
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json)
Hash identifier: lgJ9j2n8cBUof2OQXBhttfuZAow0xw23dQpcTh5MCBE=
Subject key identifier: 50:E3:FD:23:52:E4:3A:C6:5F:FB:0E:B4:6D:77:B8:56:30:C3:5B:DF
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial: 1DF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
Manifest number: 1DD4
Signing time: Thu 10 Sep 2026 16:04:43 +0000
Manifest this update: Thu 10 Sep 2026 16:04:42 +0000
Manifest next update: Thu 17 Sep 2026 16:04:42 +0000
Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: 6xSGi9XvCj8DcGI/NzLPgITy9j46eB/2wzO6q7XXTGM=)
2: 4CBDBA5E3F0011F18130B663C8833773.roa (hash: MYIZdYIrRMX8GOTnK8Yq+Fr2Q47kM6T/tbwrjmOwZ2A=)
3: 52F3327C86FF11F194514C90ABEE528E.roa (hash: 1w8W/4m7mLE7LxDR59hH2lCRVs2OIycHF+NjBW+Eagc=)
4: 6C2E2E523E6311F18F888BA6CC833773.roa (hash: BUOSxTEZ7OWcdj1bV0BugkWpidvwLAckKu5X3d9/h+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7668 (0x1df4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Validity
Not Before: Sep 10 16:04:42 2026 GMT
Not After : Sep 17 16:04:42 2026 GMT
Subject: CN=6aa2d51a-7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:91:0e:f2:e7:c5:19:f0:bc:d0:ba:19:a5:a1:
61:c1:e8:b8:43:19:7c:d9:38:17:48:5a:a0:7a:5a:
81:c1:c2:4f:5c:08:09:08:14:5f:4e:80:5a:64:03:
9a:d9:7a:2b:a6:e2:2a:6c:5f:6d:2b:fd:8d:c2:b0:
0b:ce:1c:30:8e:0f:1e:a5:49:69:e0:e9:76:4d:2f:
ec:fe:9a:b4:b2:ee:fa:44:cd:28:75:39:54:cd:ac:
a4:ad:8c:67:6c:06:5c:be:af:19:5e:d8:65:e3:72:
a8:75:e1:3d:58:73:1f:d6:6b:23:85:31:db:60:92:
56:01:ab:55:bd:4c:30:5b:d5:a2:82:73:3b:88:bd:
6b:c9:9d:60:04:a1:b2:18:53:22:17:a5:3a:89:cb:
83:66:bb:ae:4b:55:eb:77:07:02:5a:bf:45:9d:70:
ae:00:5a:c7:4b:af:a1:c6:b7:87:6d:98:6d:1a:8d:
a2:1e:bb:5f:e6:db:98:b0:6f:91:bb:58:75:c0:53:
9d:80:d2:7c:be:d4:e4:b6:47:4e:d2:1c:be:01:32:
0b:ac:0c:b5:ee:c9:ad:0a:34:82:91:13:28:92:27:
2d:8a:94:fd:1f:85:fc:1f:ef:63:3b:57:19:99:e8:
0e:1e:89:88:51:0f:0b:93:95:28:92:25:10:ef:ed:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:FD:23:52:E4:3A:C6:5F:FB:0E:B4:6D:77:B8:56:30:C3:5B:DF
X509v3 Authority Key Identifier:
keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:09:9d:d7:6d:86:cd:f6:32:0f:80:b0:dc:a2:86:48:54:3e:
69:9e:d0:5c:45:3b:02:62:cf:d2:69:63:7e:a0:14:e3:9e:7a:
21:69:5d:10:51:e8:79:32:e6:51:06:f9:b2:ed:1e:8c:5f:2f:
e0:82:ca:92:e7:24:a6:ea:33:65:c0:d4:7a:77:d1:4e:1b:fe:
3a:45:94:5d:5c:4c:bf:43:21:6a:01:97:90:ac:d2:45:e0:01:
db:7c:f4:bb:20:29:7b:1f:8d:da:8c:65:2f:fe:0c:b2:ba:3b:
a2:5b:94:e9:cb:9d:5a:55:ef:0d:47:fc:a5:98:f5:cd:2c:d9:
52:55:07:98:a8:7e:ed:62:65:a4:39:04:ac:a6:4c:85:95:66:
9c:ab:18:b7:68:73:6a:b7:fc:0b:4b:66:12:0c:54:65:f1:28:
71:bf:e8:6e:04:8e:6e:b0:3f:99:00:03:86:ba:e0:ab:73:6b:
c7:36:7a:8c:f4:e4:06:4e:e6:fe:91:63:9f:05:9d:f9:4c:5c:
46:6e:c5:bf:b7:30:f6:e1:8d:4c:78:ef:dd:8d:df:b0:93:b9:
fe:6f:e5:3a:5c:7d:b5:e8:82:d0:c0:5e:e2:ec:9e:a4:26:ce:
66:75:3b:df:48:79:1f:83:71:dc:5c:c0:b6:69:3c:86:c3:f0:
0b:cd:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:25:37 2026 by rpki-client