
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json)
Hash identifier: jhWHOLDUdEnyYG8pzJbOl610Ab/SwtBBrm4+jP8muno=
Subject key identifier: 70:96:94:65:D7:0F:86:FD:C1:33:E0:9C:72:3E:4C:4C:5C:43:BE:F6
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial: 1DBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
Manifest number: 1DA1
Signing time: Fri 12 Jun 2026 16:05:10 +0000
Manifest this update: Fri 12 Jun 2026 16:05:09 +0000
Manifest next update: Fri 19 Jun 2026 16:05:09 +0000
Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: Xg2AT1ylpOpSKGb0RtCwha92NTojoMZ+D4HiLEChZsI=)
2: 4CBDBA5E3F0011F18130B663C8833773.roa (hash: MYIZdYIrRMX8GOTnK8Yq+Fr2Q47kM6T/tbwrjmOwZ2A=)
3: 6C2E2E523E6311F18F888BA6CC833773.roa (hash: qxnvMNV+Nfyux+IbECFlh8NQ06N9bLyo7PcRflZ+IKo=)
4: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: HRZCFiI8waPHBtIDiuVXCKRbNp4ZHUWwRgIvIZoEOO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7612 (0x1dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Validity
Not Before: Jun 12 16:05:09 2026 GMT
Not After : Jun 19 16:05:09 2026 GMT
Subject: CN=6a2c2e35-f54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:1b:6d:5a:49:d4:16:08:aa:f1:29:10:a6:
00:0b:32:02:e8:1b:d1:b9:69:ff:84:58:46:ca:5a:
49:04:62:38:70:19:b0:bc:64:d9:e5:be:a2:7e:77:
7e:1f:33:5a:8b:01:aa:3c:48:10:75:f6:6b:fd:cd:
5a:f3:44:03:60:56:b7:05:c7:cc:fa:f1:bd:d7:ca:
a9:83:3c:9a:d4:80:98:7e:56:8a:2f:b7:38:8b:ed:
ef:12:c9:17:06:01:09:51:35:a6:8f:48:7d:32:6f:
3d:f2:d5:55:13:b3:05:83:85:9a:d7:e3:a7:90:32:
15:ce:7b:bf:c3:34:e2:ac:d5:7b:87:c9:e5:02:19:
13:3b:82:ec:d5:5a:93:f5:5d:e8:33:c5:a2:cc:4c:
00:72:e5:36:c1:b1:f1:a8:8b:32:1e:54:24:10:65:
77:56:8a:11:d8:07:87:ef:f0:c1:69:a1:82:2b:76:
16:6f:9b:8e:51:af:9d:f3:5f:dd:ed:c2:5a:1e:73:
a9:28:fd:81:22:00:d5:30:86:39:7b:32:3f:17:09:
9e:cd:49:2f:99:b0:1b:94:2d:58:bb:84:bf:71:24:
8d:dc:43:46:80:ca:99:5a:43:53:7a:8d:0e:e9:dd:
53:74:d3:ff:66:2d:0c:28:70:0a:47:97:49:e0:87:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:94:65:D7:0F:86:FD:C1:33:E0:9C:72:3E:4C:4C:5C:43:BE:F6
X509v3 Authority Key Identifier:
keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:24:eb:98:c0:c1:e0:a3:38:1a:f0:c8:dd:ff:d0:49:be:bf:
78:b6:a2:ec:b8:04:dc:5a:a1:39:b6:51:d9:ce:92:ef:24:65:
e8:c7:82:2b:4f:63:bc:17:43:7d:e8:3a:06:cf:81:66:d4:bb:
56:12:00:10:bb:17:d8:16:c9:cc:50:b7:48:94:d4:03:9a:46:
7f:8c:58:e2:c8:42:aa:f4:43:6c:d6:85:c7:8d:49:e6:22:21:
de:1f:e1:b9:f1:47:29:cf:d8:01:57:29:a0:51:ed:c8:b9:fa:
85:ae:74:63:9a:0f:1f:c9:bf:df:84:52:dc:fc:b0:bb:2f:44:
23:98:d8:0e:87:ed:2d:3c:fc:6b:6c:82:73:60:76:e6:28:54:
62:f4:75:3e:b6:9c:3a:9c:17:fd:2f:7f:7c:ba:1f:02:f7:9b:
00:09:fb:c1:28:f2:1c:83:80:06:f3:c4:ae:ee:6e:74:b1:73:
7e:f4:bf:32:3b:a8:12:73:7c:34:d6:1a:24:c9:4d:42:40:b6:
9a:88:e4:d0:2c:a8:fe:40:02:4f:b0:38:ec:a2:ae:3b:bd:0b:
cd:c6:7f:2b:f8:f0:89:d9:4c:76:0b:e8:a1:ed:72:a6:8d:5b:
67:86:a5:43:39:c8:ec:bb:8c:63:7e:2e:04:35:b3:f6:92:bf:
00:e0:c4:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB
ODEwMzQ0NEEwHhcNMjYwNjEyMTYwNTA5WhcNMjYwNjE5MTYwNTA5WjAYMRYwFAYD
VQQDEw02YTJjMmUzNS1mNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA18gbbVpJ1BYIqvEpEKYACzIC6BvRuWn/hFhGylpJBGI4cBmwvGTZ5b6ifnd+
HzNaiwGqPEgQdfZr/c1a80QDYFa3BcfM+vG918qpgzya1ICYflaKL7c4i+3vEskX
BgEJUTWmj0h9Mm898tVVE7MFg4Wa1+OnkDIVznu/wzTirNV7h8nlAhkTO4Ls1VqT
9V3oM8WizEwAcuU2wbHxqIsyHlQkEGV3VooR2AeH7/DBaaGCK3YWb5uOUa+d81/d
7cJaHnOpKP2BIgDVMIY5ezI/FwmezUkvmbAblC1Yu4S/cSSN3ENGgMqZWkNTeo0O
6d1TdNP/Zi0MKHAKR5dJ4Ie6ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCWlGXX
D4b9wTPgnHI+TExcQ772MB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3
NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X
Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJyTrmMDB4KM4GvDI3f/QSb6/eLai7LgE3FqhObZR2c6S7yRl6MeCK09jvBdD
feg6Bs+BZtS7VhIAELsX2BbJzFC3SJTUA5pGf4xY4shCqvRDbNaFx41J5iIh3h/h
ufFHKc/YAVcpoFHtyLn6ha50Y5oPH8m/34RS3Pywuy9EI5jYDoftLTz8a2yCc2B2
5ihUYvR1PracOpwX/S9/fLofAvebAAn7wSjyHIOABvPEru5udLFzfvS/MjuoEnN8
NNYaJMlNQkC2mojk0Cyo/kACT7A47KKuO70LzcZ/K/jwidlMdgvooe1ypo1bZ4al
QznI7LuMY34uBDWz9pK/AODEnw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:56 2026 by rpki-client