
$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier: EfOvyJ1i/o8/Agjo1B0ZuvCjVrc7mIOu3MNVHPDR96w=
Subject key identifier: 3D:D3:29:FD:2E:20:E9:0A:4C:66:80:0A:C9:E8:32:1B:EC:A3:24:E5
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer: /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number: 60
Signing time: Wed 25 Mar 2026 07:15:14 +0000
Manifest this update: Wed 25 Mar 2026 07:15:14 +0000
Manifest next update: Wed 01 Apr 2026 07:15:14 +0000
Files and hashes: 1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: /CLk6D4oBybC6rkIWQTL6Gw5PYAAXI1D6gUOFpXNNIo=)
2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: /b5wosAPirzR7z8l8ddHa+xhWDIj0SNlWEAWkIZ6EwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Validity
Not Before: Mar 25 07:15:14 2026 GMT
Not After : Apr 1 07:15:14 2026 GMT
Subject: CN=69c38b82-2217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:2b:9b:f2:62:ab:86:1e:27:37:47:2e:b9:
91:b7:ef:04:b5:1a:ee:e2:43:8b:d7:09:44:47:bd:
71:34:90:dd:1d:7e:fc:78:f5:2c:2a:5f:10:e2:10:
4a:02:13:54:f4:6c:56:fe:b9:3a:16:02:de:fb:63:
13:74:a8:5a:86:fd:f2:ec:cb:da:28:65:94:2e:a7:
a3:3f:10:00:85:d1:82:70:91:fb:03:ff:bc:60:86:
dc:fe:ac:10:20:1d:5c:52:7f:47:2a:dc:70:03:c7:
07:42:b8:75:8e:08:44:75:be:ea:17:b3:dd:48:86:
fc:a2:5f:c9:63:b9:e4:8a:08:66:c3:5f:49:35:96:
be:2f:3e:18:0b:99:06:46:fc:32:7e:1d:84:47:d2:
88:6e:b0:aa:13:38:54:2b:14:05:d4:aa:05:1d:54:
20:ad:d1:64:d1:e5:db:65:b9:df:a1:3a:76:06:90:
a9:64:70:d4:bb:bc:19:90:43:62:70:fb:87:f4:f1:
6f:71:dc:51:0e:0c:92:02:72:da:be:c8:36:b9:2a:
89:ee:fd:40:c8:f8:a1:f7:b3:90:09:83:55:14:56:
55:25:d0:4f:a8:6f:93:3a:c3:1a:67:ac:f0:ac:75:
54:b2:65:64:05:55:a2:e8:07:ba:f6:18:1b:a0:b6:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:29:FD:2E:20:E9:0A:4C:66:80:0A:C9:E8:32:1B:EC:A3:24:E5
X509v3 Authority Key Identifier:
keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:1e:51:04:c5:58:8e:54:22:3d:67:55:63:3d:70:62:c6:
0d:fc:23:00:f5:f9:a7:db:37:9d:0a:97:c6:9b:e6:f7:0f:ab:
d2:20:33:a3:9e:7c:62:35:15:47:8f:98:8e:ca:a2:27:92:4f:
32:4d:36:fa:f4:9b:7e:f7:b7:76:13:b8:86:b3:13:95:a7:09:
d4:34:11:7d:ea:45:e4:24:94:e2:77:5f:05:94:c1:80:e2:93:
77:a7:f4:c4:45:5c:f9:40:ec:4c:56:bd:46:54:ae:18:84:0e:
26:bc:8e:73:55:ba:2d:3a:80:90:61:3e:be:46:af:10:b6:93:
d3:e6:6e:f2:68:0e:0a:4f:a5:81:83:4f:80:79:0c:3b:ff:a9:
26:4b:01:18:01:b5:af:03:f7:ed:d7:94:ec:e9:30:32:ca:96:
67:de:16:68:71:ae:b3:7d:f3:00:d5:9c:1d:46:3d:fd:8c:d5:
26:2b:66:4e:d4:21:b3:ed:f5:82:16:55:c5:66:cb:9e:b8:e6:
33:a0:45:0b:b4:cb:30:78:04:82:5e:d9:75:70:84:45:7a:b2:
ff:d6:23:5f:ad:be:f4:48:b9:f2:eb:13:1b:91:0c:1e:16:1b:
a6:2f:80:d9:f7:b6:c9:d2:ae:e8:e1:23:d2:e2:23:b6:9a:9f:
53:c7:4b:6f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MTAzQzExMC8GA1UEBRMoNkU5QTk4RDlCRDY2Mzg3RjQ4M0QwNkI2ODMzREEyREM0
QTdGMzY4NjAeFw0yNjAzMjUwNzE1MTRaFw0yNjA0MDEwNzE1MTRaMBgxFjAUBgNV
BAMTDTY5YzM4YjgyLTIyMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjfiub8mKrhh4nN0cuuZG37wS1Gu7iQ4vXCURHvXE0kN0dfvx49SwqXxDiEEoC
E1T0bFb+uToWAt77YxN0qFqG/fLsy9ooZZQup6M/EACF0YJwkfsD/7xghtz+rBAg
HVxSf0cq3HADxwdCuHWOCER1vuoXs91IhvyiX8ljueSKCGbDX0k1lr4vPhgLmQZG
/DJ+HYRH0ohusKoTOFQrFAXUqgUdVCCt0WTR5dtlud+hOnYGkKlkcNS7vBmQQ2Jw
+4f08W9x3FEODJICctq+yDa5Konu/UDI+KH3s5AJg1UUVlUl0E+ob5M6wxpnrPCs
dVSyZWQFVaLoB7r2GBugtjp1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPdMp/S4g
6QpMZoAKyegyG+yjJOUwHwYDVR0jBBgwFoAUbpqY2b1mOH9IPQa2gz2i3Ep/NoYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMDNDL0ZBNDI4RjU0OUEw
NzExRjA4MTAxN0U4NkM0RjlBRTAyL2JwcVkyYjFtT0g5SVBRYTJnejJpM0VwX05v
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYnBxWTJiMW1PSDlJUFFhMmd6MmkzRXBfTm9ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx
MDNDL0ZBNDI4RjU0OUEwNzExRjA4MTAxN0U4NkM0RjlBRTAyL2JwcVkyYjFtT0g5
SVBRYTJnejJpM0VwX05vWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBf9B5RBMVYjlQiPWdVYz1wYsYN/CMA9fmn2zedCpfGm+b3D6vSIDOjnnxiNRVH
j5iOyqInkk8yTTb69Jt+97d2E7iGsxOVpwnUNBF96kXkJJTid18FlMGA4pN3p/TE
RVz5QOxMVr1GVK4YhA4mvI5zVbotOoCQYT6+Rq8QtpPT5m7yaA4KT6WBg0+AeQw7
/6kmSwEYAbWvA/ft15Ts6TAyypZn3hZoca6zffMA1ZwdRj39jNUmK2ZO1CGz7fWC
FlXFZsueuOYzoEULtMsweASCXtl1cIRFerL/1iNfrb70SLny6xMbkQweFhumL4DZ
97bJ0q7o4SPS4iO2mp9Tx0tv
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:43 2026 by rpki-client