
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
File: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json)
Hash identifier: gXJi0TjBNULdqgQasGSYNBZiWMu6obZchTx96blRIjQ=
Subject key identifier: 07:52:61:5B:2F:A6:F8:52:9A:70:C0:7B:2D:77:4D:7E:0E:D1:28:40
Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Certificate issuer: /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Certificate serial: 07AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
Manifest number: 07A1
Signing time: Sat 28 Feb 2026 21:57:20 +0000
Manifest this update: Sat 28 Feb 2026 21:57:20 +0000
Manifest next update: Sat 07 Mar 2026 21:57:20 +0000
Files and hashes: 1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: RkaEFVveoCttsZ3E1Xt5ltKMZt48nNtx+AeLpKK4Ubs=)
2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: i8/IFSYwWUk6rs8s1RFMYFfnT+N6zOnbgSTi2rrV21Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl
rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B232, serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Validity
Not Before: Feb 28 21:57:20 2026 GMT
Not After : Mar 7 21:57:20 2026 GMT
Subject: CN=69a364c0-1f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:08:93:9b:13:ce:81:e3:b0:1b:83:77:30:
ff:71:0d:9e:d3:cf:09:47:7c:ce:04:bb:8d:dc:58:
e7:fd:92:04:78:9b:6f:04:8b:c3:c5:fd:ab:66:89:
d2:9b:91:47:ee:1d:43:ea:b3:ab:e2:83:ec:ed:58:
42:aa:7d:7d:21:4d:bf:e7:04:f3:6f:77:23:4e:ab:
d8:6a:28:05:d8:e4:67:01:3f:1b:39:7d:5e:53:24:
ad:de:fb:49:e3:26:21:95:2c:15:81:ab:4b:7d:1e:
94:61:87:6b:fe:23:83:91:39:36:ef:e6:9b:29:54:
af:12:f8:b5:a6:0d:2d:d4:20:43:a4:f3:0f:83:0b:
78:67:4a:58:f7:b9:02:bc:82:61:a9:2a:e4:68:00:
39:8f:71:bd:ab:00:ab:d1:ba:c7:42:8c:bd:0c:77:
03:e5:dc:09:06:5f:40:05:8f:fa:c8:74:4c:e3:c1:
ac:46:c6:1c:97:4a:cf:ba:de:12:0b:d8:e1:ae:f1:
9e:2c:7b:92:ff:bc:0c:10:b6:55:e7:49:46:d6:77:
a1:57:e0:b5:fc:2e:6c:70:80:48:33:19:35:b8:a6:
93:9e:f0:94:f4:81:b6:4e:44:3e:c3:81:fc:04:18:
bf:44:80:84:d6:3a:62:b3:cb:10:d3:06:e6:7d:76:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:52:61:5B:2F:A6:F8:52:9A:70:C0:7B:2D:77:4D:7E:0E:D1:28:40
X509v3 Authority Key Identifier:
keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:50:81:8b:c5:04:65:36:b7:f5:67:e5:24:d4:77:7c:f4:4b:
01:9f:54:27:91:e8:cf:bb:c7:1d:dd:b1:08:e6:69:d5:c3:7f:
90:e4:b0:16:cd:cd:a6:37:fd:86:8f:91:c1:8e:4e:80:05:5b:
30:fe:5e:f0:2f:a2:e0:0c:a4:91:f8:6a:12:c8:7f:28:5b:6c:
76:8d:00:78:7d:15:7d:76:45:d3:9a:fd:8b:2e:64:c5:6a:3d:
c1:14:99:f3:92:c6:e3:ba:fb:2b:f7:6b:15:05:cb:fb:ec:7c:
e4:bc:17:f3:b9:fe:7f:14:e9:d1:13:0c:46:6a:cf:24:2a:d7:
ea:16:b1:89:34:ee:39:48:7f:a1:8d:cf:43:0a:f6:f9:8d:08:
b9:61:f1:d8:d5:40:58:09:1e:86:5c:64:f9:35:2e:6a:35:4a:
d6:f9:04:2f:c6:28:f2:37:91:36:9a:0a:de:6e:8c:04:01:d2:
4e:15:98:14:00:50:52:db:0f:f7:26:49:1d:ad:a8:37:06:1f:
f2:ff:af:cd:9b:04:27:11:2c:cc:cb:64:15:b5:2b:4f:2b:a8:
a0:f2:e8:ac:b9:92:57:d2:c6:4e:7d:f1:d6:9c:0d:0e:70:cc:
f0:36:f3:2b:7e:98:91:00:69:db:6f:01:79:7b:33:7d:43:c3:
b3:15:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:31 2026 by rpki-client