
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
File: BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json)
Hash identifier: qSTq9oDzl71VKKcva32laigWVYxXat8pYw6GPedfJHk=
Subject key identifier: 02:AA:72:1B:76:0B:C3:BF:37:BA:C7:CF:15:D9:57:B0:45:9E:9C:0A
Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Certificate issuer: /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
Manifest number: 0164
Signing time: Sun 01 Mar 2026 05:52:34 +0000
Manifest this update: Sun 01 Mar 2026 05:52:33 +0000
Manifest next update: Sun 08 Mar 2026 05:52:33 +0000
Files and hashes: 1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: ipKQ44rCQZdl706vLobE8Fu1S4nHwj+qQTgSnca9+B4=)
2: 08D1870EF0B411EE962EE784C4F9AE02.roa (hash: nrFzYe2K6I+fVS0WsJAv1h0mXVgQBFKENnTmsnUT3Jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Validity
Not Before: Mar 1 05:52:33 2026 GMT
Not After : Mar 8 05:52:33 2026 GMT
Subject: CN=69a3d422-f332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:52:d4:e5:df:dc:13:97:cd:9b:bd:77:ba:
4e:a3:1d:09:9e:8f:89:38:39:83:80:19:f7:04:59:
86:86:f7:a4:04:1f:98:7d:fe:ab:ac:22:c5:c7:0e:
d9:34:cb:ca:13:11:6a:56:64:f6:32:1f:b0:3d:8e:
97:4e:4b:0e:92:8a:68:6e:05:2b:2e:74:c3:cb:17:
2a:a8:60:44:d8:85:aa:0f:94:fb:2c:88:ac:ab:c2:
56:05:ba:20:07:f2:b8:5b:35:72:ec:7e:7f:f5:35:
9e:4d:8d:99:ec:0e:79:83:bd:6f:62:82:48:47:d4:
76:ee:3c:9f:34:19:89:cb:a0:1a:03:ae:6c:a1:86:
84:3c:52:4e:d4:25:04:1d:76:03:68:93:b8:d8:11:
ab:4b:bc:89:cf:a6:cc:04:4c:84:8b:19:51:17:0d:
3c:96:a4:50:6f:cb:ef:6d:ff:cd:1c:ed:58:c1:55:
6a:5a:94:ea:30:94:da:cd:ea:eb:b0:8d:c6:59:d8:
f2:c5:cd:82:a4:31:c1:38:fa:06:1f:56:46:d7:85:
88:66:d2:fa:bb:b8:8c:e9:a9:7a:b2:7d:8d:c1:06:
9e:0b:e8:f1:78:79:9f:1b:b9:17:e0:be:e0:17:e8:
e6:94:38:9f:cc:5d:51:27:71:24:cc:4d:f2:ed:b9:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:72:1B:76:0B:C3:BF:37:BA:C7:CF:15:D9:57:B0:45:9E:9C:0A
X509v3 Authority Key Identifier:
keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:66:aa:4f:81:03:8a:3a:d2:82:6b:7d:45:63:c5:1c:e8:dd:
95:6b:cf:35:41:8d:5e:49:d7:7d:e9:ea:5b:16:99:a0:ad:41:
2f:9f:23:a8:da:05:b1:0b:50:ac:41:83:fc:26:d0:83:67:c5:
69:0c:30:a4:9f:04:88:29:40:54:4f:55:d7:be:51:ee:98:63:
83:42:c6:91:ef:90:ec:15:f2:f6:78:a9:e1:3d:1a:2a:2e:7f:
92:dd:de:bf:70:a8:9e:4f:cb:cb:9c:08:03:03:60:be:6c:1c:
fa:e5:30:05:53:68:46:7a:86:78:da:da:2c:0e:d0:bc:70:fb:
72:73:c2:a2:af:21:9b:7c:d6:2a:c8:c6:35:9a:0c:21:4d:ed:
52:8e:f0:ad:2f:b0:62:d0:a1:61:60:c6:eb:07:e6:14:9c:3a:
05:61:84:89:d1:b3:77:36:f0:0b:0e:c8:a9:8c:1d:40:d4:d9:
45:c8:69:86:1d:70:c6:31:a9:b4:97:1b:24:b5:7e:f1:81:63:
38:1e:03:a7:af:4e:de:2a:b2:6a:87:07:b0:1d:86:56:85:c0:
09:81:f3:fd:d9:2f:b0:12:1c:25:60:9e:12:59:a8:f0:e5:d2:
a4:d6:84:90:97:6e:58:68:6f:d7:86:df:68:ab:87:56:77:9b:
8c:9f:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:35 2026 by rpki-client