
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: Sb7ScsgO86hhcgpShXYa2JAafRA4giw9FlUqxiRtquQ=
Subject key identifier: 87:38:2A:9F:D1:F3:93:4D:34:5C:7A:D7:69:07:AB:4A:09:7E:B6:9B
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 0681
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 0666
Signing time: Sun 20 Sep 2026 19:08:50 +0000
Manifest this update: Sun 20 Sep 2026 19:08:50 +0000
Manifest next update: Sun 27 Sep 2026 19:08:50 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: WCRUUimswHq5rJu2saY6Ou0dy8BIL/OJ3sio7aBjQNw=)
2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
3: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
5: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Sep 20 19:08:50 2026 GMT
Not After : Sep 27 19:08:50 2026 GMT
Subject: CN=6ab02f42-24a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:da:4e:a6:77:cf:11:5d:9e:67:eb:38:bf:
c2:98:91:27:f8:d3:78:f5:42:8b:c9:f4:27:05:48:
d9:e8:99:63:e1:d9:98:ab:19:e3:3b:78:4c:b2:5e:
0f:47:10:ba:e5:d0:dd:cb:b5:c8:f3:09:fd:17:99:
ff:75:f6:2e:61:4d:e6:dc:e1:2f:52:a7:9b:eb:ff:
ec:11:fc:fc:dc:f4:30:f1:51:c4:bc:cb:08:71:aa:
45:10:32:25:c7:c4:6c:39:c9:dd:40:3d:a9:f4:b7:
81:d2:07:f5:99:fa:aa:d5:ea:69:af:85:b0:17:07:
c7:bf:87:6e:94:c8:61:be:dd:1d:ac:0f:08:64:4d:
55:69:62:f7:50:57:73:af:31:44:74:49:d6:d2:e6:
a2:cf:67:f0:5e:0e:46:ff:4d:28:52:4e:f9:f7:16:
73:01:b3:25:1e:22:02:9b:93:12:7a:a3:62:86:60:
53:5c:31:15:dc:9e:58:cb:0d:37:cf:87:1b:24:2b:
05:30:5d:31:b5:76:b8:17:84:ce:2d:da:04:29:9a:
68:7a:6b:15:d2:83:c9:dd:9a:6a:8f:98:9f:8c:5b:
d0:30:12:b8:6c:45:41:22:49:2c:9e:1d:03:0d:12:
ed:ff:b9:da:34:48:0d:bc:ac:a0:91:d7:fa:8e:c6:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:38:2A:9F:D1:F3:93:4D:34:5C:7A:D7:69:07:AB:4A:09:7E:B6:9B
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a9:d4:04:0c:9d:77:d7:f6:7a:31:6d:44:75:91:4e:53:59:
bb:03:e0:d8:86:92:29:82:1e:dc:39:0d:77:92:5b:cb:57:b3:
19:88:ed:8a:23:ad:44:e7:44:d6:40:16:fa:62:5d:3e:12:d8:
f6:9a:e8:d3:90:38:1e:de:37:81:78:59:0f:2c:eb:8e:29:b7:
c4:d2:27:f5:71:68:0a:f2:96:1f:b2:41:ba:56:bf:f0:cf:7c:
4f:2a:f9:44:0c:45:f3:94:47:bf:08:cc:74:3b:9d:0a:11:62:
db:d2:37:74:67:b4:e0:3b:7d:18:b5:3f:2f:56:43:f8:c6:67:
61:14:4c:18:41:01:9e:d5:3d:eb:7d:9e:92:b4:53:46:34:dd:
a0:0e:69:47:05:57:14:af:24:a5:61:0d:6e:18:1a:7e:ee:14:
21:99:5f:d6:ca:89:dc:42:27:c5:d9:bd:8d:6a:56:be:6f:40:
ac:12:31:d7:1b:b6:2a:61:7b:b1:3a:20:40:a7:0c:e3:a2:9f:
58:01:88:5c:f0:da:04:6c:c4:8b:c5:cb:95:b8:8d:38:6c:04:
1e:60:69:d5:20:73:d3:eb:d0:2e:0d:3a:41:33:a5:bc:93:fa:
de:55:59:09:30:fe:1a:75:d9:85:98:43:73:dd:df:46:73:92:
2c:ec:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:04:29 2026 by rpki-client