
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
File: BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json)
Hash identifier: TaJSDAnONMhh0LktdtPgLgm13WKObjt7T+0Gh6lrpOg=
Subject key identifier: 63:78:30:A7:D9:FA:30:DC:8F:98:1B:FC:5D:2F:28:3F:76:D5:F6:25
Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
Manifest number: 0260
Signing time: Mon 02 Mar 2026 00:49:13 +0000
Manifest this update: Mon 02 Mar 2026 00:49:11 +0000
Manifest next update: Mon 09 Mar 2026 00:49:11 +0000
Files and hashes: 1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: 40rj3PQAPnuvaqK/dgcJcyc9V6jZHuujwZbKZPeGyw4=)
2: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: 1rx0JLbKoH5J997GcDJA9iOnUSimYhQYe3L8RaCpiFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Validity
Not Before: Mar 2 00:49:11 2026 GMT
Not After : Mar 9 00:49:11 2026 GMT
Subject: CN=69a4de89-a187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:15:05:2e:2e:18:6b:c0:a7:3f:01:ef:70:
43:d8:0e:e6:88:5d:79:67:45:74:1f:87:ee:30:2f:
d8:48:1f:3c:85:7f:db:16:b0:49:1a:87:fc:e3:53:
79:d3:7d:37:21:84:a0:fe:4f:dc:77:36:cf:af:87:
d6:d8:36:ad:1d:34:b8:cd:25:b5:2f:b5:fd:1a:29:
a5:40:bd:31:38:b7:e6:b3:c0:8e:53:55:6d:71:f5:
f1:4e:b4:81:04:1b:a8:ff:c2:19:cb:c5:41:65:9c:
bc:a3:76:5a:e9:6b:19:5b:a0:26:17:9c:24:f0:3f:
8a:13:60:44:1f:80:67:c7:0e:45:9e:ea:d7:02:de:
72:7d:96:15:46:ad:2f:8d:76:de:30:69:a7:df:40:
3f:bf:1e:60:e0:9c:73:2a:b3:9a:89:f1:a1:63:c1:
ed:50:14:b8:98:55:42:66:dc:5f:d7:eb:05:3b:95:
4d:0d:68:ba:f1:27:ae:97:8d:84:7d:6a:f1:98:ab:
2a:f0:b9:27:0a:ee:03:ec:f9:92:0e:b8:e9:20:33:
ed:93:9b:fa:d2:d4:df:2a:78:bb:62:e6:b1:66:df:
02:7d:8c:dd:ed:ce:9d:aa:6a:fa:22:fe:13:04:89:
c0:25:48:93:a3:1f:62:ca:77:80:cc:93:b6:88:39:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:78:30:A7:D9:FA:30:DC:8F:98:1B:FC:5D:2F:28:3F:76:D5:F6:25
X509v3 Authority Key Identifier:
keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:c4:96:15:2c:05:27:e1:ec:f2:f2:20:72:c1:9c:ae:e1:b0:
ed:8f:37:5a:55:77:6b:fb:3e:50:bb:a6:ca:d2:a6:dd:78:8e:
0b:f5:c3:a6:44:71:8e:f7:dd:ca:c4:50:58:de:b8:75:72:0a:
51:ee:63:07:aa:81:10:89:52:94:7e:09:85:99:01:aa:ed:0c:
31:dc:72:a7:09:c3:4a:16:6a:29:44:a5:60:6e:c4:33:76:71:
b1:3b:3b:ec:5e:b1:8c:7a:85:93:f1:74:87:8c:66:33:15:b5:
f7:c5:73:16:62:eb:b6:7f:6f:a8:b4:e8:09:26:23:00:d8:dd:
db:57:6a:8c:6e:1b:d1:00:b8:22:ae:89:b1:0b:b3:47:8f:0f:
4f:89:19:63:56:3c:b3:11:c3:e7:a9:3b:41:67:79:ab:dd:e9:
ef:11:8b:de:2b:61:e3:a7:93:ea:1a:94:e6:58:da:c1:5b:f0:
b6:e3:89:22:c8:5b:06:02:ff:47:0b:b5:f3:81:f4:43:fe:eb:
21:f3:22:6a:3b:f9:10:a2:a7:73:1d:7b:74:01:a7:27:59:17:
1f:21:81:f9:12:06:51:51:e5:6a:03:ae:e3:cc:c7:b9:57:e8:
a0:90:c6:16:e2:3f:63:c4:6a:df:ca:8d:ed:b1:44:6b:2d:77:
b9:1b:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:55 2026 by rpki-client