
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json)
Hash identifier: 0stj8mG+OnkAKVRGahWoVIqyweSIcHBI4o9kRI7fWVs=
Subject key identifier: D5:D3:49:32:80:C8:F9:85:08:60:D8:D1:0D:BB:BB:44:34:24:9E:03
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial: 1DD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
Manifest number: 1DB9
Signing time: Fri 24 Jul 2026 01:31:05 +0000
Manifest this update: Fri 24 Jul 2026 01:31:04 +0000
Manifest next update: Fri 31 Jul 2026 01:31:04 +0000
Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: woM+AS2ASvBnHFGkzMQmMVGY0EAGGJMaxToBB0T8/Fs=)
2: 4CBDBA5E3F0011F18130B663C8833773.roa (hash: MYIZdYIrRMX8GOTnK8Yq+Fr2Q47kM6T/tbwrjmOwZ2A=)
3: 52F3327C86FF11F194514C90ABEE528E.roa (hash: 1w8W/4m7mLE7LxDR59hH2lCRVs2OIycHF+NjBW+Eagc=)
4: 6C2E2E523E6311F18F888BA6CC833773.roa (hash: in8CGxxlDGfml/aUO9WdoJzjfkkSWplEb1DnwBMfsmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7640 (0x1dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Validity
Not Before: Jul 24 01:31:04 2026 GMT
Not After : Jul 31 01:31:04 2026 GMT
Subject: CN=6a62c059-d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:36:46:4f:c8:d0:7e:47:41:b8:b7:f0:34:
e7:60:bf:3b:24:81:5f:e0:ea:1d:f0:14:64:6b:e2:
9f:2f:cd:f1:65:79:b1:69:71:9d:de:fd:c8:de:dc:
62:89:c8:7d:6d:0a:4a:3a:b9:76:7f:01:f6:a4:86:
f4:bb:47:e8:eb:91:43:e0:24:5b:59:5d:94:5c:cf:
f7:07:95:70:0b:01:db:44:42:5b:4d:eb:56:1a:21:
be:8f:79:3c:7e:c8:ac:c4:3d:09:d6:05:c3:ff:98:
60:7d:df:54:40:a0:ba:67:62:93:22:52:80:8a:f6:
83:69:05:87:41:9f:8c:4b:fc:6a:81:6a:3d:f7:aa:
c8:cb:a2:4f:04:6c:42:b0:56:ac:2c:3a:31:4e:b6:
82:59:0c:3a:08:ed:bf:43:6f:8b:00:cc:e8:c6:5c:
d1:8d:3e:23:8c:86:48:71:29:67:bc:50:a2:f2:7c:
cc:40:50:91:35:8d:a0:a5:42:54:9f:85:90:fd:89:
7c:98:a9:f1:ab:92:80:34:1e:64:0f:60:35:74:f6:
63:27:78:d9:36:b6:74:bc:0a:44:be:de:ae:50:f0:
b7:57:82:4f:8d:07:7b:39:2f:2f:c6:62:68:7f:73:
e5:06:0e:69:40:f7:61:62:2b:24:f9:dd:8b:e1:10:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:49:32:80:C8:F9:85:08:60:D8:D1:0D:BB:BB:44:34:24:9E:03
X509v3 Authority Key Identifier:
keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:f4:83:18:52:11:18:da:8c:3c:32:b7:bc:26:fe:f1:01:01:
55:ae:79:73:38:58:61:a5:bf:ee:e6:b2:0d:c7:a4:c1:78:e7:
c6:32:d2:88:1a:2a:e8:b7:6b:89:62:d4:93:94:2f:37:4c:e3:
45:27:6d:8f:06:f7:17:73:8a:8c:3e:a5:6f:c5:58:f8:7a:c2:
ce:e0:62:00:d2:38:ed:d9:2b:d1:ec:ba:a5:45:11:9a:3d:82:
18:bd:c1:a1:16:f0:76:ca:3a:b2:3b:d4:3c:1f:93:86:7b:3a:
d4:a3:16:9a:2f:85:11:af:bd:24:52:3b:21:13:4d:8b:04:cb:
fd:4e:22:b8:cb:f5:fc:cb:e5:40:65:61:b3:75:e3:58:4f:b0:
55:ee:40:40:ba:ce:ba:2c:8b:41:a9:67:d9:02:6c:47:ed:bd:
a4:33:ea:b3:7b:50:c3:23:65:6c:6f:c9:4e:77:40:24:90:a5:
0e:75:68:0b:a7:92:8d:ed:1c:47:42:86:5d:d3:d7:f1:f1:f3:
75:98:c2:56:e8:68:9e:71:bd:51:31:93:33:5f:d3:75:46:37:
36:3c:34:e3:e4:e4:c5:de:e7:0f:bd:d9:cc:70:6a:8d:02:ee:
73:67:e1:c1:3d:e8:53:7e:b8:46:96:84:6b:2a:db:fa:86:4d:
18:22:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:12 2026 by rpki-client