
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File: bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier: jaTyeADvDhJnu82jXyEVJuDlzWc4cBvT3jHhG+rihHs=
Subject key identifier: 7B:17:EB:21:A4:AA:C0:90:10:00:22:F2:9F:06:75:E4:DF:96:2B:D9
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer: /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number: 38
Signing time: Fri 17 Apr 2026 08:15:58 +0000
Manifest this update: Fri 17 Apr 2026 08:15:58 +0000
Manifest next update: Fri 24 Apr 2026 08:15:58 +0000
Files and hashes: 1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: 9Le4j8bEH/Vy5edPUG0ghCQnOlL1nj6mHzv7bST78bw=)
2: EEE9D096FB5911F0B335DD54496F56BC.roa (hash: 6OTjANbCsH7alVj8xUPBjTt3S0ForgUt8vNg7J7WznU=)
3: F78ED0BAEBC911F0BD3A2F28686F56BC.roa (hash: mYlmgGrl1cpOVwk/yfFMWaMRlu5qvK9L3PPljtxzekI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Validity
Not Before: Apr 17 08:15:58 2026 GMT
Not After : Apr 24 08:15:58 2026 GMT
Subject: CN=69e1ec3e-226f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:89:7e:ae:ff:c0:0f:14:f2:d5:a5:f2:e8:3a:
c0:b2:0c:cd:cf:5e:b0:dd:75:89:be:c0:69:04:7a:
61:01:90:64:22:c0:d2:84:ac:91:f1:ad:16:19:ec:
5d:30:5a:1e:d1:da:a4:62:7f:0b:c6:62:42:6a:c0:
46:9a:4b:7d:f2:ef:63:6c:fd:af:d6:94:d5:50:4b:
17:2d:e3:53:20:f4:e3:a7:78:cd:9b:59:6a:fc:61:
6e:c9:6d:0e:06:48:50:d6:16:f0:09:47:b6:eb:6b:
46:fd:1d:71:4a:f3:81:b1:8b:ff:c1:67:29:4e:74:
40:43:0d:05:9d:8e:0f:d0:ab:9d:2f:a3:14:15:21:
84:2a:03:d4:23:a6:44:f2:84:90:6b:1d:ab:a6:2b:
fa:1a:0e:89:7a:2f:d2:81:09:c5:cc:97:01:7c:a1:
8c:49:61:9e:1c:6c:7e:cd:11:13:71:0d:3d:3d:06:
86:15:04:e6:51:92:6f:fa:d4:ab:d7:ec:d7:e8:5e:
4d:50:c1:7e:c7:15:6d:45:07:ea:a0:87:42:b5:30:
d2:a5:52:61:4b:c5:21:63:a9:fc:90:40:d7:0b:41:
af:59:b9:ae:45:81:82:d3:8d:b2:95:8f:1b:e8:3d:
d9:7d:53:5a:3e:c4:a9:3c:38:de:d7:d0:64:93:da:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:EB:21:A4:AA:C0:90:10:00:22:F2:9F:06:75:E4:DF:96:2B:D9
X509v3 Authority Key Identifier:
keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:4f:d3:ba:3c:76:e0:84:df:c2:2d:0c:f4:0c:77:39:a8:60:
12:74:ef:25:10:ee:b6:ff:51:6b:c9:34:95:01:e0:ba:d9:7c:
78:18:0c:6f:b6:4f:e5:fa:4d:4a:7d:1f:dc:77:92:17:95:70:
c7:04:3d:e3:4d:69:76:5f:0c:b1:2a:ff:da:bd:64:0c:16:6a:
09:e0:e1:51:b2:99:88:95:73:60:0f:da:0a:f1:1f:96:52:fd:
e1:b4:08:0d:54:d5:5d:ee:32:b2:6b:49:01:02:98:4a:d4:10:
24:61:ea:ee:50:6f:ea:85:50:49:e9:a7:f5:8b:3d:1a:ab:49:
7b:9a:7b:d6:ba:d5:2b:e6:3f:e8:65:bf:84:c2:96:c0:b5:45:
df:22:68:f4:37:e6:6b:2f:46:16:d8:3a:33:eb:00:23:d7:91:
e7:71:7d:e8:50:22:f9:a5:41:56:a9:93:16:4c:70:f8:cb:82:
9f:70:61:dd:ff:e0:89:af:ac:27:65:bd:ab:b1:02:a2:a9:72:
d8:d2:44:58:3f:7b:65:1b:a3:f7:b4:a1:80:8b:fe:2e:67:ed:
1f:eb:61:45:96:38:bb:65:81:83:8e:53:5b:f4:36:2d:76:02:
ae:61:d9:fc:a1:07:24:5f:33:c8:41:ac:ff:e6:30:5b:c8:af:
21:2f:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:36 2026 by rpki-client