
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier: xcVZUA2DQgs+PNIAUHR8KeOJ2TDTud/o4joOElbE4+g=
Subject key identifier: C1:27:A2:84:BE:D1:FE:65:8B:B1:8F:5D:F1:87:28:8D:AA:07:5F:19
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial: 1303
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number: 12EF
Signing time: Sat 28 Feb 2026 17:06:14 +0000
Manifest this update: Sat 28 Feb 2026 17:06:14 +0000
Manifest next update: Sat 07 Mar 2026 17:06:14 +0000
Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: r/0qZNy6vgwFx6C5h1lD5C3nnZgjTfd5uccnR2Mzq3E=)
2: 35615A30C84511ED90A61540C4F9AE02.roa (hash: S7qopPNPvDDhohJ5GF/e64A8sjKuyyCv3KgOWSOnrzg=)
3: 3489528EC84511ED90A61540C4F9AE02.roa (hash: Xp+CN4LqcT/0Y+vEkAwmxb+Nkk14BBORVU2fsmUOWF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4867 (0x1303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Validity
Not Before: Feb 28 17:06:14 2026 GMT
Not After : Mar 7 17:06:14 2026 GMT
Subject: CN=69a32086-5320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:0a:75:f2:ce:db:c2:c3:4a:5a:58:f6:b8:
c1:e0:09:92:05:98:92:0e:34:e1:af:72:67:44:5b:
6f:24:fd:f5:cb:6c:d2:0f:3d:e9:1a:61:74:49:e2:
65:30:a7:f2:6e:02:da:ba:d2:94:97:9b:c9:a9:b2:
f3:b5:d0:41:7f:b5:61:0d:0a:b3:ee:fb:51:1c:9c:
bf:1b:31:4f:6c:bb:af:99:25:ce:63:5c:5b:38:0a:
e5:ca:59:a5:ee:4f:23:c7:28:c9:04:24:b7:72:fe:
98:f0:67:03:64:22:cb:3a:25:4a:05:ff:ec:20:58:
be:75:9e:7a:02:e5:4d:f2:73:3b:20:af:e1:4e:05:
2c:7d:e6:9c:6e:1b:2b:ff:e6:e0:1e:53:ab:2f:96:
cc:a7:a2:d2:a9:a4:eb:a5:6c:06:f5:5f:de:e4:96:
16:33:b0:ff:47:ba:48:b2:73:18:b0:ee:74:c6:48:
9f:4a:71:73:66:0e:83:63:97:8c:55:01:6c:5d:71:
f1:27:7a:7a:89:84:ea:83:a1:07:b4:98:6e:42:f5:
c5:ec:ee:c1:66:8d:fd:67:6b:cd:f2:86:b0:65:79:
64:5c:9d:68:7e:83:44:5f:e5:ba:83:e4:03:b0:bc:
f6:b8:37:ff:71:b0:12:25:7d:8b:d1:c4:c5:57:32:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:A2:84:BE:D1:FE:65:8B:B1:8F:5D:F1:87:28:8D:AA:07:5F:19
X509v3 Authority Key Identifier:
keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:50:a9:c3:8f:b8:f2:b7:af:1f:c2:40:08:3b:02:50:6b:7a:
68:8c:81:4f:d2:61:44:96:37:08:89:52:a3:d3:ea:5c:16:64:
81:dd:1d:3a:0c:03:62:be:58:93:d1:63:88:a3:ae:f7:28:5c:
42:50:d4:78:17:1e:04:e7:ab:84:84:8d:73:6c:b3:d7:b3:c6:
9f:93:4f:d8:0f:d9:18:5b:d6:68:89:77:43:60:30:1e:4f:36:
e4:bb:e0:82:e7:a3:05:86:0f:a4:31:67:27:6e:46:dc:77:1b:
c6:60:f4:63:8d:a2:87:da:23:be:34:5f:15:8d:7b:0a:ed:95:
12:47:e7:35:1f:f3:d8:ef:4c:1d:e8:34:fc:df:25:4d:ec:83:
5a:fe:0d:e5:c2:4b:07:50:e2:0e:47:22:4c:a1:fe:8d:a5:81:
2e:ba:35:e8:ec:0b:07:db:08:b9:ea:62:30:12:2e:8d:34:e4:
5b:a7:0c:33:1b:55:33:ea:22:36:30:6b:da:24:80:70:b7:96:
f3:5a:23:24:3e:6d:0b:79:9b:9a:cf:df:0d:95:21:b3:cf:9c:
4a:cd:5a:49:1b:ca:57:6b:19:75:4d:ae:e4:92:53:35:f8:f4:
51:e8:25:4f:5d:99:24:22:6f:0a:24:3c:7b:78:91:96:34:10:
06:aa:cb:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5
Mzk3N0M1QUYwHhcNMjYwMjI4MTcwNjE0WhcNMjYwMzA3MTcwNjE0WjAYMRYwFAYD
VQQDDA02OWEzMjA4Ni01MzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+MKdfLO28LDSlpY9rjB4AmSBZiSDjThr3JnRFtvJP31y2zSDz3pGmF0SeJl
MKfybgLautKUl5vJqbLztdBBf7VhDQqz7vtRHJy/GzFPbLuvmSXOY1xbOArlylml
7k8jxyjJBCS3cv6Y8GcDZCLLOiVKBf/sIFi+dZ56AuVN8nM7IK/hTgUsfeacbhsr
/+bgHlOrL5bMp6LSqaTrpWwG9V/e5JYWM7D/R7pIsnMYsO50xkifSnFzZg6DY5eM
VQFsXXHxJ3p6iYTqg6EHtJhuQvXF7O7BZo39Z2vN8oawZXlkXJ1ofoNEX+W6g+QD
sLz2uDf/cbASJX2L0cTFVzIfFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEnooS+
0f5li7GPXfGHKI2qB18ZMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx
QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy
RmNWMWh0MEFUcmlUbDN4YTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1VCpw4+48revH8JACDsCUGt6aIyBT9JhRJY3CIlSo9PqXBZkgd0dOgwDYr5Y
k9FjiKOu9yhcQlDUeBceBOerhISNc2yz17PGn5NP2A/ZGFvWaIl3Q2AwHk825Lvg
guejBYYPpDFnJ25G3HcbxmD0Y42ih9ojvjRfFY17Cu2VEkfnNR/z2O9MHeg0/N8l
TeyDWv4N5cJLB1DiDkciTKH+jaWBLro16OwLB9sIuepiMBIujTTkW6cMMxtVM+oi
NjBr2iSAcLeW81ojJD5tC3mbms/fDZUhs8+cSs1aSRvKV2sZdU2u5JJTNfj0Uegl
T12ZJCJvCiQ8e3iRljQQBqrLFA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:27 2026 by rpki-client