
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json)
Hash identifier: qUYmZI/X/QI1+1GUbh3y4Y9BbYlKuIBJVny+fDip2tM=
Subject key identifier: 45:32:12:46:35:68:9F:D2:7E:82:E0:26:A2:F9:16:33:55:34:F4:B3
Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
Manifest number: CF
Signing time: Mon 11 May 2026 06:55:14 +0000
Manifest this update: Mon 11 May 2026 06:55:13 +0000
Manifest next update: Mon 18 May 2026 06:55:13 +0000
Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: w7uF1WzzCDb7u3m3Edf0JmhEyfsyePmatnDzLxu4two=)
2: 28BBA728141411F08D862A74C4F9AE02.roa (hash: P446GhZxMIH5ntaxf5uODP8HpX8PKKRVRtpeogmimzc=)
3: 2857C712141411F08D862A74C4F9AE02.roa (hash: fCwPLnnKHeCfga4EZBzIKSNWWA3Do3Z4t/zNIL+OprI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Validity
Not Before: May 11 06:55:13 2026 GMT
Not After : May 18 06:55:13 2026 GMT
Subject: CN=6a017d52-7f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:1a:37:a9:91:19:b8:99:ec:9c:76:78:e2:
dc:bd:65:f6:ef:98:75:16:d6:10:d7:ce:f8:ca:5d:
41:50:e2:58:f9:01:c8:a1:92:9f:71:86:77:33:ab:
33:8f:6a:5c:af:8f:c7:eb:98:98:7c:93:bb:88:a6:
bb:8b:65:e1:52:fa:ac:10:6d:8f:84:28:ba:19:68:
4a:3f:39:1d:ed:9f:34:ca:7e:fb:8e:9b:3e:93:ba:
bf:a8:98:ed:9c:11:1e:35:67:cc:3c:fb:09:f4:70:
f4:a9:48:ea:5c:68:c5:d8:31:af:ac:4b:f4:61:64:
b8:ed:3b:ff:ea:5d:f9:03:d6:ed:15:65:00:85:12:
bf:7f:94:6d:41:a2:a8:1f:ab:d2:a4:91:b4:9c:a5:
4d:d1:12:ac:9b:40:77:5c:c5:93:d6:d8:18:42:87:
8b:f3:cb:ba:93:f9:18:16:ac:1b:ca:1d:e5:18:89:
69:8d:68:4a:21:52:d2:1f:be:89:3b:66:8a:94:5c:
e5:a7:dd:4f:78:50:5c:ac:6c:bc:66:63:9c:7f:a8:
cd:a9:c4:91:63:72:e2:6e:df:32:e7:7b:cd:cf:b7:
39:c1:05:f8:ce:e5:7d:3c:ae:5e:50:9d:ff:47:3e:
0c:0c:47:a4:4b:3b:2c:8d:3f:18:2c:86:e4:9c:ba:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:12:46:35:68:9F:D2:7E:82:E0:26:A2:F9:16:33:55:34:F4:B3
X509v3 Authority Key Identifier:
keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:9a:c3:a5:00:1d:75:66:d8:a1:2b:c7:ce:87:c6:b1:6f:54:
bc:36:d0:35:52:e7:5e:c9:a0:d4:4d:27:61:78:87:a1:3b:20:
db:41:5d:8d:6f:3f:40:9f:3d:5a:2d:9d:1b:06:18:49:ee:ed:
27:1a:08:47:26:d4:46:8e:30:96:76:e2:21:97:df:20:49:1d:
ad:2f:3d:23:c2:06:ff:f6:f3:2a:10:db:ec:7a:1a:6a:7d:fb:
31:53:b7:3a:3b:a0:bc:1c:69:59:b3:24:fc:49:7d:80:4b:b8:
a7:23:88:93:44:af:75:ee:c9:e4:11:14:fe:3c:1f:90:90:4f:
6a:f8:54:67:f4:cf:b8:5b:96:05:0a:e4:4b:cb:d6:e1:f6:d8:
5c:cc:f5:b8:12:ad:7c:6a:9e:c6:fd:1a:e5:e2:b1:bb:9a:bd:
0d:2f:f5:22:80:15:07:41:1d:f7:42:66:b6:7b:e6:d2:1d:f4:
0a:b6:cb:2b:74:09:c8:02:4f:73:68:66:8f:a6:2c:8f:21:fa:
23:97:31:18:a4:4d:ba:8a:ce:09:c1:10:7b:29:91:c5:a0:00:
89:91:75:7b:64:26:4c:ab:36:44:b6:e5:8c:dd:9f:85:70:5e:
c2:16:a7:7e:c2:84:3f:e2:80:87:2b:e4:4c:52:f3:7c:32:46:
6c:d1:c5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:21 2026 by rpki-client