
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: QonKcHgmQAPC6LVOrOs0JvyIXX+zrUKdwWdroRg7dmY=
Subject key identifier: D5:49:BD:AE:55:AA:59:7E:B7:9A:C3:9C:A9:FB:8C:57:FB:F0:2E:C2
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 0613
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 05FC
Signing time: Mon 02 Mar 2026 00:20:29 +0000
Manifest this update: Mon 02 Mar 2026 00:20:26 +0000
Manifest next update: Mon 09 Mar 2026 00:20:26 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: UvnEZSAgC+RWX4HBHNQ823QYzjY+goskWfGYTKd1X9A=)
2: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: gt3P0RVKJ10NTC1xiuJFkqSt6F4bpiZoTwj1bRd97ls=)
3: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: 3t18sTpBmRlddEDH3dqosUJNqrG1lyLOlr17yZrxs+Y=)
4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: dHCO1G8lWFfxvpeBqux6copqCjiz6D9jyruxlvZX7Ak=)
5: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: MXZCy//OoUKlw3XwT3dAJNzNbM4s9l6iFkTYKt5BnSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1555 (0x613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Mar 2 00:20:26 2026 GMT
Not After : Mar 9 00:20:26 2026 GMT
Subject: CN=69a4d7cd-ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:87:83:b5:2a:63:a5:c5:47:6a:eb:93:d8:
bc:9e:a4:66:d2:73:e1:a2:fe:44:61:7c:0e:b8:d4:
76:e8:f8:1c:bb:11:66:8f:ce:7b:c8:ed:ab:db:54:
ba:88:ba:fb:23:4a:dd:87:42:d3:c2:59:10:66:6e:
ae:eb:d1:2b:9a:f7:be:db:c5:39:d6:7e:0e:a0:34:
ea:ea:f6:87:06:f5:b2:bc:a5:e5:86:51:eb:c8:32:
8a:bd:c2:bf:d0:f7:69:a6:63:f0:eb:ad:bb:c4:86:
97:8a:ba:b5:b5:43:04:be:07:5e:b4:0b:6d:27:24:
35:75:dc:85:ac:22:e4:5c:a3:50:d1:b7:b8:eb:40:
21:d3:d4:1d:c4:94:f4:b0:e5:b5:6d:97:92:43:da:
0c:da:fd:60:81:4f:f8:3c:43:d1:6f:c9:ba:f7:16:
cb:a8:3d:86:72:1f:0a:d9:05:98:43:94:2e:6a:bb:
94:52:f4:0c:b6:d5:4f:a1:91:61:2b:23:a8:7b:dc:
02:e9:70:bf:7a:29:45:8c:4c:02:b2:93:fb:a0:c8:
ad:9c:68:83:22:03:75:e9:83:e7:75:9b:7b:9e:79:
50:b2:d1:26:eb:b1:77:9c:51:3c:fa:8b:53:8f:dc:
a0:84:32:74:b9:3b:19:76:49:eb:ff:40:55:bf:76:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:49:BD:AE:55:AA:59:7E:B7:9A:C3:9C:A9:FB:8C:57:FB:F0:2E:C2
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:d7:b7:53:ea:e8:68:b2:93:a8:31:17:46:d9:2f:40:69:49:
4e:73:71:8d:b8:e6:0d:de:93:31:63:de:5b:51:ee:3c:2c:99:
7b:c0:23:5f:91:ae:22:60:19:5f:6e:81:e2:e7:c8:b4:86:de:
1a:80:aa:b8:d5:c2:7b:57:ae:eb:c3:4a:77:4e:53:6f:66:f3:
74:f8:f5:75:81:76:13:71:f8:c7:83:df:a3:23:41:a0:d5:b7:
96:d4:1a:6c:6e:20:97:0d:a9:87:a0:8e:9d:17:0a:2c:62:90:
8f:74:ba:b4:a1:a6:19:4f:d8:a8:03:c2:9a:c9:e1:a0:73:d9:
5f:ef:07:45:2f:94:ca:44:68:9b:c2:a9:c5:c5:5c:13:12:53:
3b:f8:be:c0:94:d2:97:7e:7b:15:2d:65:23:ea:fa:9b:12:87:
cc:fc:e5:3b:db:c8:8c:8c:f8:af:7a:7a:68:ad:7d:84:24:12:
c8:a1:46:62:34:93:c2:32:c4:19:ad:9d:53:bd:75:05:8e:06:
7b:e3:dd:ed:40:f3:a0:ed:83:e3:b5:d6:2e:8a:39:39:63:48:
5c:73:b8:75:5b:73:1b:d2:cb:2e:be:7d:23:21:48:03:ce:c1:
78:69:c0:fd:46:7c:26:0c:f3:59:3e:35:1b:1b:02:e1:43:77:
90:81:18:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE
RUY4QzNEM0IwHhcNMjYwMzAyMDAyMDI2WhcNMjYwMzA5MDAyMDI2WjAYMRYwFAYD
VQQDEw02OWE0ZDdjZC1lZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtASHg7UqY6XFR2rrk9i8nqRm0nPhov5EYXwOuNR26PgcuxFmj857yO2r21S6
iLr7I0rdh0LTwlkQZm6u69Ermve+28U51n4OoDTq6vaHBvWyvKXlhlHryDKKvcK/
0PdppmPw6627xIaXirq1tUMEvgdetAttJyQ1ddyFrCLkXKNQ0be460Ah09QdxJT0
sOW1bZeSQ9oM2v1ggU/4PEPRb8m69xbLqD2Gch8K2QWYQ5QuaruUUvQMttVPoZFh
KyOoe9wC6XC/eilFjEwCspP7oMitnGiDIgN16YPndZt7nnlQstEm67F3nFE8+otT
j9yghDJ0uTsZdknr/0BVv3b11wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVJva5V
qll+t5rDnKn7jFf78C7CMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB
QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf
WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUNe3U+roaLKTqDEXRtkvQGlJTnNxjbjmDd6TMWPeW1HuPCyZe8AjX5GuImAZ
X26B4ufItIbeGoCquNXCe1eu68NKd05Tb2bzdPj1dYF2E3H4x4PfoyNBoNW3ltQa
bG4glw2ph6COnRcKLGKQj3S6tKGmGU/YqAPCmsnhoHPZX+8HRS+UykRom8KpxcVc
ExJTO/i+wJTSl357FS1lI+r6mxKHzPzlO9vIjIz4r3p6aK19hCQSyKFGYjSTwjLE
Ga2dU711BY4Ge+Pd7UDzoO2D47XWLoo5OWNIXHO4dVtzG9LLLr59IyFIA87BeGnA
/UZ8JgzzWT41GxsC4UN3kIEYPw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:06 2026 by rpki-client