
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
File: bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json)
Hash identifier: QZ0LpKJTblUUMsRsFwIOm7vfnm+8eVqkIMFPOw0Vdsw=
Subject key identifier: 3A:C4:D4:82:89:0D:14:A0:B0:04:FB:E2:97:C8:19:E3:D5:15:C0:04
Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
Certificate issuer: /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
Manifest number: 04D9
Signing time: Mon 27 Jul 2026 00:47:07 +0000
Manifest this update: Mon 27 Jul 2026 00:47:07 +0000
Manifest next update: Mon 03 Aug 2026 00:47:07 +0000
Files and hashes: 1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: qDp3vGm1CH3QnuiLAhuqI4Xi/ICEyTv2sG5lMBtjtAA=)
2: 8B729608B62F11EFB2DE315FC4F9AE02.roa (hash: htZKbTCRw2kolIOs+1xX3ByAdUKRSkWwNNKR43qldvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EA16, serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Validity
Not Before: Jul 27 00:47:07 2026 GMT
Not After : Aug 3 00:47:07 2026 GMT
Subject: CN=6a66aa8b-8bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:d2:05:14:96:36:ea:be:ec:a6:a8:45:b7:
40:b4:81:92:02:80:5e:91:15:e1:ce:29:93:92:42:
b5:ea:b6:c6:db:6f:8d:2d:fc:bd:31:39:bd:82:bb:
f8:a5:52:ee:c6:2d:21:2a:00:53:ed:16:ce:e4:3b:
49:3d:0e:70:8b:dd:ec:81:8e:e2:4a:fb:f9:2f:4d:
c1:54:57:0d:ac:ac:bb:aa:88:43:55:08:1c:50:4f:
a2:45:af:02:44:e3:0f:48:a2:3f:4d:51:97:97:56:
35:a1:5d:c4:34:37:28:ff:30:fa:1f:e5:39:63:f6:
04:a6:ce:4f:ea:0e:17:39:2e:da:31:fc:c5:c1:36:
ba:6f:27:fe:80:b5:53:69:e1:b1:56:17:0c:e8:81:
98:fe:38:89:60:5a:69:9f:46:f2:79:5a:5e:61:4a:
14:60:9b:22:cf:23:72:08:36:a0:95:19:9a:ad:08:
9f:29:ea:36:0d:2e:b8:ab:dc:9c:ef:70:c7:84:a0:
b0:09:2b:58:bc:06:55:a0:4d:55:5b:b3:e3:ae:53:
c8:3b:a8:5a:34:b1:7e:0b:7e:0d:09:22:0d:fb:f3:
c8:7b:a6:e8:54:fb:05:b0:4e:7d:7d:e6:84:b5:8f:
e8:19:18:51:3f:aa:55:6a:58:ac:a7:ee:f4:23:c5:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:D4:82:89:0D:14:A0:B0:04:FB:E2:97:C8:19:E3:D5:15:C0:04
X509v3 Authority Key Identifier:
keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ff:6f:16:32:f0:89:27:bc:75:c6:d3:b2:af:8a:c6:12:2b:
9a:00:15:ea:3e:dd:78:70:61:b5:2d:1d:2c:af:3e:07:bb:92:
06:e3:25:c3:dc:7b:5c:e6:56:f3:d0:e8:77:e4:dd:04:46:08:
8e:67:91:bc:a0:c5:b1:11:13:15:7c:27:ec:dc:0b:34:b5:6d:
16:ef:01:a4:db:f9:56:b3:4d:8d:27:80:59:55:33:fd:db:8c:
c8:43:62:0a:5c:57:8d:d4:97:e7:d5:36:4f:48:f7:87:3c:a3:
75:97:f2:96:83:c7:1f:df:b5:6c:c8:82:6b:7f:d9:44:f0:cb:
1f:68:97:e7:b6:f6:b5:62:82:eb:16:0a:e3:c8:bc:fd:84:05:
64:e1:d3:ce:97:e6:8a:30:df:5b:b3:c9:dc:07:62:fd:61:26:
9c:13:bf:cc:c5:53:b4:ea:51:9d:2b:f0:74:f4:e7:79:9f:17:
b5:5a:58:d6:33:bc:94:43:45:f2:fd:98:ab:28:1a:b0:eb:36:
84:ff:41:c5:54:a7:d5:c9:0c:2d:5e:08:95:a0:55:63:fe:9a:
61:9d:94:da:4d:0d:63:37:b8:02:9a:e4:49:a5:8d:2c:d1:d3:
e1:eb:18:8b:e9:44:09:37:3d:ad:e6:e6:a5:7a:1b:d3:a2:03:
de:84:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:23 2026 by rpki-client