
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json)
Hash identifier: EVScCeuwKMLrA4OcuKp0r4dEIDbV5fASpyEyCm8opmI=
Subject key identifier: E8:C1:30:45:03:CC:84:11:B8:EF:37:9A:5B:FF:19:E7:30:68:7C:BC
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
Manifest number: 014D
Signing time: Mon 02 Mar 2026 02:33:36 +0000
Manifest this update: Mon 02 Mar 2026 02:33:33 +0000
Manifest next update: Mon 09 Mar 2026 02:33:33 +0000
Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: Nfj/AEndU1AVfRedIbxjx12qPIx7JulGZbQRaa75UwU=)
2: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: KBwZ0Bh81Ox2IUFyz9I7ijbEOAfndojyLmDer3zkH74=)
3: FA414880107B11F09A6AF277C4F9AE02.roa (hash: 7CrcHnX9u7Qh9wpxaS4RWZSSKmnBWujTJ32kRlMQGM0=)
4: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: ElmyWXvCHo+AUoV8EKF8B3bmRpxGFQmZWv8iV6gr7rs=)
5: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: WP9+5Ms1ChWYZyb/nmIxHwJL09xTjBwNcIuk6ZDgaos=)
6: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: Rb7qYVEqngyzVprIHtHroEk3Tc1sKvHHk4W+QyxuyQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Validity
Not Before: Mar 2 02:33:33 2026 GMT
Not After : Mar 9 02:33:33 2026 GMT
Subject: CN=69a4f6ff-ac36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:b5:5c:b2:bb:e3:cd:49:49:ee:20:d7:1b:
89:27:ff:08:a9:31:93:66:73:ad:3b:72:e9:a9:12:
66:df:78:41:c1:da:71:fd:ae:23:10:25:72:a8:2e:
18:93:1d:d7:22:71:89:ed:80:52:2c:5e:21:23:74:
1a:f5:e0:aa:a6:37:36:a2:81:f5:98:cb:99:d0:14:
f8:70:c5:41:2c:fe:21:b6:eb:c3:f2:ef:ff:97:f5:
64:d2:d7:f8:af:57:4b:a6:e7:11:da:3b:e6:63:c9:
27:70:cd:9b:c4:5a:05:16:c0:db:a7:47:aa:36:26:
b9:0a:c6:42:be:e7:cb:02:8a:21:1a:c0:20:63:ab:
4c:f7:a6:82:a5:55:06:3d:63:bd:40:c5:d6:96:8b:
2b:e8:69:81:bf:23:8b:be:59:58:02:8c:89:bd:d1:
16:81:85:75:d5:79:64:da:cf:cd:35:3e:f6:21:a5:
9d:1b:17:e2:01:a7:bc:9d:4e:06:0a:5e:1a:07:58:
25:49:21:eb:d3:fe:c1:46:10:38:14:03:ce:26:81:
4d:4a:a0:56:be:17:d8:d5:bb:b6:11:ac:e3:4a:16:
7d:5e:99:a3:9d:e9:c7:5a:5c:15:76:02:5d:d9:8b:
57:d4:a9:c1:45:ce:d4:05:03:bd:35:06:9b:bd:2d:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:30:45:03:CC:84:11:B8:EF:37:9A:5B:FF:19:E7:30:68:7C:BC
X509v3 Authority Key Identifier:
keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2d:01:d6:27:55:79:0d:b7:23:a5:08:0b:fd:5b:1f:e1:c3:
c9:e4:cf:f0:90:18:f1:f0:55:ff:ad:06:83:fb:fd:65:07:44:
73:fb:7d:45:5a:93:78:39:c8:8f:22:f2:ad:80:55:bb:98:c4:
a0:68:1b:a1:b0:7d:9f:74:a8:36:f5:61:29:8d:23:52:82:f1:
84:e4:f7:00:5d:a0:4f:3a:c2:06:7e:e5:fa:a4:bd:37:f2:88:
0f:65:62:64:d9:1c:ad:3c:31:a4:45:ed:6c:7b:85:ef:33:e1:
e9:08:bc:c7:6f:68:c2:c7:6f:d8:76:e1:bd:1a:73:a9:bf:3e:
68:21:6b:ea:79:20:e4:e3:9e:04:e7:fb:95:bd:14:43:a1:d4:
6e:a2:18:ee:28:36:e8:47:4b:1f:51:5d:83:72:2b:15:c6:0f:
ad:f1:82:08:96:e4:f9:ec:7a:67:4e:d2:bc:69:cb:8a:bc:91:
51:8a:24:97:bc:83:5e:f8:d8:86:c5:99:67:c1:ca:3b:de:68:
e9:9e:e4:7f:55:c0:d6:d6:e3:60:a5:65:bb:07:1b:fe:70:5b:
3b:b5:73:15:2b:cc:e7:91:9b:ae:33:e4:7a:ee:dc:72:8f:dd:
bf:2b:3f:6a:9c:aa:a0:37:d2:68:7d:b0:c8:60:8f:7d:7f:1a:
a5:7d:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:19 2026 by rpki-client