
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json)
Hash identifier: OewWUcvsqr2WNK89O3KzGsxhODYeKpRnPpaMu5IHnJk=
Subject key identifier: 1C:6B:76:3E:2E:AB:29:7A:42:AB:D6:46:03:45:9B:8A:59:05:80:7D
Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
Manifest number: B7
Signing time: Wed 25 Mar 2026 06:17:10 +0000
Manifest this update: Wed 25 Mar 2026 06:17:10 +0000
Manifest next update: Wed 01 Apr 2026 06:17:10 +0000
Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: hyfBCs3jJ8guhp/kZEIgr9rxb2/pDa2IXMIJTnq0ELo=)
2: 2857C712141411F08D862A74C4F9AE02.roa (hash: fCwPLnnKHeCfga4EZBzIKSNWWA3Do3Z4t/zNIL+OprI=)
3: 28BBA728141411F08D862A74C4F9AE02.roa (hash: P446GhZxMIH5ntaxf5uODP8HpX8PKKRVRtpeogmimzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Validity
Not Before: Mar 25 06:17:10 2026 GMT
Not After : Apr 1 06:17:10 2026 GMT
Subject: CN=69c37de6-12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:43:33:8f:0b:51:5b:b5:87:38:70:91:78:
a1:23:14:79:80:e5:ca:ca:85:29:52:c7:b2:74:7c:
8d:08:f7:78:35:a3:da:73:a4:bd:e1:ca:20:2d:7a:
4d:f4:dd:f3:1b:b4:17:07:5e:5a:f3:19:0a:45:d0:
a9:fb:09:3f:95:45:90:e0:95:06:e0:57:8f:79:e2:
0b:fa:b7:6d:3a:3b:1c:e6:4a:da:ab:7e:41:eb:2d:
3a:63:68:ee:d6:26:a9:6d:38:73:dc:e5:f4:5c:2e:
47:72:21:07:5c:fe:2b:51:c8:91:f7:f7:da:3f:a6:
3b:aa:81:d7:06:65:f9:c7:5e:8a:15:80:bb:92:2f:
01:be:b3:fc:0b:0c:f2:3d:a4:df:49:17:67:48:c8:
3e:f0:cc:36:9f:56:dd:10:31:d8:ee:c0:80:f2:4b:
ae:62:98:9e:e9:4c:e9:46:5b:2a:c9:6f:91:0a:92:
0e:ad:a3:b5:a5:34:bd:31:b1:3b:a3:3c:dd:98:4f:
ec:e8:6c:3a:cf:5d:85:85:94:62:33:69:85:b1:63:
78:71:f6:b2:70:0c:4d:8e:b2:ff:7e:af:e9:5e:eb:
cc:68:df:98:9a:68:b1:5d:cf:e1:cc:d1:5d:64:2c:
e4:eb:5a:fd:88:9e:8b:5d:0b:6b:59:84:15:2b:34:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6B:76:3E:2E:AB:29:7A:42:AB:D6:46:03:45:9B:8A:59:05:80:7D
X509v3 Authority Key Identifier:
keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:24:53:4d:82:18:0f:2d:47:ad:62:25:55:ae:36:ae:f4:75:
f0:bf:35:8b:0b:f4:20:d4:68:14:d6:a1:8b:57:4f:92:d4:46:
c9:f5:cd:86:5b:39:f1:fb:e5:95:2a:ef:8c:e9:37:75:d5:12:
ea:ab:ab:ec:0f:99:c3:91:84:5f:94:6f:5e:4d:b6:f6:f8:2f:
7f:b8:77:f8:e7:13:03:c1:4b:9c:c6:6d:a4:32:05:1b:e1:3e:
a5:38:39:88:07:38:e8:51:d5:4e:34:8e:70:46:70:01:67:03:
21:a7:bb:fd:76:c8:2e:9d:56:aa:6c:cc:cf:d7:c2:c1:57:8f:
f6:23:f4:ba:17:74:59:3e:a1:18:db:48:6b:8d:8c:6d:fc:12:
61:a7:31:47:82:c4:a3:ad:92:1e:dd:fb:42:72:29:cd:22:bb:
6c:4f:34:b8:e3:da:ed:3c:83:97:25:2a:b8:bb:a9:3e:7e:2e:
00:91:c2:15:35:ba:00:86:aa:6a:94:95:9d:a8:74:f5:9a:4b:
c7:3a:ed:c7:42:b9:a2:00:3b:63:0b:6d:20:01:44:53:d3:ec:
3f:b6:d1:cb:da:ca:11:1a:92:26:ee:2b:0d:91:69:8a:b6:24:
ee:12:02:77:af:ab:b2:17:fb:10:74:87:7b:8c:7a:21:5b:47:
b5:ea:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:24 2026 by rpki-client