
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json)
Hash identifier: vBQhlRl5DZ8pUZbXF55r/8PlbKXvPnjriHQsY/CbaRI=
Subject key identifier: 01:63:C7:16:EC:F5:FE:D1:D6:EA:9A:76:3F:3A:19:51:9E:82:94:DB
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial: 0CEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
Manifest number: 0CD0
Signing time: Tue 12 May 2026 18:29:45 +0000
Manifest this update: Tue 12 May 2026 18:29:45 +0000
Manifest next update: Tue 19 May 2026 18:29:45 +0000
Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: nHMGh0DhVF/O+FY1iAwoiv0y9nO1UQZpWKAelhSmWLs=)
2: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: H223H2o9dk5m/ZWR7SfR3uoyBy9MoGjlgT832ixhTqA=)
3: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: 84HSU/b3Ji+23l8vXYY4ngi5sLo8HjrYKnYa+FFKrMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Validity
Not Before: May 12 18:29:45 2026 GMT
Not After : May 19 18:29:45 2026 GMT
Subject: CN=6a037199-7f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:12:87:50:92:80:89:57:36:9c:c3:f1:28:
03:77:37:1e:17:81:ad:49:5f:ce:4c:d7:a6:65:a4:
a5:66:08:7f:a7:02:66:4f:92:f2:7d:8c:43:86:28:
eb:e0:f8:1f:34:b1:77:07:2c:51:7e:48:8c:11:7e:
f2:86:85:01:54:00:f7:52:80:e5:3e:fd:75:1f:93:
48:ae:ec:16:b3:0e:18:4e:51:7a:b0:23:da:be:26:
94:4d:62:90:7d:df:0a:f3:38:29:37:61:0d:9b:83:
9f:c7:18:ac:a6:ba:6c:dd:5c:a5:57:05:ba:ed:86:
ce:5a:ef:b4:7e:a4:97:5b:8f:2f:ce:2f:ac:eb:a9:
8d:c3:71:5e:f2:f2:91:81:ae:5b:70:ae:43:85:e3:
3f:fc:3f:2c:16:55:e7:0d:48:00:1e:d5:63:95:2b:
22:aa:bb:8e:d1:43:2e:61:0a:67:7c:88:e4:e8:ea:
17:33:2e:8e:f7:a5:fc:b9:e3:db:f0:59:65:87:07:
88:94:93:65:a9:a7:4c:e7:94:82:bb:e4:cb:04:71:
cc:ac:94:aa:ab:22:8c:0f:2b:5d:a2:0a:0e:4e:bc:
db:43:99:92:b8:05:ac:1f:ba:3d:ab:35:e5:62:6e:
e8:b4:cc:5a:f6:81:7a:84:89:c4:d1:2c:a8:bd:e2:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:C7:16:EC:F5:FE:D1:D6:EA:9A:76:3F:3A:19:51:9E:82:94:DB
X509v3 Authority Key Identifier:
keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c2:0f:88:93:1c:70:bd:b6:1f:57:5b:c3:45:74:88:4b:8f:
1b:35:e4:e3:60:e5:6d:02:d3:4f:02:f1:53:99:b4:9f:c9:d2:
dd:b0:45:90:94:b2:40:d6:9b:6b:30:2d:09:8c:90:9a:99:f7:
32:b3:c9:80:e7:3b:5f:3b:ff:72:f5:94:b4:1a:45:08:3c:e1:
a3:c5:5f:45:d0:b1:ab:cc:78:b4:3d:c2:91:e2:3a:e7:50:54:
e2:c7:c7:f3:70:39:da:ee:42:1e:4d:55:c2:c3:fc:26:b4:89:
a2:7f:f5:3e:cc:c1:4a:af:ab:64:9c:1d:f2:8a:92:c4:24:ba:
44:8d:87:dc:54:6b:db:22:fb:34:ce:5b:77:a8:28:f7:80:a5:
11:9e:bb:78:0d:fb:14:29:2f:cb:9c:bc:7a:9a:db:12:a8:b2:
ad:62:96:1d:9d:cb:31:cd:7a:e2:1e:41:84:02:84:07:79:fc:
2e:10:c9:e9:ab:c4:9f:08:ba:f2:bf:08:ab:08:aa:cc:91:d1:
9a:28:6e:7a:5c:b1:78:17:a2:32:5f:35:de:8a:db:80:96:c7:
0b:70:73:e9:d0:82:ad:8b:2e:45:39:bb:96:dc:d8:5f:5c:87:
03:6d:eb:c6:19:8d:f5:77:e5:1b:dc:2e:63:ac:9b:b2:3c:4d:
6d:c6:68:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:57 2026 by rpki-client