
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier: svooJR0aDUC+fCGKIqEqUqauXI9+Drhk4TZiPg31Kfc=
Subject key identifier: FF:DD:4E:99:A9:50:2C:C3:07:06:FA:DB:95:FD:73:91:53:98:BF:DB
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial: 0727
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number: 071F
Signing time: Sat 04 Apr 2026 21:41:56 +0000
Manifest this update: Sat 04 Apr 2026 21:41:55 +0000
Manifest next update: Sat 11 Apr 2026 21:41:55 +0000
Files and hashes: 1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: iTtxFOidIHsEB+shQkF8u0bybz5/2w220ATyQfaNtaw=)
2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: 4qKXGZ0bRYv362hDQR/ZiXlcYhUu1dIqkoFSj1gTT6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831 (0x727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Validity
Not Before: Apr 4 21:41:55 2026 GMT
Not After : Apr 11 21:41:55 2026 GMT
Subject: CN=69d185a3-96ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6d:43:9d:4b:35:f7:20:f3:fb:11:32:e3:31:
f1:c4:37:fd:4a:be:66:e5:2a:02:b8:ae:92:66:5d:
90:92:a9:63:78:29:6e:a2:ad:c6:05:c8:82:6e:ee:
39:2a:00:47:39:3d:69:c7:d5:d9:91:62:a2:c0:0d:
a9:44:95:0a:1a:52:5e:92:2e:62:00:bb:29:3e:38:
be:1b:d3:8b:14:ad:6a:b5:33:39:57:20:6c:6d:63:
da:69:eb:b0:63:03:e9:8a:40:8b:fb:12:8f:fa:66:
0e:d7:8b:c3:09:f8:cc:b3:3a:15:b5:c8:99:03:12:
55:5f:e6:14:97:65:f0:c8:f1:32:f6:c8:6b:80:47:
1b:a1:e7:45:05:a1:32:dd:fd:93:c5:65:ee:8c:10:
b7:1e:4f:9a:ee:3f:e0:dd:18:e7:1b:e9:c2:6c:77:
f2:c0:76:9f:87:9b:2d:99:69:72:45:60:12:34:8a:
68:28:6a:ad:5a:4e:0c:a4:b3:da:ae:8c:c6:22:50:
08:1b:a6:42:4e:04:76:38:da:ef:a9:59:63:6f:bb:
82:00:ad:16:b6:47:b2:24:c4:3b:38:03:db:d0:d0:
34:5d:e8:ae:9e:cf:4e:f8:de:f7:54:6f:12:18:9a:
ec:47:4e:f1:1d:ec:d3:7a:f9:e6:ef:2a:57:15:25:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DD:4E:99:A9:50:2C:C3:07:06:FA:DB:95:FD:73:91:53:98:BF:DB
X509v3 Authority Key Identifier:
keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:19:c8:0c:0c:96:1a:87:4a:a5:cb:13:52:c7:4e:a5:fe:89:
1b:cb:19:05:29:4c:4f:56:5e:e5:b3:1d:3d:42:c4:7e:64:98:
16:e4:7f:2e:4d:23:78:fb:24:1f:e8:d9:1c:80:03:cd:90:a4:
ee:64:23:37:44:6f:c7:60:78:c4:a7:9d:96:b1:4b:b8:49:84:
d4:b7:e3:ed:b5:65:ea:9f:fc:6c:c8:84:03:6d:b9:7c:15:ef:
28:bb:34:fe:cf:09:fb:3e:41:c9:86:56:0c:cc:43:cd:37:9a:
cd:99:ce:ef:c0:61:2e:e3:76:24:6d:83:10:1f:a9:c8:49:21:
d5:e6:3d:b7:4d:42:94:28:7f:ce:4a:d9:44:d9:55:ab:fd:37:
97:5a:11:41:ad:f9:ae:fc:29:21:cc:6c:cb:34:7f:d5:29:ff:
bf:e1:b0:69:17:3f:25:b3:54:a8:80:67:fa:2e:95:77:be:7f:
01:8d:d3:99:fc:57:16:bf:cd:98:76:51:ac:d5:5c:d2:96:70:
05:46:47:f5:ee:a1:66:cb:5f:3e:0e:69:e5:f0:60:83:c9:6c:
e7:3e:8b:d1:83:e8:c2:68:1f:d6:b7:9b:cc:2a:a1:1a:9f:24:
70:00:af:8d:3d:e0:28:5f:ce:25:b4:08:da:fc:a2:59:28:be:
86:8e:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:33 2026 by rpki-client