
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
File: bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json)
Hash identifier: LRy1X3TLiCFVqHinUKyXq/mwSh8i4nWaRWgIbE8RLGg=
Subject key identifier: 2E:24:48:47:59:45:8A:D5:14:1D:77:FF:54:F1:63:7F:36:29:13:1A
Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
Certificate issuer: /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Certificate serial: 04EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
Manifest number: 04E5
Signing time: Wed 19 Aug 2026 00:06:27 +0000
Manifest this update: Wed 19 Aug 2026 00:06:26 +0000
Manifest next update: Wed 26 Aug 2026 00:06:26 +0000
Files and hashes: 1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: Sfsd1V41Q51GvgQN7dmU+S69flCdNrymp/7hn/pfDhA=)
2: 8B729608B62F11EFB2DE315FC4F9AE02.roa (hash: htZKbTCRw2kolIOs+1xX3ByAdUKRSkWwNNKR43qldvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EA16, serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Validity
Not Before: Aug 19 00:06:26 2026 GMT
Not After : Aug 26 00:06:26 2026 GMT
Subject: CN=6a84f383-753c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:39:c8:5b:8d:de:1a:c8:70:7c:16:ea:1b:
31:97:9b:e2:96:db:b7:f5:c3:27:f4:b2:06:71:b0:
33:e1:ed:02:73:32:63:70:7e:53:dd:d0:bc:60:a3:
ed:1b:5b:66:72:af:da:f3:1a:2b:a8:92:c1:77:f9:
48:8b:69:cd:fd:6c:a1:c0:96:ef:fa:38:3a:aa:96:
b1:2c:07:ca:45:57:de:83:96:38:f6:4d:76:07:fb:
21:2e:cd:88:02:b6:05:30:67:0e:00:05:e4:de:9b:
46:fb:cf:e9:34:aa:ce:87:10:b2:96:7c:3b:fe:d5:
7b:63:e4:86:30:6e:d0:d5:87:40:fd:b4:5b:36:f9:
5a:22:c0:5b:0b:58:01:84:b1:7f:95:0b:3b:95:6b:
a7:9d:24:c0:70:94:ec:6b:ef:61:4e:12:f0:b8:9a:
e8:04:4e:a0:2d:f4:cb:01:a3:d7:61:68:44:a2:5e:
e9:e6:ba:9f:6a:81:56:8b:e2:f8:71:49:34:4e:09:
4b:6f:ce:f9:70:df:7b:bf:ce:47:9a:36:b8:95:99:
ed:74:98:b6:10:e9:0b:88:d1:c3:a1:fe:31:09:9c:
0f:c5:10:18:5f:e3:ad:51:9c:bc:e1:0f:11:9d:e1:
01:24:25:44:bb:c3:ba:90:5e:a9:1b:95:81:83:58:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:48:47:59:45:8A:D5:14:1D:77:FF:54:F1:63:7F:36:29:13:1A
X509v3 Authority Key Identifier:
keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:04:7c:fd:b7:78:1f:b3:c2:e6:97:16:b4:d7:57:24:23:41:
5b:34:c0:6e:c9:b2:8e:77:f4:03:58:51:06:80:87:e1:13:65:
6f:d8:c0:36:c8:45:11:72:27:38:2b:1b:1d:b5:73:10:cd:50:
fd:97:e2:01:8a:f7:de:37:70:cf:24:30:04:f3:4c:df:34:d3:
6b:81:7e:42:54:79:98:dc:78:4c:cf:ab:ae:1d:b2:76:24:60:
64:3d:12:54:c6:93:c1:74:1d:ff:99:bd:12:b1:e4:79:02:ed:
0b:79:c9:29:f5:95:57:ed:64:89:45:6e:b2:c4:24:db:d9:02:
70:49:b3:69:e4:e9:71:70:ec:7d:86:b0:7e:56:ef:d7:45:67:
54:44:45:63:c1:e9:3d:ed:c0:35:20:84:39:49:5b:75:ca:08:
80:58:12:9e:fb:1b:02:c4:bb:6a:f7:47:bf:cd:49:d5:3a:99:
6c:3d:ac:77:9a:cf:3f:d7:8c:4a:73:72:e4:f7:84:5e:92:d5:
e0:76:4b:e4:a1:71:55:58:c1:ea:85:ba:14:eb:db:21:8f:dc:
3a:90:26:65:06:ed:07:8c:2b:e1:46:50:ed:73:23:1b:ce:47:
e3:dc:ba:a0:d7:63:31:0a:41:3d:2f:94:0b:66:c5:53:43:ad:
dc:b7:f8:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VBMTYxMTAvBgNVBAUTKDZFMTQ4QTBEMDg1NzgwMzg2QTgxN0RDRDhENjQ2OTU0
MTFDNzY4MzgwHhcNMjYwODE5MDAwNjI2WhcNMjYwODI2MDAwNjI2WjAYMRYwFAYD
VQQDEw02YTg0ZjM4My03NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtqI5yFuN3hrIcHwW6hsxl5viltu39cMn9LIGcbAz4e0CczJjcH5T3dC8YKPt
G1tmcq/a8xorqJLBd/lIi2nN/WyhwJbv+jg6qpaxLAfKRVfeg5Y49k12B/shLs2I
ArYFMGcOAAXk3ptG+8/pNKrOhxCylnw7/tV7Y+SGMG7Q1YdA/bRbNvlaIsBbC1gB
hLF/lQs7lWunnSTAcJTsa+9hThLwuJroBE6gLfTLAaPXYWhEol7p5rqfaoFWi+L4
cUk0TglLb875cN97v85Hmja4lZntdJi2EOkLiNHDof4xCZwPxRAYX+OtUZy84Q8R
neEBJCVEu8O6kF6pG5WBg1hR/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4kSEdZ
RYrVFB13/1TxY382KRMaMB8GA1UdIwQYMBaAFG4Uig0IV4A4aoF9zY1kaVQRx2g4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUExNi80NTJGN0FFRTc3
N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdEaHFnWDNOaldScFZCSEhh
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoU0tEUWhYZ0RocWdYM05qV1JwVkJISGFEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUExNi80NTJGN0FFRTc3N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdE
aHFnWDNOaldScFZCSEhhRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxQR8/bd4H7PC5pcWtNdXJCNBWzTAbsmyjnf0A1hRBoCH4RNlb9jANshFEXIn
OCsbHbVzEM1Q/ZfiAYr33jdwzyQwBPNM3zTTa4F+QlR5mNx4TM+rrh2ydiRgZD0S
VMaTwXQd/5m9ErHkeQLtC3nJKfWVV+1kiUVussQk29kCcEmzaeTpcXDsfYawflbv
10VnVERFY8HpPe3ANSCEOUlbdcoIgFgSnvsbAsS7avdHv81J1TqZbD2sd5rPP9eM
SnNy5PeEXpLV4HZL5KFxVVjB6oW6FOvbIY/cOpAmZQbtB4wr4UZQ7XMjG85H49y6
oNdjMQpBPS+UC2bFU0Ot3Lf4vg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:19 2026 by rpki-client