
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File: bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier: i8ZhD1fBkYOMMH4OURejFpA8j7Wy5rH4oBVn50Qv3hY=
Subject key identifier: EA:FF:F9:81:AA:6F:95:7F:CA:1A:D2:E3:57:51:C1:8F:43:69:59:50
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer: /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number: 8C
Signing time: Fri 25 Sep 2026 07:41:29 +0000
Manifest this update: Fri 25 Sep 2026 07:41:29 +0000
Manifest next update: Fri 02 Oct 2026 07:41:29 +0000
Files and hashes: 1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: BnoduHKBQA79PreQ6YcNMQ7kvb+Gzo4sRvttE0uX6KM=)
2: EEE9D096FB5911F0B335DD54496F56BC.roa (hash: 6OTjANbCsH7alVj8xUPBjTt3S0ForgUt8vNg7J7WznU=)
3: 2tmHxIUiSQ-35Rba71M2fmHgKIY.asa (hash: QR/muQfN3wFXM038UwSUPSQw1cF2Ro2o8/hTCLgrj2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Validity
Not Before: Sep 25 07:41:29 2026 GMT
Not After : Oct 2 07:41:29 2026 GMT
Subject: CN=6ab625a9-1a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:2b:a9:b5:1a:20:3d:f4:1e:c9:93:b0:b8:
7d:da:92:50:14:2c:c3:20:4b:40:0e:64:dd:51:81:
85:97:6f:99:2b:e3:ab:fc:f6:50:b9:a4:7e:00:dd:
6d:99:ed:0c:98:0d:e1:78:7e:27:9d:cd:d6:aa:8a:
57:2c:f9:06:6e:fb:1f:fb:d7:89:8c:8a:7e:54:f7:
c1:aa:05:e6:a9:91:35:3c:4b:19:53:82:4e:33:a3:
a1:f5:e9:c9:03:21:03:88:7b:82:ca:03:3b:84:89:
9e:79:61:10:9c:14:8d:f9:f9:1a:b6:0d:ea:30:ea:
67:36:48:a3:7c:34:d7:b4:dc:c1:8d:9d:f4:f8:45:
9a:36:dc:1d:cf:01:1d:86:db:10:68:1c:cb:0c:3f:
24:e8:ff:27:98:9a:a8:74:91:1e:d4:b4:16:e5:23:
d1:f9:29:25:67:78:28:6d:08:0d:d7:6e:86:a6:95:
d3:5e:75:e0:aa:f3:e4:2b:85:51:85:a4:ea:8f:2b:
e8:26:e5:7a:0b:43:c7:7f:96:c0:01:23:ce:68:49:
1c:bc:15:32:74:19:71:60:5f:f6:cb:2a:a8:65:3f:
8c:31:bc:cc:46:3d:e5:a4:7f:49:e9:af:df:78:84:
cf:c9:c6:f8:d8:ef:93:0b:5a:fc:d2:e6:59:8a:b8:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:F9:81:AA:6F:95:7F:CA:1A:D2:E3:57:51:C1:8F:43:69:59:50
X509v3 Authority Key Identifier:
keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a8:60:12:d8:a6:e8:a1:b6:9d:ae:87:7b:80:28:2b:f6:e4:
98:9c:a1:1d:92:48:7d:be:05:ea:39:d8:80:9b:f8:c4:37:7f:
b4:2d:c3:03:db:7f:df:d0:b0:85:d2:d5:29:4c:ab:95:80:7f:
14:dc:13:a7:55:b6:ca:4c:f0:c9:19:ce:a9:84:34:b5:61:ce:
45:52:25:41:df:c1:9f:23:48:19:37:06:e2:dd:d6:ce:6c:5e:
32:31:04:1f:49:90:03:f3:3a:75:b5:54:f3:96:7b:a9:2e:1d:
6a:d5:ca:80:68:61:7d:27:33:68:ce:c3:84:98:ec:7b:0a:24:
b6:56:8f:09:eb:11:19:92:a9:59:a4:0f:ff:f4:a5:8a:0f:eb:
1a:a5:01:eb:b5:35:16:9a:78:ea:29:51:5e:89:66:e7:2e:f2:
df:80:92:a5:5d:33:4a:15:08:9a:99:7f:4e:fd:f7:2c:fe:2b:
de:fa:95:71:41:f5:18:15:a6:07:18:d9:78:92:8b:98:10:06:
74:63:e1:8e:74:26:9c:9c:45:90:2e:ce:b1:ca:9e:fa:40:e3:
a0:37:d7:36:84:59:29:de:c2:cf:26:6c:33:a5:90:bd:8b:01:
ee:9d:8e:76:3f:d0:19:27:6f:44:f3:62:eb:10:1c:94:1d:18:
95:e2:58:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:17:12 2026 by rpki-client