei4I2tl9oyW0TqxP+FkvLe8mNdNAyD//5pLxQffR2QKxTTCkYx5/K0g/AXCA4Z9
qoRsojCpbb+fJP6WQ/+QqaWXsoAOOXTphWotBz7XOd0q1zMHK3zJrcvcWj18798K
CsHYIoLf8bZGADEYqxbP5j0Vue0Sv4Bd5wmvhz8xr9fgrX5BJrKGSHdMFEWNs8T6
ksu8MrxZIqM1ez/HooP3dG+5xfQDhwKJA+HAbhddJ2j//0e29ReRHPvSgyCMT4Y3
IB86FjylTTHpyFr8WaYx/ekqhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmUMni3
M/y6CMf4Ws3m9iQQKrHDMB8GA1UdIwQYMBaAFCi+5wQEskMJZMMCkpDT6mBMkQ6x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEUzRi8zQzNFNjIwRTE4
RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3bGt3d0tTa05QcVlFeVJE
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEUzRi8zQzNFNjIwRTE4RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3
bGt3d0tTa05QcVlFeVJEckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIEdGEVZW6XVjcycyj9La0QQHZVyC0Yt22Zb9YDcES5TaxTRbRnIvETzbx3Fp
yScn1DBMW9681g/vmpclx1nzEUInXi0ej/mDz3hpvmX2ZXQuMiiajqKV5sDitP8r
nVvkXnnltO1oaSY1Sj3cmi9tLLnXws81UXSRk6adrjTH+AFo5++ypMbXLlnI4YwT
t6RhOuhVZrMhPPkFPK5LYEMudmPASgQStpifii1VNmfOFSlL7praeII2mWbLI1sr
Ebt1rq9JKQ718MstE6Bz9Xf19drvts3d7nH7DbNYmxRucYq84IKdCn7yBbg+6Ne5
82HTYT9E2XItu7mE/WVAL+SEFA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:42 2026 by rpki-client