
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
File: bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json)
Hash identifier: bHpzW4wvDfzxI9OppgQ4NttpMWMjwcTB9pDA39DijOY=
Subject key identifier: D9:CA:CA:D1:88:04:E9:84:7A:DC:B0:62:10:2B:7D:C1:79:82:11:F8
Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
Certificate serial: 1B3B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
Manifest number: 1B25
Signing time: Wed 18 Feb 2026 15:32:24 +0000
Manifest this update: Wed 18 Feb 2026 15:32:24 +0000
Manifest next update: Wed 25 Feb 2026 15:32:24 +0000
Files and hashes: 1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: z7xeMf28lCKt77WgrZk3tlvbRYVyiDA18bEEAxyX5UY=)
2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: 0/HP0DwNYOfkRXXhvxhJ7qmLcNQDOwmKr3HHIF1F5nU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl
rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6971 (0x1b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
Validity
Not Before: Feb 18 15:32:24 2026 GMT
Not After : Feb 25 15:32:24 2026 GMT
Subject: CN=6995db88-f11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:b7:bc:54:0e:45:9c:57:5b:c4:06:23:41:
e9:10:46:0e:55:be:0d:dd:d3:53:0a:93:af:9d:0b:
83:6d:a7:92:57:d9:5f:a8:fa:0a:1d:ff:82:01:11:
60:66:22:dc:ef:31:5d:3e:91:11:ba:be:37:30:91:
30:58:89:60:cc:47:b7:e6:6e:60:cb:1a:94:55:3a:
38:2b:42:20:7a:06:81:85:aa:96:94:d6:d1:7f:ae:
5c:9a:25:11:2c:02:8b:d1:3f:95:76:74:2b:60:0a:
8f:44:78:e8:1b:fa:93:ec:dc:c9:af:a8:b3:ed:c8:
13:8f:87:83:85:6e:0e:6e:4b:c3:79:d8:0c:ea:d2:
9c:0e:7f:57:55:80:20:98:2c:5b:8b:8c:44:fc:79:
fc:5f:fa:1d:e2:0f:9a:61:4f:ce:10:aa:32:d4:b4:
ca:32:e1:77:50:8a:55:f5:a4:76:c0:46:75:2c:d2:
95:64:48:b7:20:a0:8d:90:76:d3:bf:93:71:b8:56:
03:0f:4a:cf:ce:91:75:e6:6d:b4:19:78:48:da:7a:
87:dc:2c:1b:61:e2:48:46:75:0f:e9:6f:f6:87:e8:
6d:b8:b2:38:09:ba:c5:a6:7a:a4:ec:b6:48:a9:c3:
96:c6:e6:e7:e5:1c:59:ea:71:0b:ef:76:cb:50:a8:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CA:CA:D1:88:04:E9:84:7A:DC:B0:62:10:2B:7D:C1:79:82:11:F8
X509v3 Authority Key Identifier:
keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:8e:5f:c2:82:1d:a2:25:67:b1:6c:42:be:81:ac:49:1a:fb:
bb:a5:b2:14:b5:c0:a9:e4:6c:4d:31:8a:50:7c:da:e1:4c:62:
92:09:1d:62:b7:3b:18:96:15:b8:dc:c2:5f:17:f3:61:e7:95:
31:ea:b5:f6:5f:f6:1b:8d:e3:85:c6:30:29:d7:e6:4c:5b:58:
4e:d8:b4:6f:ca:d3:cb:36:78:fc:e5:1d:94:bd:be:3b:11:1f:
e0:f3:a2:97:58:d0:40:af:d4:64:86:fc:65:40:22:0e:ba:12:
d7:13:46:73:ea:6f:49:ac:59:c0:0b:c5:c3:46:7d:b6:21:d6:
f9:2f:2a:f2:a7:bd:9f:21:00:13:a3:4a:4f:36:20:1d:e7:b3:
e0:65:b6:e1:71:69:2f:aa:01:d2:a0:01:fc:47:23:74:30:f2:
cc:e0:7e:99:f8:22:0d:bd:16:89:af:55:51:ea:8e:c0:4c:0c:
b2:57:c6:bf:5c:99:3a:a3:a7:68:fb:78:5f:03:57:ca:c9:04:
6c:e6:24:23:88:4c:f7:b6:e2:5d:97:56:bc:e7:96:9d:1d:d8:
ac:4b:33:6c:5f:2b:49:ba:ef:b4:2c:0c:2f:10:49:d9:52:3d:
0c:f5:45:3c:40:9e:53:79:f6:0f:3a:16:fb:3e:be:68:e4:f6:
6a:f6:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:30 2026 by rpki-client