
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier: wuGViZIuMxPB54XTIeWpEf7aPVUOBWIrysgcbXTPTPM=
Subject key identifier: E8:7F:88:93:71:3A:10:88:89:21:D9:70:AA:5A:4B:D6:79:62:1A:EA
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial: 137C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number: 1364
Signing time: Mon 12 Oct 2026 17:02:41 +0000
Manifest this update: Mon 12 Oct 2026 17:02:41 +0000
Manifest next update: Mon 19 Oct 2026 17:02:41 +0000
Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: 0lmodRPFdPQISa7SfHR/8aX10pLKuNn9FvX4ed180mg=)
2: 35615A30C84511ED90A61540C4F9AE02.roa (hash: ikwRwX6HznSAvB0gllaQ7OaCqCsraBq8/S0KLelO+q8=)
3: 3489528EC84511ED90A61540C4F9AE02.roa (hash: IAHu/i87YCurf7TsutZ4NJzzxkW8+ff7z519ukOdfYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 17:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4988 (0x137c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Validity
Not Before: Oct 12 17:02:41 2026 GMT
Not After : Oct 19 17:02:41 2026 GMT
Subject: CN=6acd12b1-61e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:cc:f6:11:12:01:4a:ff:2c:2b:fe:7c:7e:
0c:93:c4:f6:95:18:48:89:9c:c2:5b:82:ac:44:49:
f6:a4:9c:83:47:fc:1d:ab:22:e8:66:d2:48:c4:4e:
a2:1b:01:a7:1b:b3:d3:9a:b0:1e:a3:c9:c6:97:bb:
18:00:67:86:37:65:1d:b6:9b:f1:b0:d6:62:7a:6c:
1f:0d:35:3e:9d:90:2b:d6:26:b0:73:4b:d6:68:52:
70:dc:30:c5:95:aa:46:7c:7a:5c:89:e1:e4:d6:41:
7c:07:a1:0f:e9:bd:96:8d:c3:4f:15:04:65:c4:03:
ab:dd:39:4b:a1:84:59:f8:83:21:7c:7b:37:80:31:
cc:d8:63:05:a9:81:80:70:f1:63:ee:a2:fe:7f:7e:
00:4b:fc:bf:5a:80:79:49:b3:0c:e8:b4:43:04:bb:
71:f9:d4:b4:61:2f:a6:a8:f7:b4:4c:32:06:9a:96:
a8:24:88:eb:4e:e4:d6:cf:01:66:a3:73:2e:72:a7:
d3:fc:11:c0:7d:8b:9e:72:28:8d:83:d0:0f:8e:5e:
29:79:aa:f8:60:12:8d:63:1e:fd:1d:02:d2:99:6b:
37:55:a9:e3:5c:01:a0:54:3e:d5:d5:0d:5b:60:c6:
d8:23:da:ea:16:06:ab:31:52:5d:9c:8f:5b:63:5f:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:88:93:71:3A:10:88:89:21:D9:70:AA:5A:4B:D6:79:62:1A:EA
X509v3 Authority Key Identifier:
keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ae:03:55:31:2d:d8:68:80:e9:91:c6:89:0a:51:40:6b:b6:
2a:58:16:25:5b:46:9a:be:0b:87:bc:96:ca:db:f2:96:4c:ce:
f3:6a:56:f2:dc:ed:2a:b9:65:3f:ec:f1:28:da:7f:7c:3a:d8:
d6:cc:2c:9c:5b:b3:6c:b4:1c:b1:f8:b6:a8:f9:4a:cf:f7:47:
48:f9:19:bf:10:b5:e9:32:65:b5:c6:a9:9c:0a:cd:2c:77:52:
c4:73:ad:3d:6b:1e:d6:88:9b:34:44:66:da:5d:87:98:ce:cd:
68:90:02:39:b1:97:93:32:3e:18:79:d0:11:58:61:ca:a6:45:
22:83:62:d5:57:fd:e6:03:86:37:c8:02:68:3e:7b:a5:19:dc:
6d:21:0c:84:e5:d9:40:00:f7:94:bb:2a:61:d2:01:66:ba:32:
7b:28:74:1d:e0:c7:d1:1a:22:f6:82:0c:02:9d:af:55:26:c4:
fa:a1:fe:6a:4f:5f:b3:b5:a7:e4:60:cb:9f:c1:f3:12:b2:f5:
d5:67:53:37:89:58:2f:e0:f9:0a:c3:2c:41:62:42:e5:80:a9:
9b:66:86:ca:bd:c9:e4:83:5a:69:a6:cd:ce:bf:c2:b0:3b:a9:
9e:51:67:cd:b1:38:df:a1:a4:01:70:8c:12:19:f8:64:f6:e9:
53:1b:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 14:13:23 2026 by rpki-client