
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json)
Hash identifier: qBF+alO1uKeHEW6AgG5Qh3lSZBlVcVrNonFiAXynqk0=
Subject key identifier: 26:DF:C2:6B:BE:38:AF:13:B5:34:D2:C7:F9:7D:17:99:8A:88:47:76
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial: 13CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
Manifest number: 13C2
Signing time: Fri 24 Jul 2026 17:06:49 +0000
Manifest this update: Fri 24 Jul 2026 17:06:48 +0000
Manifest next update: Fri 31 Jul 2026 17:06:48 +0000
Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: lbILlqnrL0BN2a21lUr3mke34fSq27AJ+8pkh6soc4E=)
2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: 5nBBVCtoHYCq4rwPHMRcZOxfv5m45SHxgbVpeR2AOJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 17:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5068 (0x13cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Validity
Not Before: Jul 24 17:06:48 2026 GMT
Not After : Jul 31 17:06:48 2026 GMT
Subject: CN=6a639ba9-3d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:a1:13:cd:3e:bb:de:02:4d:d2:1c:3b:2a:
e9:4b:07:16:69:4b:a6:ae:f4:95:80:b8:ae:b6:0f:
ab:86:3c:f5:0a:ff:a0:eb:94:69:a7:32:ad:54:4f:
dd:71:94:87:63:b6:d1:70:af:12:52:5d:a9:4b:39:
4a:c4:a5:c7:c7:2c:ab:fa:d6:68:d7:64:fe:d8:02:
ea:d5:18:82:85:3c:50:d7:ee:8e:df:c0:e9:15:dc:
e3:19:63:40:95:4f:b5:de:4c:e3:08:be:da:d4:b4:
41:cc:62:02:14:ef:4f:9d:7f:4c:80:8f:15:e5:71:
b1:13:a1:c0:58:32:74:ec:c6:1f:b8:be:a6:18:40:
98:48:08:e0:40:25:0a:e3:7a:9f:75:94:8c:5b:93:
5a:f4:a0:e8:34:ec:05:3f:5a:d6:69:9a:f1:63:fe:
79:d4:91:90:bd:75:37:b8:1c:66:a1:41:1c:4f:4e:
70:74:2c:0f:07:1f:5f:86:bf:a9:97:08:0a:a6:2d:
87:a1:2d:6e:82:70:47:d0:ef:89:67:9f:de:0f:c8:
0c:4a:69:bf:f8:e7:2e:20:77:f6:bc:a5:e6:ef:b7:
0e:63:68:79:05:91:3a:89:51:0f:8b:8d:10:95:2b:
0f:62:d2:73:36:39:01:9f:3d:ee:f1:18:5c:3d:bd:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DF:C2:6B:BE:38:AF:13:B5:34:D2:C7:F9:7D:17:99:8A:88:47:76
X509v3 Authority Key Identifier:
keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:fb:10:f9:75:e7:ca:f4:47:71:e7:2a:ff:68:64:03:4d:12:
fe:3d:6c:4d:aa:f0:96:2d:c5:7e:cc:14:9f:2d:be:5a:c4:52:
a9:ca:03:7d:85:f9:1b:b5:23:96:89:f2:16:a8:ea:2d:3f:77:
7c:18:5b:99:a1:7a:11:cd:72:63:6a:76:1d:ce:2d:32:59:e7:
9f:16:11:5e:76:27:04:50:69:8f:e3:fd:cb:ba:16:ae:f0:dc:
de:8a:fc:1c:3c:64:30:f3:b6:67:06:cf:9d:47:66:da:cb:4f:
91:3e:aa:b2:fb:5d:a1:cd:16:ac:3e:fb:a6:0d:54:26:bd:1c:
aa:46:51:3e:4a:bc:c3:ba:58:4e:58:ff:5c:75:ab:22:e0:4c:
b2:2c:6a:99:70:35:d4:85:10:63:4b:f2:c6:b3:21:1e:ce:c5:
0e:7a:cb:11:c2:df:b8:96:72:4d:10:bc:ca:c2:f8:b4:41:5b:
65:1d:12:06:c1:9d:bf:b4:58:83:5a:b2:12:ce:e9:25:47:c3:
78:eb:aa:31:71:78:f4:72:97:66:1e:7e:ae:22:92:5d:a1:29:
84:a3:66:af:4f:c2:8a:fc:de:a4:ce:c6:bf:53:09:b8:d0:1f:
45:ee:2a:ce:c4:6e:36:cc:53:39:3a:0f:a8:79:c8:7a:f9:ad:
e4:ea:5b:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC
QkJFNzQxQkMwHhcNMjYwNzI0MTcwNjQ4WhcNMjYwNzMxMTcwNjQ4WjAYMRYwFAYD
VQQDEw02YTYzOWJhOS0zZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjG6hE80+u94CTdIcOyrpSwcWaUumrvSVgLiutg+rhjz1Cv+g65RppzKtVE/d
cZSHY7bRcK8SUl2pSzlKxKXHxyyr+tZo12T+2ALq1RiChTxQ1+6O38DpFdzjGWNA
lU+13kzjCL7a1LRBzGICFO9PnX9MgI8V5XGxE6HAWDJ07MYfuL6mGECYSAjgQCUK
43qfdZSMW5Na9KDoNOwFP1rWaZrxY/551JGQvXU3uBxmoUEcT05wdCwPBx9fhr+p
lwgKpi2HoS1ugnBH0O+JZ5/eD8gMSmm/+OcuIHf2vKXm77cOY2h5BZE6iVEPi40Q
lSsPYtJzNjkBnz3u8RhcPb1wGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbfwmu+
OK8TtTTSx/l9F5mKiEd2MB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2
NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx
anJsbEtsS3p1Yy03dm5RYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYfsQ+XXnyvRHcecq/2hkA00S/j1sTarwli3FfswUny2+WsRSqcoDfYX5G7Uj
lonyFqjqLT93fBhbmaF6Ec1yY2p2Hc4tMlnnnxYRXnYnBFBpj+P9y7oWrvDc3or8
HDxkMPO2ZwbPnUdm2stPkT6qsvtdoc0WrD77pg1UJr0cqkZRPkq8w7pYTlj/XHWr
IuBMsixqmXA11IUQY0vyxrMhHs7FDnrLEcLfuJZyTRC8ysL4tEFbZR0SBsGdv7RY
g1qyEs7pJUfDeOuqMXF49HKXZh5+riKSXaEphKNmr0/CivzepM7Gv1MJuNAfRe4q
zsRuNsxTOToPqHnIevmt5Opbgg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:35 2026 by rpki-client