
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json)
Hash identifier: GFmp9zi/36CP4bzR/VfL30MyVAGhKTacEJcPRKz2Qoo=
Subject key identifier: 79:52:04:C5:E9:DA:EE:06:B4:97:6A:31:66:6B:56:9D:2D:43:75:4C
Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
Manifest number: DE
Signing time: Thu 11 Jun 2026 08:55:34 +0000
Manifest this update: Thu 11 Jun 2026 08:55:33 +0000
Manifest next update: Thu 18 Jun 2026 08:55:33 +0000
Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: HfJKYevw0zIeQSadprZi8VE+d3GEHZkNORCYJB7OIig=)
2: 2857C712141411F08D862A74C4F9AE02.roa (hash: fCwPLnnKHeCfga4EZBzIKSNWWA3Do3Z4t/zNIL+OprI=)
3: 28BBA728141411F08D862A74C4F9AE02.roa (hash: P446GhZxMIH5ntaxf5uODP8HpX8PKKRVRtpeogmimzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Validity
Not Before: Jun 11 08:55:33 2026 GMT
Not After : Jun 18 08:55:33 2026 GMT
Subject: CN=6a2a7805-fd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ee:f3:5b:b3:8e:08:3b:b4:6b:3d:8e:bd:86:
74:db:18:59:de:81:22:2b:28:77:29:c8:8e:c8:a3:
e9:a0:c4:2b:34:54:2a:8e:d0:0f:03:4a:e3:e8:cb:
62:4f:03:56:df:95:44:d3:0c:00:72:92:84:4a:71:
61:92:38:4c:88:22:b7:3f:5d:00:48:33:f8:ed:a5:
46:a6:d3:0f:12:8e:88:27:72:ea:92:69:5e:d9:d1:
c1:4b:2d:ea:b6:b9:6d:38:93:ab:b4:fe:43:12:fa:
55:b5:3c:d7:89:34:9f:ba:ac:81:23:e2:e8:16:4a:
0d:f6:4b:2c:7d:11:7a:fa:95:eb:39:62:bf:24:bf:
82:af:4b:36:b3:97:1a:ad:18:65:a0:b0:e9:6c:24:
ac:5d:1f:ec:6f:a7:5d:db:94:e6:d2:9d:e6:7a:b7:
ff:07:41:1a:5b:36:18:85:c9:2d:1c:7a:60:49:ce:
68:16:e8:5d:64:83:2f:22:df:63:44:28:97:1e:da:
be:60:0b:1d:e2:af:7d:7d:14:14:b4:56:b3:aa:16:
a1:d0:ca:7e:e3:23:d5:bd:f7:5f:4a:b5:87:90:8e:
b0:37:2f:15:7b:15:cb:e1:a4:77:b5:7a:79:3c:f5:
3a:4b:0d:d8:c7:c1:26:11:8d:b0:17:be:4e:5c:f0:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:04:C5:E9:DA:EE:06:B4:97:6A:31:66:6B:56:9D:2D:43:75:4C
X509v3 Authority Key Identifier:
keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:3a:11:7e:6d:ba:60:5d:e1:2f:3e:19:95:f6:bf:bf:77:58:
0f:d3:6b:63:c2:ac:36:24:9e:c1:cf:0d:6b:bd:13:ef:10:ee:
2d:52:46:ef:02:e4:4b:67:d5:c6:b2:16:9a:f5:71:03:27:60:
e2:d8:7a:9e:ac:2b:ad:f5:af:f2:8c:1e:fc:fd:08:1a:d3:66:
85:01:c8:e0:29:a3:a2:3d:8e:b0:8f:7d:0e:60:e1:5d:63:5d:
ff:f1:66:b1:bd:bd:ba:22:85:92:e5:01:53:95:ff:ea:8d:2a:
3c:f3:67:df:8a:00:30:32:b4:6c:7d:e6:e8:d3:5d:3b:46:53:
50:19:3b:10:a6:f5:20:fb:e2:18:c8:ed:55:b4:4c:74:bc:a2:
5a:5a:f7:42:8c:f7:b7:57:ce:61:57:bb:2f:ee:3e:f7:e6:71:
48:22:d4:3c:b7:83:39:03:4f:f5:ba:b6:cd:56:a8:f3:7b:52:
01:d1:e5:b9:11:f6:05:3f:15:aa:b9:56:bf:d2:cd:0c:f1:8b:
ea:42:0b:67:a9:79:02:1a:49:65:e4:78:db:a1:07:9d:ba:c2:
1d:b6:3a:b4:c4:fc:4a:ff:02:9e:65:fb:4e:70:ea:4d:8c:16:
f5:ab:7e:a3:d7:5b:b1:2d:21:33:5c:96:03:17:d7:fe:22:29:
a3:66:f8:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUwMTIxMTAvBgNVBAUTKEY5QjQwMjJDMDI5RTdEOUU1QTYzNDk2OEZEQkE0QTBF
OUNENjI0RTQwHhcNMjYwNjExMDg1NTMzWhcNMjYwNjE4MDg1NTMzWjAYMRYwFAYD
VQQDEw02YTJhNzgwNS1mZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7e7zW7OOCDu0az2OvYZ02xhZ3oEiKyh3KciOyKPpoMQrNFQqjtAPA0rj6Mti
TwNW35VE0wwAcpKESnFhkjhMiCK3P10ASDP47aVGptMPEo6IJ3Lqkmle2dHBSy3q
trltOJOrtP5DEvpVtTzXiTSfuqyBI+LoFkoN9kssfRF6+pXrOWK/JL+Cr0s2s5ca
rRhloLDpbCSsXR/sb6dd25Tm0p3merf/B0EaWzYYhcktHHpgSc5oFuhdZIMvIt9j
RCiXHtq+YAsd4q99fRQUtFazqhah0Mp+4yPVvfdfSrWHkI6wNy8VexXL4aR3tXp5
PPU6Sw3Yx8EmEY2wF75OXPD2PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlSBMXp
2u4GtJdqMWZrVp0tQ3VMMB8GA1UdIwQYMBaAFPm0AiwCnn2eWmNJaP26Sg6c1iTk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTAxMi9CODFBQTI1ODE0
MTMxMUYwQjY4RTczNzNDNEY5QUUwMi8tYlFDTEFLZWZaNWFZMGxvX2JwS0RweldK
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1iUUNMQUtlZlo1YVkwbG9fYnBLRHB6V0pPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTAxMi9CODFBQTI1ODE0MTMxMUYwQjY4RTczNzNDNEY5QUUwMi8tYlFDTEFLZWZa
NWFZMGxvX2JwS0RweldKT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlzoRfm26YF3hLz4Zlfa/v3dYD9NrY8KsNiSewc8Na70T7xDuLVJG7wLkS2fV
xrIWmvVxAydg4th6nqwrrfWv8owe/P0IGtNmhQHI4Cmjoj2OsI99DmDhXWNd//Fm
sb29uiKFkuUBU5X/6o0qPPNn34oAMDK0bH3m6NNdO0ZTUBk7EKb1IPviGMjtVbRM
dLyiWlr3Qoz3t1fOYVe7L+4+9+ZxSCLUPLeDOQNP9bq2zVao83tSAdHluRH2BT8V
qrlWv9LNDPGL6kILZ6l5AhpJZeR426EHnbrCHbY6tMT8Sv8CnmX7TnDqTYwW9at+
o9dbsS0hM1yWAxfX/iIpo2b4xg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:32 2026 by rpki-client