
$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json)
Hash identifier: 9leuDvBucLPI1y/21dOuUEOsO+zsr14CoDKE32iUUu4=
Subject key identifier: 30:56:AA:D0:2F:44:5D:A4:B8:24:B8:99:C5:AD:3C:70:33:F6:C0:C3
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
Manifest number: D4
Signing time: Mon 01 Jun 2026 07:39:32 +0000
Manifest this update: Mon 01 Jun 2026 07:39:32 +0000
Manifest next update: Mon 08 Jun 2026 07:39:32 +0000
Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: 6ZgQY4FHeJDdM8cDPQwXCmnBf31ka/lqGj1c9tww+UY=)
2: CC76EFBE0CF011F1BD28D26D3B3D8C67.roa (hash: pPo72wH5P9yh6SYi+rljrRTVAVj0Im4oCqbfDQg3Uqs=)
3: 1964AE4C0CF111F19371326E3B3D8C67.roa (hash: kBlELAtaqehitJ1rtukp/W+NZbR0Eef5tO/5oqqFpEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Validity
Not Before: Jun 1 07:39:32 2026 GMT
Not After : Jun 8 07:39:32 2026 GMT
Subject: CN=6a1d3734-8c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:48:34:6f:a0:61:e7:d5:45:39:77:23:cf:
ea:bf:f6:d0:8a:68:07:61:a5:23:2e:cf:4f:c4:c8:
1d:6f:69:56:fb:72:af:75:ed:92:83:74:29:51:99:
1a:7d:a6:b5:b2:54:de:e4:4a:08:41:9e:07:13:d1:
97:14:20:58:18:a3:68:41:53:4d:c5:16:f2:4d:78:
11:a6:97:58:9b:48:e9:be:ea:b9:2f:49:76:3a:08:
5a:63:c1:14:33:29:54:94:2c:73:16:a9:ba:60:b5:
71:3d:5b:bd:6f:f1:7a:1b:a7:0f:e9:b1:76:4b:7e:
dc:83:d1:69:c7:0a:62:85:af:30:0f:8f:dc:2e:7a:
64:f4:1c:6b:00:ba:74:b4:59:61:98:ea:5d:36:c7:
6b:19:0d:1f:03:d5:74:70:ce:5b:7a:41:06:f2:10:
3e:53:d6:36:6e:d2:2d:7b:4c:6c:f1:16:e6:b8:cf:
85:50:77:1a:90:54:47:f6:2d:ec:e5:59:53:eb:02:
91:72:c7:9f:24:86:0b:fc:c0:be:d2:20:8c:a4:3c:
a1:fd:cd:73:66:f7:17:3d:a7:a8:e5:cd:4c:3a:93:
55:91:37:b6:ca:01:27:99:a9:a0:b2:b5:68:e1:fa:
c6:b3:04:65:d4:48:c1:78:d2:9c:8c:c0:8d:87:55:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:AA:D0:2F:44:5D:A4:B8:24:B8:99:C5:AD:3C:70:33:F6:C0:C3
X509v3 Authority Key Identifier:
keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:3c:43:77:4b:e7:6a:92:cd:f5:f5:85:2b:be:d5:58:f5:e5:
f7:b5:7c:af:a0:a4:bd:83:b9:34:6b:61:2b:22:df:5a:4a:7c:
6a:2a:9e:fb:fa:15:34:7e:68:03:36:c3:38:9e:82:c8:28:e9:
5b:dd:28:bf:9a:10:50:ec:62:e0:9c:43:e8:0b:49:ff:b1:c6:
d4:f2:49:5a:dd:0d:b5:3b:a5:0d:67:8e:e0:3e:cb:3e:ed:49:
26:f8:d1:04:b9:5e:85:4c:20:c1:78:ef:42:6f:1e:88:ae:b1:
cb:2f:3a:38:b4:96:d4:f2:da:5b:b1:74:5c:ef:3d:95:37:57:
05:c0:03:04:d0:98:cb:04:93:73:74:47:e4:e2:68:45:8c:9d:
72:55:45:ca:9a:4d:46:0f:61:00:23:3e:bf:ce:da:57:ea:39:
a7:7c:ef:50:9d:14:c5:6c:bf:1e:ff:8b:95:cd:07:24:be:90:
d7:fc:41:87:72:44:62:7b:64:89:ff:69:8f:a8:c7:43:29:30:
66:4e:58:9c:71:26:e0:02:cc:6b:c9:8d:fd:83:32:fc:34:22:
c2:e9:2c:47:2f:61:bb:89:2e:cd:c0:fb:58:4d:42:43:a5:9e:
23:3f:4d:f4:b3:5e:7e:7f:cd:0f:eb:be:74:07:e7:d9:6e:60:
2d:b7:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:38 2026 by rpki-client