
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json)
Hash identifier: 3/nbp91qTfhOI5DGcb6T4fpmmR6UzgpbGBQBOrydZSk=
Subject key identifier: 27:AD:4D:9F:42:18:6B:93:E4:8A:AA:85:95:B0:C3:34:83:D6:D0:2E
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial: 0D03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
Manifest number: 0CE2
Signing time: Fri 12 Jun 2026 18:25:34 +0000
Manifest this update: Fri 12 Jun 2026 18:25:33 +0000
Manifest next update: Fri 19 Jun 2026 18:25:33 +0000
Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: rQ/+BrHmzXtps4GqT+C1k/KY9BkdM2PJJ9PRNJTHKI4=)
2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: XzUEcWrFObnHhypJzqr40j9vQlCZVakmt78JschNZdU=)
3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3331 (0xd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Validity
Not Before: Jun 12 18:25:33 2026 GMT
Not After : Jun 19 18:25:33 2026 GMT
Subject: CN=6a2c4f1e-7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:4b:83:6a:e8:f7:12:d1:f8:dd:96:7a:99:
af:90:21:6c:57:84:0a:35:62:d7:57:c9:5b:c8:f4:
ee:9f:77:ff:c0:e5:74:97:65:b4:95:db:bc:04:24:
9c:fb:0d:d5:df:bd:be:72:c8:8a:fc:c0:17:88:e4:
73:e5:50:46:a3:c0:5b:e3:96:b4:0c:06:9e:1a:ac:
51:46:bf:33:f8:63:d9:ba:98:5c:11:5a:0a:3b:a2:
29:ac:20:6a:11:67:84:6d:a5:6f:0a:62:b0:52:bc:
05:bc:63:b1:b1:91:06:6b:ce:3d:8c:a4:68:24:6c:
c8:57:da:68:6a:15:5e:e8:69:07:e1:3e:a6:31:73:
48:c6:fc:c9:95:38:33:7a:40:4d:bf:28:e0:09:9f:
8c:aa:5f:67:9c:af:dc:a8:4e:5b:ec:5e:00:59:ef:
cd:35:ae:3b:3b:8b:f1:e8:8c:0c:7b:1a:24:16:7b:
a6:18:5a:89:6f:2a:04:09:6c:37:cf:26:14:91:24:
b1:8e:f1:e1:91:45:0b:8d:d0:17:95:c2:0c:32:46:
a3:20:73:bf:d6:6e:ff:b9:fa:92:2c:48:d6:d9:4b:
d0:2e:c9:8a:19:07:a5:cd:40:6f:eb:ab:16:cb:66:
9d:2b:35:f5:ec:1d:49:4d:ca:92:26:89:62:38:9e:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:4D:9F:42:18:6B:93:E4:8A:AA:85:95:B0:C3:34:83:D6:D0:2E
X509v3 Authority Key Identifier:
keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:eb:27:77:ff:74:90:f4:eb:ec:1c:45:62:b1:86:ef:df:
9d:e8:a3:af:16:55:d1:dc:46:05:be:34:7f:f6:4e:ad:24:1e:
49:50:4e:78:ad:98:49:b1:9e:68:06:ff:8c:b0:65:5e:63:0f:
1f:b8:96:4c:cc:64:e2:72:23:d9:d5:e9:a7:4b:df:98:b2:89:
73:86:6e:ea:4c:e3:68:4c:90:ce:75:ec:87:1f:3c:e1:ea:b6:
df:ea:ab:4b:60:74:ec:4a:68:12:d0:1b:fa:b3:eb:b4:7b:cd:
c4:ef:80:ea:10:79:e8:a8:61:51:7d:2b:03:6d:37:14:07:f8:
b0:a3:fc:71:0a:33:93:c9:8c:aa:bb:b0:9a:4c:cd:cc:55:25:
e1:58:4c:ba:c0:9b:4d:de:e2:95:51:5c:57:d1:e7:03:10:ca:
4c:d7:8d:8c:04:2b:f7:f6:3d:36:51:b1:7e:14:c8:b7:10:cb:
b5:13:53:f0:bf:ba:0e:5b:08:bc:fe:6b:20:2d:3c:75:40:4c:
66:8d:4a:49:26:02:ce:08:86:5d:8e:47:0f:d5:30:47:02:f6:
3d:e3:19:f2:09:9f:b0:d0:91:07:f8:4b:27:fb:85:ae:77:70:
8b:39:f1:c8:34:9f:7a:76:c8:b3:c8:d2:11:34:10:f5:06:4b:
97:80:e7:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD
MDEyNzc5QjkwHhcNMjYwNjEyMTgyNTMzWhcNMjYwNjE5MTgyNTMzWjAYMRYwFAYD
VQQDEw02YTJjNGYxZS03MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1UJLg2ro9xLR+N2WepmvkCFsV4QKNWLXV8lbyPTun3f/wOV0l2W0ldu8BCSc
+w3V372+csiK/MAXiORz5VBGo8Bb45a0DAaeGqxRRr8z+GPZuphcEVoKO6IprCBq
EWeEbaVvCmKwUrwFvGOxsZEGa849jKRoJGzIV9poahVe6GkH4T6mMXNIxvzJlTgz
ekBNvyjgCZ+Mql9nnK/cqE5b7F4AWe/NNa47O4vx6IwMexokFnumGFqJbyoECWw3
zyYUkSSxjvHhkUULjdAXlcIMMkajIHO/1m7/ufqSLEjW2UvQLsmKGQelzUBv66sW
y2adKzX17B1JTcqSJoliOJ6+MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCetTZ9C
GGuT5IqqhZWwwzSD1tAuMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG
NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF
bjdPMm00YVJ6eURBRW5lYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJy/rJ3f/dJD06+wcRWKxhu/fneijrxZV0dxGBb40f/ZOrSQeSVBOeK2YSbGe
aAb/jLBlXmMPH7iWTMxk4nIj2dXpp0vfmLKJc4Zu6kzjaEyQznXshx884eq23+qr
S2B07EpoEtAb+rPrtHvNxO+A6hB56KhhUX0rA203FAf4sKP8cQozk8mMqruwmkzN
zFUl4VhMusCbTd7ilVFcV9HnAxDKTNeNjAQr9/Y9NlGxfhTItxDLtRNT8L+6DlsI
vP5rIC08dUBMZo1KSSYCzgiGXY5HD9UwRwL2PeMZ8gmfsNCRB/hLJ/uFrndwiznx
yDSfenbIs8jSETQQ9QZLl4DnOg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:43 2026 by rpki-client