
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: PyQKY8ZdK18hMTCxVmt32yIM3k+AfWOqzZgk79Tk8sM=
Subject key identifier: 4E:41:7C:B8:7F:D3:14:C1:9D:D2:79:63:29:BA:1F:33:3A:9E:BA:46
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 0662
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 0647
Signing time: Wed 22 Jul 2026 19:36:15 +0000
Manifest this update: Wed 22 Jul 2026 19:36:15 +0000
Manifest next update: Wed 29 Jul 2026 19:36:15 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: OTwdxqIoMVK/MYOcournaNWqcnigxK5k0me2Ne85TG8=)
2: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
3: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
4: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
5: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1634 (0x662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Jul 22 19:36:15 2026 GMT
Not After : Jul 29 19:36:15 2026 GMT
Subject: CN=6a611baf-be42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:66:32:dd:4f:49:87:98:08:b2:2a:f2:27:
56:14:10:9a:b4:8e:9e:a1:dd:ab:0f:f3:30:a3:37:
d7:04:60:14:87:76:ac:82:f1:4b:2a:3f:80:6b:ab:
86:a9:d3:3a:8f:36:1b:3c:03:dd:38:34:8d:4c:55:
58:b3:cc:d1:20:03:ed:74:f7:3e:af:fc:be:bf:00:
b2:ec:b8:ea:6b:32:69:bc:da:6a:07:36:c3:94:2f:
53:f8:7e:4c:a1:d6:97:f5:07:bb:ef:43:ee:e6:64:
4a:e3:3a:36:59:de:05:69:81:c5:86:e3:56:cd:ed:
15:35:74:33:a7:98:1d:6a:75:c0:c0:3e:b8:bb:a6:
ae:e3:30:ab:2a:d9:48:ee:49:19:97:28:90:2a:21:
ae:45:9d:e6:21:f2:2c:79:c1:5f:7b:29:07:f7:1e:
e0:09:bd:c5:c2:fc:01:4a:4f:77:4f:07:cd:50:40:
ce:a2:84:e7:50:b4:26:aa:8b:3f:78:bb:b2:56:44:
17:19:6a:d6:cf:cb:17:16:ca:fe:06:66:a9:d5:66:
4c:a5:08:ba:e1:8d:40:c3:fb:bd:1c:d0:38:6e:3c:
82:19:2c:b4:51:7b:55:82:cb:da:47:21:65:e0:22:
2d:e1:3a:9f:77:73:b3:8e:f8:89:48:28:85:ff:8b:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:41:7C:B8:7F:D3:14:C1:9D:D2:79:63:29:BA:1F:33:3A:9E:BA:46
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d8:91:6c:ed:23:ac:ed:d9:6e:da:5d:fd:dd:95:dc:e8:6e:
d0:da:c5:08:08:73:64:ea:25:8e:9d:f7:c1:7d:c7:af:75:b8:
bc:1b:2d:80:3e:0a:bd:28:d4:98:88:0c:e3:71:00:a8:ba:2b:
8a:25:cc:23:ec:a1:d3:62:7d:17:3f:f2:22:64:3d:c0:50:03:
b8:b1:09:ef:b2:b1:bf:6c:fd:e6:5e:c2:04:5d:9b:64:99:88:
f8:ea:58:20:9b:95:8a:75:cc:49:42:98:54:39:96:fe:4c:c8:
01:bc:e5:ae:e9:b0:fa:2b:04:77:c0:43:3c:f9:cc:64:b7:56:
9f:82:89:1c:90:ab:dd:81:d0:8f:da:ef:b7:1a:29:8b:1d:b4:
1d:83:f2:d1:e9:fb:32:0e:5c:d2:24:5a:7c:4f:4d:5b:19:ca:
7f:43:44:fa:b9:e6:ce:88:fe:40:83:38:5a:0d:d2:d0:ad:f4:
3d:af:9e:16:8b:70:66:38:7d:98:4f:e7:91:3e:c5:94:20:e2:
8f:29:30:af:b6:17:99:14:82:d8:28:34:57:cf:15:6f:93:ea:
21:6e:16:ce:8f:40:38:36:b1:71:cc:84:f2:55:04:11:3b:d9:
69:7b:54:c1:b8:98:16:db:1b:65:7b:8f:a3:1e:a7:db:63:70:
13:c0:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:24 2026 by rpki-client