
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json)
Hash identifier: jO0b5fRpv63AOWxpx9EaJDMAWWQ4iQO9ZTCKH5SuygY=
Subject key identifier: 59:78:E5:08:EA:47:14:EF:8C:4C:9A:7A:F9:EB:2C:25:37:A5:13:91
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial: 1D93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
Manifest number: 1D7E
Signing time: Thu 16 Apr 2026 16:04:48 +0000
Manifest this update: Thu 16 Apr 2026 16:04:48 +0000
Manifest next update: Thu 23 Apr 2026 16:04:48 +0000
Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: Pbxn8LfqQV33VeLfHScXIE1p9nC7SWzTjS4bAudyIJo=)
2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: HRZCFiI8waPHBtIDiuVXCKRbNp4ZHUWwRgIvIZoEOO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7571 (0x1d93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Validity
Not Before: Apr 16 16:04:48 2026 GMT
Not After : Apr 23 16:04:48 2026 GMT
Subject: CN=69e108a0-70ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:ab:fd:75:5b:46:53:4d:5b:4f:ba:40:af:
ef:df:4f:99:d6:1a:53:c7:45:d2:63:33:21:42:e2:
e7:85:05:71:ff:79:59:8e:82:df:ca:de:a2:00:6d:
e1:d9:1a:5a:d2:b7:70:17:3c:7d:91:ae:ee:aa:46:
7e:26:38:d2:14:51:28:03:27:ef:4e:4b:70:17:3f:
e7:c7:ab:52:cf:e3:97:98:32:80:25:17:a4:1c:9c:
77:70:6d:f2:fd:80:98:a8:c3:0a:bc:ac:05:94:97:
15:88:1d:4b:74:ce:4f:04:0f:4b:96:9f:bb:1b:f3:
c8:b5:86:cb:a0:9b:73:fb:77:52:e9:bc:de:d4:c9:
16:fa:fc:9c:49:df:0f:29:b9:ee:7d:bb:24:fb:e3:
1e:91:cc:5c:f9:9f:6c:4d:a8:70:49:f3:a9:e7:e3:
49:90:f6:22:1f:ce:07:54:8b:68:55:16:4f:0e:63:
8a:d0:98:b1:3b:38:b8:94:49:83:57:8a:b6:53:54:
e6:eb:cb:41:a7:61:05:a8:be:35:a4:c0:fb:3a:5b:
7a:88:3f:34:57:d8:bb:66:46:08:00:84:e5:3e:44:
38:e3:89:72:f6:21:c4:bc:14:0f:34:42:3e:de:3c:
37:f2:5a:33:d6:ee:cf:8d:ca:47:11:de:2a:6b:b2:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:78:E5:08:EA:47:14:EF:8C:4C:9A:7A:F9:EB:2C:25:37:A5:13:91
X509v3 Authority Key Identifier:
keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:28:0a:33:ab:67:78:f2:a4:24:c1:10:9a:70:c2:62:fc:7e:
be:17:66:a5:15:c5:ed:85:1c:83:74:19:8f:c2:59:14:e1:4e:
ff:b2:1c:7f:b4:aa:cd:40:9c:14:84:5c:cf:63:30:36:9e:90:
18:4f:90:6f:d3:bf:8a:63:67:71:95:67:a4:7e:8e:99:f1:92:
1b:17:49:11:ed:66:b2:5f:5f:0c:b2:b5:3e:4e:79:35:f7:27:
d2:bf:a5:eb:d4:84:99:79:50:cd:e7:6c:e6:fe:1b:31:c5:42:
ef:c7:20:1f:36:48:00:56:00:77:ff:a1:81:1c:08:65:d5:95:
82:ea:e7:6e:6e:b5:c5:86:46:99:9a:60:24:c1:85:c2:27:80:
dc:7f:21:dc:7d:bd:47:7e:97:94:36:7a:55:24:24:2f:13:1f:
4e:b3:e9:4d:e8:47:25:f0:77:3c:7a:b9:b1:3d:62:b6:fd:c7:
25:71:08:d9:e7:23:10:0c:6c:c9:c3:2b:8e:82:05:c1:6e:45:
73:f4:e3:1f:66:45:b3:8d:90:03:19:e9:c0:6c:4b:75:c3:52:
6b:e4:d0:6e:dd:d0:46:d5:01:53:14:87:81:50:41:66:0c:7b:
bb:86:33:6b:28:cb:a9:46:35:12:b6:0a:01:e0:a9:02:de:e7:
48:d7:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:46 2026 by rpki-client