
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: FgjvDl+apSsLTdCF1rVco2hoqpGajdXbryZliLq9P10=
Subject key identifier: BA:7C:42:F7:19:EC:28:1F:2E:12:4C:A0:D5:87:09:4E:CF:87:08:7A
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 063E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 0623
Signing time: Tue 12 May 2026 19:21:56 +0000
Manifest this update: Tue 12 May 2026 19:21:55 +0000
Manifest next update: Tue 19 May 2026 19:21:55 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: Fp8p79n1Z4T7wMGwVY7nC2ASsIPqXvjQkDxF+oaGFOw=)
2: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
3: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
4: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
5: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598 (0x63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: May 12 19:21:55 2026 GMT
Not After : May 19 19:21:55 2026 GMT
Subject: CN=6a037dd4-ce86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:e9:5b:b2:9b:bd:94:36:c6:ed:3f:7f:1a:
d2:ec:01:31:8b:e6:32:b9:2c:e5:38:c7:02:38:19:
f5:bb:5c:fb:c0:02:6c:45:d5:ca:5b:b4:fb:1d:07:
d6:be:c6:7f:3c:86:2f:f4:1a:c1:0a:dc:4e:a2:c0:
de:df:8d:82:94:96:da:ef:33:4a:e9:09:4c:0e:54:
02:ec:d6:a5:0f:00:d7:c1:a2:dc:67:64:fe:5e:2b:
84:0b:6f:e3:fc:87:b5:09:6c:2a:11:56:03:0a:e9:
41:0b:b1:74:63:26:c6:10:0f:0a:48:bc:aa:21:a7:
25:bb:40:7c:48:2d:09:56:05:9d:b8:50:20:1e:1a:
4f:c9:bf:96:bf:9e:96:e7:fc:6b:db:48:a8:cd:58:
e2:fe:02:b0:ab:81:45:05:57:6c:3d:d9:43:5f:ea:
95:32:c2:93:d6:d9:ca:dc:09:17:43:56:d4:27:b9:
0f:7a:5c:1d:cd:23:e7:b4:fc:f0:8d:70:c6:f7:2e:
28:78:2f:df:20:a0:6a:ce:a1:5b:f1:b1:5a:23:f3:
11:a7:ba:52:77:72:a1:31:2b:0c:25:4e:11:64:66:
f6:69:ed:73:cc:3f:a7:28:d6:73:6a:2f:5e:97:55:
9d:5b:cc:2b:14:da:e1:5d:30:35:81:5f:23:2b:f7:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:42:F7:19:EC:28:1F:2E:12:4C:A0:D5:87:09:4E:CF:87:08:7A
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:fb:85:08:f2:d3:af:ab:e0:db:c9:67:68:75:83:09:5d:83:
62:8f:66:c5:ed:60:f8:38:08:ce:ef:11:8a:60:a7:44:5f:28:
7f:e6:04:66:09:81:66:2f:2a:41:2a:d0:26:cb:f7:9b:a0:ec:
3d:d7:52:f4:e6:3c:9b:e4:b1:86:0d:8f:32:f4:de:af:ae:c3:
da:cc:47:91:c8:53:9e:34:6a:57:8a:65:f5:dd:91:de:5f:3e:
a8:f0:c6:7c:d2:58:90:f1:ab:7b:ae:83:29:27:c1:06:05:ba:
98:3a:ac:87:5a:38:59:87:fc:ff:85:93:b8:ab:58:c6:4a:e1:
46:4c:31:d4:ab:1c:11:14:28:ab:1e:90:97:ae:65:ab:bc:cc:
a1:d4:67:c9:9b:03:93:90:87:03:d7:95:81:65:dd:cf:3f:71:
80:cf:94:a4:e5:f2:32:68:d3:a5:bd:71:f2:69:4b:24:80:b2:
ed:24:ff:ad:95:d7:cc:b6:8e:35:14:85:13:25:de:c0:51:78:
5f:60:ae:1b:8b:a4:10:5e:69:a5:b4:7e:9c:72:c9:90:de:26:
e4:dd:c9:1f:1a:c0:fe:b2:c7:0c:b2:30:4f:79:6b:e5:4e:a8:
ed:c7:f9:71:ba:34:d0:68:64:ab:df:53:c3:2c:3d:d6:6f:7a:
a0:04:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:36 2026 by rpki-client