
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
File: BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json)
Hash identifier: OPgAWRQ5etxt6G/OVPw96cpcqR1iJHB9ke2zWh3CG5A=
Subject key identifier: 9B:53:B6:10:65:72:99:4A:C7:DA:87:C1:D2:EA:CD:CB:BE:F1:7F:97
Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
Manifest number: 0297
Signing time: Sat 13 Jun 2026 01:43:07 +0000
Manifest this update: Sat 13 Jun 2026 01:43:07 +0000
Manifest next update: Sat 20 Jun 2026 01:43:07 +0000
Files and hashes: 1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: +x3wM0tXVU9FZgY20IMddJPB/H7emHNj5l/2Y4AbdTE=)
2: A7DDB8A23E6611F19FA73FF6CD833773.roa (hash: sE7hyGMb+RZELa0prUkJH8bGHJ/zMp5lIGg2bRbPuWY=)
3: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: a5rkQCdGd6WLgCsLjH9k9RC6TMcBTGsLeQcwPsfq9Ws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Validity
Not Before: Jun 13 01:43:07 2026 GMT
Not After : Jun 20 01:43:07 2026 GMT
Subject: CN=6a2cb5ab-73d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:04:41:1a:53:93:15:89:00:d7:93:38:a6:
4c:07:81:5d:79:92:99:b2:77:13:27:68:27:aa:f3:
4e:ee:bb:2c:19:84:ee:53:83:f7:4a:7b:90:ef:be:
7f:74:f8:10:a5:48:64:14:c7:d9:e8:3b:2e:aa:3e:
60:93:84:19:d3:53:40:ce:0c:fd:b1:25:92:41:8d:
25:db:79:35:9b:cd:24:30:ce:a4:1c:8a:6f:97:05:
84:73:26:b5:5a:04:1f:a0:19:e9:85:c4:b9:59:b6:
77:57:94:5c:68:34:de:ae:50:5e:8e:68:cf:46:c9:
4f:70:aa:2f:1b:f3:e0:c2:11:45:62:00:b1:ce:77:
ed:d6:e0:eb:ae:a8:dd:ed:44:6e:27:6c:74:cf:7f:
f1:b6:c2:c4:e4:92:f8:d7:c5:a6:9a:85:5f:3a:93:
ae:76:a0:7c:49:33:fa:1f:9b:13:08:20:6a:e5:77:
70:24:31:ea:b5:b5:81:36:0f:9a:7c:b7:95:b8:ff:
74:51:42:67:fc:32:e1:ae:62:7a:cf:a8:f2:6c:2d:
38:31:67:5b:d9:82:dd:d0:1e:70:d9:56:e8:1e:62:
f7:e1:ca:49:39:a5:eb:d8:68:04:34:a6:70:f8:01:
1c:ae:6e:3e:fe:b5:23:ff:18:9c:4d:16:78:79:3b:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:B6:10:65:72:99:4A:C7:DA:87:C1:D2:EA:CD:CB:BE:F1:7F:97
X509v3 Authority Key Identifier:
keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:15:b4:5b:06:97:3b:49:c5:66:b9:af:71:cb:e5:2f:44:d1:
f2:58:c7:be:a5:cd:ae:44:ff:ad:ce:df:05:6d:04:f2:ae:f0:
0d:e2:8f:37:d6:a5:f2:77:c4:64:bd:cc:5d:07:b0:ca:b6:c7:
1b:fb:18:d5:a3:f6:0a:1e:89:02:cc:7e:9f:17:6d:ea:b8:90:
ca:92:ad:be:ec:c9:bd:57:70:b7:20:97:5d:7e:85:17:a1:73:
41:c3:6d:a7:01:e5:5c:ce:24:91:28:2a:6a:7c:b1:9e:80:fa:
9a:12:b1:22:50:b3:f3:86:b4:90:af:a8:fb:2c:c7:28:fb:56:
b8:c8:ed:84:dc:4a:57:4d:b4:85:3d:c1:1e:88:0d:68:9f:14:
73:bf:aa:11:65:05:54:df:90:42:d9:dd:51:b0:67:af:84:5d:
b4:22:01:1a:1c:b5:3d:cd:72:6c:60:04:67:c6:68:89:fa:61:
5f:7f:aa:f5:48:85:62:52:76:ea:cd:4d:ec:15:ae:ff:fc:9b:
71:e3:60:bd:8b:28:35:c2:4a:fc:e1:59:e7:88:51:05:17:4c:
f1:c0:4c:55:ab:07:c1:44:93:9f:ff:b5:a6:1b:3c:cc:c8:41:
4a:72:b3:09:66:1b:b1:e3:60:e8:84:6f:cb:f1:52:e1:78:b5:
74:16:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:03 2026 by rpki-client