
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json)
Hash identifier: 5+56hKG7qlZ0s90AWaaFPO+93miHkBwjiR0zmPko4Kw=
Subject key identifier: CD:56:72:B1:E0:A8:ED:ED:4F:6A:B3:F9:40:46:45:13:7D:FA:9D:73
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial: 0D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
Manifest number: 0CF9
Signing time: Tue 28 Jul 2026 18:33:56 +0000
Manifest this update: Tue 28 Jul 2026 18:33:56 +0000
Manifest next update: Tue 04 Aug 2026 18:33:56 +0000
Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: 7aVJbCks5U+JYDMyPO53eGnWjDyIBlaOCV3RnynETno=)
2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: XzUEcWrFObnHhypJzqr40j9vQlCZVakmt78JschNZdU=)
3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Validity
Not Before: Jul 28 18:33:56 2026 GMT
Not After : Aug 4 18:33:56 2026 GMT
Subject: CN=6a68f614-0ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:19:1d:bc:40:83:58:a9:a8:bb:21:b9:2a:
50:af:e0:3d:b5:c6:82:66:87:d9:cc:93:2b:c4:a3:
1e:36:24:c1:d2:c4:f6:97:22:4d:6a:47:38:c6:48:
00:5c:f8:71:ac:0e:8b:0b:31:fa:fc:eb:c5:30:9f:
f9:50:22:47:20:8e:6a:e5:2e:8a:1d:43:f7:0e:0e:
60:1f:69:9a:d2:f8:0b:5d:71:c2:58:df:9d:fe:55:
9d:d1:44:4a:53:a2:dc:d9:2b:4f:be:b4:e4:01:4b:
18:09:9f:25:ca:4b:9e:71:dc:db:6f:e3:66:6c:26:
de:d8:3d:e5:cd:99:8f:f8:35:47:6e:e7:2a:4d:96:
b8:e6:74:41:22:48:f2:d4:41:f5:b8:e5:82:19:70:
4c:e7:57:21:20:5f:4e:28:40:87:70:31:03:83:6e:
39:fa:5d:8e:98:1f:ca:72:c8:3a:b1:79:23:96:e2:
ad:f3:f0:ac:26:26:74:20:c8:f8:94:61:37:16:5a:
a7:e2:b2:5a:9a:bb:23:c9:c7:31:d2:bc:20:0f:f5:
f5:a5:60:4e:43:d1:d6:ba:87:86:da:6f:80:bc:c8:
63:7f:83:be:2a:83:bd:c3:5b:3c:dc:b9:ab:12:24:
1f:d7:a2:35:7a:e3:9b:3e:67:33:fa:9a:cc:04:40:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:72:B1:E0:A8:ED:ED:4F:6A:B3:F9:40:46:45:13:7D:FA:9D:73
X509v3 Authority Key Identifier:
keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bc:5b:b9:b3:d4:fb:b2:09:86:28:dd:ef:30:cb:1c:13:ae:
46:74:14:b4:fb:dd:47:45:eb:a3:19:a2:9d:f4:dc:49:3a:70:
b8:09:c3:cd:ed:06:81:ff:d2:92:95:1f:85:13:be:84:39:b4:
bf:6c:ac:6c:57:cd:7d:db:3a:ae:46:c7:5f:46:f1:2b:e6:b2:
cc:c8:1f:c7:61:c9:da:51:27:13:8f:9c:20:07:dd:dc:ae:98:
4f:be:7c:8d:da:63:cc:9c:70:78:e9:d1:cd:ae:9b:52:bb:4f:
72:06:02:e1:27:47:1a:98:81:a6:2f:33:97:6c:f3:7c:47:3f:
a6:99:a5:4f:a9:ab:ea:97:0c:3d:a7:b6:07:84:3b:0c:42:89:
7e:82:f9:e4:67:e4:59:6f:4f:3d:a2:f6:92:5c:b3:8e:ae:d0:
1c:33:50:22:23:04:b0:5b:0e:c6:fc:86:f3:3b:78:65:af:6d:
07:00:45:20:3e:6f:59:8f:df:b8:21:22:e7:15:bd:a2:0c:9b:
71:12:f3:e6:be:df:4b:49:b7:3d:8c:23:e7:ce:27:35:68:db:
3e:e5:68:d5:9d:47:55:da:15:9e:5c:aa:06:ea:14:67:49:35:
d9:17:52:1d:cc:08:96:d4:1b:4c:fe:02:09:2d:be:be:dc:53:
ba:f2:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:00:03 2026 by rpki-client