
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: 5oIeMX1gF2r4sUIIRpzJCj33zR7WCuHzbvsd/MSsQSQ=
Subject key identifier: 41:4A:8D:DE:8C:C8:95:62:FA:3D:43:18:7D:EA:57:32:72:38:CF:22
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 062B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 0614
Signing time: Thu 16 Apr 2026 19:15:10 +0000
Manifest this update: Thu 16 Apr 2026 19:15:10 +0000
Manifest next update: Thu 23 Apr 2026 19:15:10 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: BYZgdXgwRLme8Tlo/jwycR11vUSvOJy2EKCGk8eRdv8=)
2: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: 3t18sTpBmRlddEDH3dqosUJNqrG1lyLOlr17yZrxs+Y=)
3: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: MXZCy//OoUKlw3XwT3dAJNzNbM4s9l6iFkTYKt5BnSU=)
4: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: gt3P0RVKJ10NTC1xiuJFkqSt6F4bpiZoTwj1bRd97ls=)
5: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: dHCO1G8lWFfxvpeBqux6copqCjiz6D9jyruxlvZX7Ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Apr 16 19:15:10 2026 GMT
Not After : Apr 23 19:15:10 2026 GMT
Subject: CN=69e1353e-c71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:dd:29:58:1b:d2:83:62:61:cc:bb:4e:1e:
c8:db:68:11:df:76:2e:bf:5c:96:9b:eb:d8:5d:94:
fd:31:90:df:b1:86:93:2e:f5:eb:eb:8c:4a:f0:66:
9c:b2:ad:b9:86:6c:a4:19:eb:f4:74:e6:04:2d:a1:
e4:33:f2:45:ca:4d:a4:aa:5e:a3:08:6e:84:c6:56:
4f:b9:f8:07:44:31:95:7d:08:bd:b6:9a:11:f6:b4:
02:13:c1:f0:d2:0e:f3:5e:ec:eb:89:10:7a:aa:a5:
d3:f5:b4:13:dd:25:23:7c:b0:e0:e4:13:d3:f8:bc:
72:0e:eb:4e:ba:d9:78:48:ea:2a:f5:1e:f4:5e:4f:
1b:eb:0c:40:1e:f5:83:cd:c4:8f:57:52:f0:76:ef:
98:38:12:55:c9:3a:6e:c8:40:74:08:1e:66:af:6b:
92:33:8c:f6:cc:24:6e:99:22:b0:cd:d7:c6:a9:6e:
35:01:af:d8:10:0a:16:64:90:11:48:36:8b:73:42:
8c:bc:0d:d0:a1:37:99:15:e5:04:64:8f:d5:4d:1f:
f1:8f:4b:79:1f:6a:2d:3d:19:f2:56:75:48:e3:22:
c6:ec:23:af:83:3c:0e:03:e6:c5:c9:3e:cd:e2:2d:
39:93:d5:9d:69:f7:6a:52:37:e9:07:9d:8e:9e:fa:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4A:8D:DE:8C:C8:95:62:FA:3D:43:18:7D:EA:57:32:72:38:CF:22
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:82:11:89:4d:4c:de:8e:a2:2f:ee:1a:5a:b8:f5:ce:7e:49:
1c:a2:55:f6:1a:56:92:9d:4d:41:7a:0d:12:34:83:ef:56:8d:
76:4e:24:87:ea:ce:81:78:7e:56:e4:5a:c9:eb:4e:87:80:b0:
00:86:44:e7:7f:54:cd:e8:eb:37:4d:3a:8a:00:57:31:9f:be:
50:c0:f8:d1:ec:fb:73:43:42:93:f9:d7:08:07:24:21:19:df:
89:fa:e5:c8:ce:32:3f:28:5e:f8:b3:16:5b:5e:87:2a:ca:46:
23:49:13:b7:1f:49:7b:15:f7:14:76:09:38:9e:4f:1b:20:bb:
28:01:4f:91:24:6b:5e:5d:67:40:ce:9a:bf:13:c8:7b:49:63:
aa:16:ed:af:80:ff:52:d6:ce:4a:d4:fe:6c:53:e1:b3:c1:b3:
71:e0:73:ad:35:17:4e:de:3a:5d:a6:49:36:cd:90:8c:6e:d1:
b0:d8:0b:22:85:fc:7b:a4:e7:49:ad:75:8b:de:73:6d:8a:5e:
50:77:52:5c:7b:93:06:dd:af:55:34:16:bf:bd:f2:05:9d:50:
b5:06:75:73:4c:56:97:a5:90:2c:82:ba:96:05:5b:3f:bb:1b:
28:20:33:79:aa:34:63:46:4d:b2:6a:8e:93:14:21:48:69:34:
82:c4:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:07 2026 by rpki-client