
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: Es52iUMDpWZ097Oh1RYx62oiGxD7yES0SbtFqTwru8s=
Subject key identifier: F4:CB:8F:ED:AF:19:61:61:22:5F:02:3B:8A:7C:81:1D:F3:7F:1E:50
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 0692
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 0677
Signing time: Sat 24 Oct 2026 19:09:41 +0000
Manifest this update: Sat 24 Oct 2026 19:09:40 +0000
Manifest next update: Sat 31 Oct 2026 19:09:40 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: X4iBmxpHg53uxmCvtsCnhCzXFu5c9oO5/WcaHqJxqqE=)
2: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
3: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
4: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 19:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Oct 24 19:09:40 2026 GMT
Not After : Oct 31 19:09:40 2026 GMT
Subject: CN=6add0275-f371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:97:80:81:7d:a9:cf:06:4c:60:6b:f6:31:
63:9e:75:ee:8c:35:ea:43:f9:f7:95:e4:bd:83:d3:
e9:b6:3d:40:88:a7:c9:11:c3:d2:2c:de:e5:c1:7d:
de:01:a1:b5:29:51:7b:d7:ad:22:15:f9:ae:82:e5:
7f:14:cf:a9:59:db:ac:7e:b1:0f:2e:fa:a3:35:1f:
49:7b:22:23:70:5b:d0:c5:ab:9a:38:a2:ba:3b:46:
6a:f1:de:36:7b:a2:ee:ba:c5:e8:87:0f:f0:f7:a0:
83:04:bb:2b:79:9e:e9:d7:06:3a:4e:78:03:61:a1:
90:d8:dc:15:d8:ac:77:26:a1:eb:12:c5:42:1a:a8:
19:69:c5:e9:ac:e4:2f:f7:b8:ed:f4:57:40:5a:68:
27:f8:80:64:36:8c:90:41:db:32:a0:73:8f:52:83:
20:25:dc:19:7b:e3:6b:64:35:c5:6c:ee:7e:a0:8e:
36:6a:cd:bc:53:6f:86:3f:d0:c9:8f:fe:cd:b2:ff:
56:8d:dd:db:fe:9b:d7:ca:49:97:8a:53:c6:01:04:
77:72:cf:ca:a7:8c:c1:32:61:b8:c5:af:62:09:4d:
18:4e:f6:b3:a9:b4:2a:bd:66:c6:e8:d1:80:9b:7a:
a1:19:03:c8:9c:2e:fa:e0:5e:b7:e0:29:f0:c2:ce:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:8F:ED:AF:19:61:61:22:5F:02:3B:8A:7C:81:1D:F3:7F:1E:50
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:92:52:93:e6:3d:f3:49:f4:51:25:9d:80:38:be:32:a4:4d:
64:4e:4c:55:8e:f2:f6:2f:32:eb:5c:b8:31:bd:ce:27:bf:b0:
ee:a2:67:66:99:e6:31:ba:28:60:0a:64:ce:7b:24:2d:eb:57:
0d:48:a6:50:4e:d1:82:f1:ae:1a:12:59:e1:d9:1f:f1:70:0f:
60:2a:bb:e9:56:76:31:9f:dc:65:68:71:b3:56:5c:22:7d:59:
f8:2d:74:7f:21:fd:f8:ee:b6:4b:bf:d5:23:47:78:9d:3d:ba:
cf:66:20:ca:e6:3f:a8:96:48:0c:0e:59:3f:4e:6b:5e:c9:40:
f1:d1:b5:a3:57:84:48:04:41:8a:10:d8:7f:91:56:27:ea:2a:
1c:09:6f:9d:b8:13:6b:de:38:1b:c9:6d:1b:51:d4:8b:6d:12:
69:af:55:4c:25:2a:22:5d:1b:27:24:cd:95:57:d0:d8:78:de:
af:25:11:95:3a:78:db:ba:f4:3c:fc:3d:86:a2:f5:4e:01:04:
90:2f:b6:f4:6a:50:71:be:23:0e:0c:e1:12:b2:64:a6:db:87:
89:94:9c:65:b1:23:54:06:6f:8a:b2:d6:de:70:2c:5f:cb:1a:
e0:08:4f:23:2f:1d:eb:e9:f5:e1:39:43:eb:ed:32:e3:5b:d5:
e5:70:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:01:38 2026 by rpki-client