
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
File: BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json)
Hash identifier: 5T3rtuihRxG15TKL7QnLbyOHj4ln2r1x2Tny6hJFM2A=
Subject key identifier: 27:40:4C:F2:0C:78:14:05:B1:D9:54:84:BA:8D:B6:3A:FC:B2:2C:E8
Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Certificate issuer: /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
Manifest number: 0171
Signing time: Wed 25 Mar 2026 03:58:54 +0000
Manifest this update: Wed 25 Mar 2026 03:58:54 +0000
Manifest next update: Wed 01 Apr 2026 03:58:54 +0000
Files and hashes: 1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: nUVgS4X0TaEXP+48ShCOWRTwEYUkUFawcUgNh+bCGRw=)
2: 08D1870EF0B411EE962EE784C4F9AE02.roa (hash: qQ2xP1GvsecEoNe5H6sf4MiSWLqhNRPkeVi4L/fs0d4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Validity
Not Before: Mar 25 03:58:54 2026 GMT
Not After : Apr 1 03:58:54 2026 GMT
Subject: CN=69c35d7e-3733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:34:fa:53:2b:71:07:f3:50:4f:c3:5b:f8:
34:9c:8e:3c:39:28:c7:09:af:6d:99:b9:16:18:b4:
e8:c3:c2:34:c2:73:3d:54:db:28:44:52:d6:d2:ea:
d4:3d:cb:97:18:1c:c2:c2:96:35:48:2b:cc:6a:eb:
31:c3:2c:22:4e:9e:e5:34:9f:68:65:28:ae:93:7e:
38:39:60:6e:9d:b8:11:f5:1b:90:80:aa:b4:a0:d9:
5c:13:d2:0c:99:e8:56:40:5a:4d:41:b8:6e:51:5a:
a1:74:4d:8d:5a:a3:be:66:14:89:ee:bc:ed:0d:2f:
5f:86:96:01:11:f6:87:55:8e:16:49:37:1a:cf:f3:
20:8b:be:d3:7b:c8:bf:8d:90:cd:80:74:89:56:cd:
16:25:03:3f:76:73:97:6a:93:97:07:c0:af:b6:a6:
10:3a:1e:f3:4e:0c:ff:79:70:ee:7e:6b:66:6f:d4:
27:60:fe:03:c2:22:e6:99:7e:c8:e4:a9:ea:5c:e1:
d6:55:eb:74:1f:66:e4:f1:da:f3:c3:66:2b:de:6f:
32:58:e9:d7:e8:47:9f:ab:1f:f8:08:95:ad:a1:4c:
95:7e:cb:a4:8f:ab:f3:7f:c3:05:88:4d:69:38:a0:
1f:34:e7:d4:ad:b3:47:43:30:af:1e:bd:49:49:05:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:40:4C:F2:0C:78:14:05:B1:D9:54:84:BA:8D:B6:3A:FC:B2:2C:E8
X509v3 Authority Key Identifier:
keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:42:9a:3a:e4:32:f1:7e:bc:31:9d:3e:1b:8f:f8:49:7d:fd:
8f:15:4b:5d:9c:08:43:42:16:a3:c9:ee:05:d7:e2:ee:38:66:
59:a2:28:81:eb:1f:54:60:1b:cf:46:4d:00:5b:a7:e4:9d:dd:
31:1a:0a:fa:4e:1a:28:47:22:a9:32:09:c8:06:28:47:db:0d:
b0:fe:89:d6:26:17:67:31:bf:21:65:2e:e3:73:aa:4d:10:b8:
d7:b1:88:21:d2:e7:3d:ec:f9:15:32:fb:c4:bb:48:32:d3:b6:
41:c0:f3:fc:35:69:ed:8e:43:82:22:53:cf:d6:5b:4e:bb:b2:
2f:f3:53:0d:e8:10:2c:ee:95:5c:01:a8:bb:c4:7a:be:7f:29:
32:57:4c:90:79:a8:4e:c3:1e:5e:59:ab:8e:df:6d:da:90:1c:
1e:5b:64:2c:0b:6c:d8:0f:82:66:29:e2:55:dc:8b:7f:7f:22:
9d:80:05:a5:35:d5:2f:f4:16:02:7a:10:9a:9d:65:14:df:64:
fd:ec:c9:2f:70:13:05:be:e2:d6:15:5d:dd:14:c2:34:a9:f0:
49:4e:0e:ab:6a:8b:86:5d:93:e0:ab:8b:69:07:48:0d:b8:6b:
21:d1:78:96:22:fc:fa:90:7a:a9:77:2e:f5:47:40:01:b0:0e:
8d:40:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:36 2026 by rpki-client