
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json)
Hash identifier: JyDqi0UqWv9+mO5E1xnrxE2QGZ73PIv5V4uUwM6Vmgs=
Subject key identifier: 70:1D:C9:64:7F:9F:75:34:A9:A5:40:5C:43:B1:E9:5E:0A:C7:57:C4
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial: 13BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
Manifest number: 13B2
Signing time: Mon 22 Jun 2026 16:55:42 +0000
Manifest this update: Mon 22 Jun 2026 16:55:42 +0000
Manifest next update: Mon 29 Jun 2026 16:55:42 +0000
Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: k/oQJ4VpgVYPEmGw3b2G2xFt79xabfAvAaG+ccnXu94=)
2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: 5nBBVCtoHYCq4rwPHMRcZOxfv5m45SHxgbVpeR2AOJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5052 (0x13bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Validity
Not Before: Jun 22 16:55:42 2026 GMT
Not After : Jun 29 16:55:42 2026 GMT
Subject: CN=6a39690e-ab8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:aa:94:f7:b6:eb:76:75:ad:ce:a0:66:fb:
cb:36:6a:ac:e9:aa:a0:7a:6b:95:2e:0f:6a:c8:ab:
a3:e7:7d:1a:55:04:f8:de:1b:6e:1a:8d:5f:77:4e:
43:63:8d:a4:64:12:4f:6b:58:25:f4:d0:05:f9:69:
db:08:32:29:44:7b:b4:ac:6b:04:88:0c:80:91:9a:
02:55:15:8e:0f:05:b8:a7:62:da:cc:ef:4e:32:3d:
ba:2b:64:89:0e:aa:05:6b:6b:14:90:de:64:d9:c3:
f9:2f:cb:f8:ae:b9:03:91:f0:bc:07:14:84:f9:ef:
c1:d8:ec:18:8e:da:a4:7d:94:7d:06:d9:3e:d6:20:
80:83:dc:cc:36:cc:02:e6:2d:53:cc:89:5f:0f:46:
6d:98:b9:27:a2:2a:ea:e6:e4:31:2a:ec:6b:b8:59:
97:dc:b5:4a:db:6d:11:4f:1b:bf:ab:2f:fa:c4:5e:
38:19:d6:2c:fa:e1:27:71:9b:f2:17:ce:c6:66:8c:
83:88:95:15:44:b2:66:88:58:a5:d3:c0:f2:9c:cf:
1b:29:35:0d:6c:aa:2a:6c:54:f2:c7:43:d0:46:f3:
ee:98:22:94:f5:3d:01:51:d7:0b:5f:75:c4:ef:c6:
55:c3:7b:51:6d:6e:75:1d:d0:1b:66:b1:49:f8:b6:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:C9:64:7F:9F:75:34:A9:A5:40:5C:43:B1:E9:5E:0A:C7:57:C4
X509v3 Authority Key Identifier:
keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:3d:4d:fd:84:74:3a:6f:0d:08:e1:ad:f1:76:12:fd:ab:cf:
3d:61:b7:a0:6c:58:67:c0:7f:e1:4f:cc:58:f1:da:ba:f8:51:
ee:5d:73:a6:0a:b0:16:fe:93:6f:2b:0b:2f:8d:71:67:1d:78:
e7:2d:cc:89:f5:01:9b:34:c6:19:a9:22:ea:80:14:01:cb:61:
79:76:c0:66:b7:80:d6:24:75:b9:ff:2a:81:40:d3:a2:c7:d6:
59:37:24:7e:0b:13:e1:23:8b:09:5e:2f:84:e3:2b:8e:94:32:
1c:5f:25:70:8d:d7:d1:8f:bd:0c:18:58:33:2d:2d:dc:76:17:
c5:e3:95:38:fe:94:18:30:78:c3:17:36:66:52:14:66:1b:d5:
fe:9b:5e:2c:68:8e:cd:17:e6:d3:69:70:74:2c:38:b0:ec:27:
83:e6:df:07:f8:eb:88:82:c5:ee:20:28:9a:ec:32:48:02:ee:
ea:6a:10:ec:f6:ae:b6:c7:3b:1b:64:67:33:5b:9a:01:5d:40:
3a:f1:29:fa:0a:e9:ca:f5:8b:6c:8e:f7:1c:46:8b:1f:08:94:
60:3a:7f:74:da:89:aa:a5:35:89:29:41:6f:ae:c7:f1:82:3c:
2f:3f:de:55:ba:9b:0d:91:ea:bc:64:c6:37:71:d5:4d:42:f1:
b8:13:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:59 2026 by rpki-client