
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json)
Hash identifier: kcC71KX5icxq/0RMoimZR1fGOOU/giWIOTnJsPpwCIg=
Subject key identifier: 06:DD:5A:35:2B:00:50:58:EC:42:AA:61:A9:49:BC:A9:01:8F:05:70
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
Manifest number: 0165
Signing time: Fri 17 Apr 2026 05:13:55 +0000
Manifest this update: Fri 17 Apr 2026 05:13:54 +0000
Manifest next update: Fri 24 Apr 2026 05:13:54 +0000
Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: JFDh85K56WHUENWUJe6EBKsLfxP9g/50rk269ygil+Y=)
2: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: KBwZ0Bh81Ox2IUFyz9I7ijbEOAfndojyLmDer3zkH74=)
3: FA414880107B11F09A6AF277C4F9AE02.roa (hash: 7CrcHnX9u7Qh9wpxaS4RWZSSKmnBWujTJ32kRlMQGM0=)
4: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: WP9+5Ms1ChWYZyb/nmIxHwJL09xTjBwNcIuk6ZDgaos=)
5: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: ElmyWXvCHo+AUoV8EKF8B3bmRpxGFQmZWv8iV6gr7rs=)
6: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: Rb7qYVEqngyzVprIHtHroEk3Tc1sKvHHk4W+QyxuyQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Validity
Not Before: Apr 17 05:13:54 2026 GMT
Not After : Apr 24 05:13:54 2026 GMT
Subject: CN=69e1c193-8fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:e4:b5:15:69:56:82:8e:9a:03:17:fb:8b:
ce:d6:f7:0f:41:1b:7b:7a:3f:b7:80:5c:fe:ad:a4:
4d:04:5d:9f:9a:be:a5:a0:30:ee:4d:56:41:4e:89:
84:16:c8:95:a5:90:52:5c:ea:8b:72:90:3b:9d:0d:
65:cd:93:c8:91:71:39:b4:52:c2:e2:4b:b4:fc:b7:
f7:5e:84:91:e5:f0:c5:06:e7:27:55:25:a1:7c:5e:
07:a5:a9:c7:fd:ee:23:1b:61:58:5b:01:8e:d1:d8:
c5:45:56:d9:c6:6d:11:d6:f1:a4:a0:04:c9:88:d7:
d2:9f:d8:42:43:69:83:df:d3:4b:cd:bc:df:c5:22:
0c:b6:9c:9d:ca:98:34:8e:2a:34:da:d0:62:1b:a7:
77:24:f1:3c:f1:f9:9f:17:c1:44:6f:fc:09:7c:18:
f6:24:c8:b1:38:e3:09:b1:b3:d4:53:90:b8:80:13:
f2:eb:a0:72:ba:62:5c:6e:f9:9e:2f:98:f1:85:19:
df:0e:0c:3e:ed:8f:84:cc:6e:f7:8b:bc:fb:b7:09:
76:b8:85:1a:e7:c4:61:10:50:59:64:79:35:42:15:
7e:a6:19:ed:f3:0c:7c:00:25:2b:c0:b9:d2:ee:84:
f2:34:fa:2f:b6:55:b7:f3:4f:f7:cb:20:3e:8b:9e:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DD:5A:35:2B:00:50:58:EC:42:AA:61:A9:49:BC:A9:01:8F:05:70
X509v3 Authority Key Identifier:
keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:8c:09:67:b4:c9:a7:b2:ab:ff:c3:ca:e4:95:41:4f:b6:fc:
2f:55:6e:01:e3:8e:2a:65:9e:53:76:f2:62:b8:b2:98:28:37:
5c:6c:a3:ac:54:62:d5:ae:2f:6b:91:49:52:08:6c:58:af:d2:
d3:e6:dc:07:3c:58:e3:82:57:68:b0:62:96:e5:f8:de:4a:72:
97:7a:58:d9:1e:aa:fb:e9:48:7b:f2:80:94:f2:91:f9:31:b0:
1c:f8:04:f9:bf:58:a1:bc:41:08:8c:47:ab:a4:24:af:90:bf:
c2:8f:30:29:5d:c0:7d:bf:d4:d8:b8:d1:94:c1:96:f9:df:f7:
61:94:9b:31:b0:bc:fa:a2:ad:81:ac:67:d8:67:c3:58:4b:f4:
88:5f:c2:78:46:af:3b:e3:95:a0:be:92:04:65:60:56:84:27:
97:26:70:83:30:45:fb:77:09:1f:52:75:34:d6:4e:7a:2b:03:
b2:c6:e4:6a:eb:57:c3:1e:bd:fc:68:92:67:58:e7:9e:9c:37:
5a:fd:79:e3:1b:5f:a6:a4:83:24:cd:41:f9:cf:8c:d7:00:d7:
ef:5a:4c:88:9e:57:e6:12:8d:59:5c:2e:53:ab:be:94:d0:f1:
ec:39:c1:f9:fd:d2:ed:2c:dd:08:47:74:46:ab:8d:67:ab:2a:
10:8e:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:45 2026 by rpki-client