
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: NKN68MfTQWzMd3e/qrVB2Yi0t0arTs6krKSXSdNuM48=
Subject key identifier: 02:88:87:36:B0:82:24:80:C6:65:E6:31:57:4A:92:4A:52:20:CF:2B
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 069D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 0682
Signing time: Sat 14 Nov 2026 19:03:27 +0000
Manifest this update: Sat 14 Nov 2026 19:03:27 +0000
Manifest next update: Sat 21 Nov 2026 19:03:27 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: gG971Icg34VK9k9aOiCXC0JUjDbmSG/BfXQz4w0dqjM=)
2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 19:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Nov 14 19:03:27 2026 GMT
Not After : Nov 21 19:03:27 2026 GMT
Subject: CN=6af8b07f-3b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:38:89:e2:48:0c:bb:d8:f2:dd:fd:3b:34:
ec:4d:2d:84:74:cd:6c:67:03:a6:c6:3f:28:c2:b0:
c4:a3:cf:4d:e3:f3:42:71:05:bd:39:fc:36:97:da:
25:bd:93:99:d9:d6:87:32:04:67:99:7e:a4:bb:b8:
ef:e0:64:b3:47:70:57:73:c5:49:3c:a6:93:86:85:
4a:94:b7:db:02:bb:61:76:55:3b:9b:ae:f4:af:fe:
39:96:0a:04:ad:bd:75:fc:e9:03:63:54:c4:20:c2:
b6:7c:0d:15:00:8d:ab:b0:de:6c:96:17:91:fc:c7:
94:67:f4:cb:50:b8:f4:a3:70:ec:d9:4b:aa:41:c8:
a7:d3:a2:f6:e2:52:0d:b1:18:20:8f:e3:f1:d5:0c:
4a:b7:aa:71:ad:c2:e0:fb:11:ea:1a:9b:fe:9b:3e:
5d:b4:91:a6:89:ce:d3:2f:7b:e5:a5:eb:77:1d:9e:
d7:f8:c1:50:c7:55:38:d8:d4:ec:b3:e0:90:08:0d:
17:10:9a:c7:dc:4a:df:d1:46:90:8f:01:d8:1a:da:
74:60:3b:89:5e:b1:7a:c9:d8:6f:2f:d3:b4:b2:44:
18:6a:ba:fb:c4:09:62:b0:20:a1:fb:7e:26:01:12:
45:99:64:ce:b9:2d:39:59:97:1c:63:31:84:6b:93:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:87:36:B0:82:24:80:C6:65:E6:31:57:4A:92:4A:52:20:CF:2B
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:05:d5:fd:c3:bd:ba:0b:43:44:91:d5:2d:f2:8c:6f:f0:14:
eb:3f:7c:6f:66:e6:34:92:fd:c9:0c:12:38:9f:d6:bc:fb:f5:
dc:1d:a7:f6:20:b8:a9:d7:3f:d0:59:5e:f4:20:ff:5c:c0:c5:
c6:35:65:ab:bd:56:d9:48:4f:3b:c4:e0:5c:12:9e:5d:ba:bc:
31:e0:2e:c7:ec:6e:54:0f:8e:ad:e0:03:17:7b:6b:b7:bd:96:
ba:04:b9:90:5d:41:4c:81:fc:bc:5f:f6:58:4e:e2:87:6e:5a:
3a:ea:4d:fc:0f:59:da:e2:be:73:e1:1e:ab:96:cf:f4:a5:2e:
a5:2c:3e:c2:e3:70:81:c4:4b:00:37:31:f3:11:dd:dd:79:94:
00:72:42:41:c2:37:19:33:2c:ff:36:66:32:4f:8b:60:a1:78:
5f:b0:3d:b1:56:7a:1b:95:96:12:cc:59:64:48:ff:3e:12:a5:
f4:e4:aa:7b:10:3e:16:a8:d2:ad:0f:85:52:a5:41:0d:b4:76:
97:03:8c:1d:6f:7e:03:49:05:35:ba:1e:d2:62:f7:8c:c2:4c:
fd:3e:a5:c4:5a:56:5d:68:a2:27:39:61:42:6a:aa:9c:b6:01:
b0:d2:e5:ee:36:ca:55:9a:61:e2:32:39:51:f4:7d:12:46:dd:
45:c7:78:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:25:54 2026 by rpki-client