
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: +NDcBxDBDsHcbQROHHmX/ZcVTN/ZVCPAg/yayJcVF6k=
Subject key identifier: FD:8A:00:9D:06:38:4E:23:1D:61:FB:99:A6:FB:03:6E:85:94:CF:8C
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 0691
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 0676
Signing time: Thu 22 Oct 2026 19:15:18 +0000
Manifest this update: Thu 22 Oct 2026 19:15:17 +0000
Manifest next update: Thu 29 Oct 2026 19:15:17 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: EswDqS0PqRKmR8Y5NxG2JamyeBnR3N0oR4wYI7eQRds=)
2: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
3: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
4: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
5: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Oct 22 19:15:17 2026 GMT
Not After : Oct 29 19:15:17 2026 GMT
Subject: CN=6ada60c5-7af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:2d:d0:6f:e2:5d:e2:c4:3f:a3:d7:f3:76:
c7:11:dd:cf:b8:2e:a6:39:90:6f:6c:fa:23:7b:1f:
b9:ca:5b:e1:6a:f4:e6:ad:38:5f:e3:09:26:2e:18:
f4:95:e2:4f:e0:ae:33:cf:8d:15:1b:b4:04:05:f3:
dc:c5:4a:10:b4:b7:26:fe:6a:5a:9d:72:85:d2:1f:
ac:0e:3a:d5:83:b6:bd:0f:f9:d0:25:de:45:12:4f:
39:6c:ba:38:5f:e7:74:0d:f0:83:4c:2e:00:3c:7a:
84:ed:a6:18:5c:19:41:10:94:2d:ee:b9:d3:5a:9e:
1f:f9:82:c0:2e:94:9a:a9:5c:7c:52:f8:7e:5a:85:
ca:c8:61:b8:17:26:88:da:ba:49:9a:1d:c1:1f:ce:
91:04:f4:d8:a6:94:c8:d6:53:55:08:c9:17:d1:5a:
a9:70:e9:80:b6:12:ac:04:0c:c8:54:e7:f3:ec:96:
fd:b4:9e:e4:9c:42:d2:20:39:05:70:52:ad:1d:d3:
a7:8a:c6:36:ca:25:9e:d4:6c:5b:33:87:9e:a1:ff:
59:ee:7b:86:9e:66:fd:a2:59:55:54:39:42:17:9c:
3b:68:95:19:44:fa:c5:9a:91:09:47:58:8d:a8:7a:
d6:f8:d8:d7:ae:76:fd:ca:72:e8:a8:b1:81:99:8e:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:00:9D:06:38:4E:23:1D:61:FB:99:A6:FB:03:6E:85:94:CF:8C
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c6:69:25:c8:f3:f2:26:3e:89:61:ad:61:74:7d:23:67:11:
2f:63:c2:44:e6:bf:08:58:a7:77:ed:47:01:08:86:6c:e8:99:
37:df:a4:2b:f3:56:26:f8:84:6c:db:bd:65:8c:10:96:f5:ec:
df:1b:27:23:21:15:38:46:ce:16:ec:f4:bc:73:d0:6c:c7:95:
d0:10:f1:cb:60:84:67:c7:df:52:e6:07:bb:79:45:22:6b:19:
55:da:90:6d:fb:f3:c6:7a:f4:e8:29:f7:f9:27:d9:e7:11:bb:
42:fd:1c:a9:45:fd:d5:97:54:54:98:49:14:a8:a0:11:fd:99:
6d:cf:05:fd:b4:75:b6:47:3e:e2:3a:ff:53:1a:34:d5:f9:4a:
2b:a1:b2:70:c2:a0:55:39:d0:62:f8:03:1b:d8:e1:d6:9b:02:
01:57:56:30:a3:9a:95:22:f4:ca:89:d9:d0:5b:fc:8e:b5:fe:
23:f2:b4:2d:93:23:76:c3:63:2e:31:21:93:84:7a:88:43:f4:
1b:70:82:ec:e9:82:34:4e:02:91:9d:03:c9:d3:91:d1:94:d8:
38:b2:1b:77:26:8a:4a:ee:41:b6:77:d1:fd:20:55:05:d3:8e:
27:48:9d:7e:71:04:f8:19:ea:5c:62:8e:32:61:43:d7:56:8d:
ad:e7:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 05:29:14 2026 by rpki-client