
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
File: BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json)
Hash identifier: r2tsIaojt2ubv1YmMTHnYcOfxBXYEpBqEl5qA8+fmHM=
Subject key identifier: 32:99:D1:91:E8:00:9C:D6:30:BB:7A:D0:85:58:A0:17:CF:A1:DA:86
Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Certificate issuer: /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
Manifest number: 01D9
Signing time: Mon 05 Oct 2026 03:57:55 +0000
Manifest this update: Mon 05 Oct 2026 03:57:55 +0000
Manifest next update: Mon 12 Oct 2026 03:57:55 +0000
Files and hashes: 1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: DNdhYSCM3haOMzbkLGVSIbdudyM+DOYQFd8BIBQ8okE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Validity
Not Before: Oct 5 03:57:55 2026 GMT
Not After : Oct 12 03:57:55 2026 GMT
Subject: CN=6ac32043-68e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:46:ee:72:c5:57:ea:c3:bc:99:b4:4c:ca:
7e:4c:56:64:ee:f8:03:8c:b6:fa:ad:65:fd:07:f0:
12:97:78:40:67:3c:c1:54:24:10:64:ca:6f:e5:c4:
4e:6b:c0:6e:2c:ab:60:0b:8d:13:6e:bf:06:aa:b0:
41:15:23:20:51:4d:f2:e1:5b:6a:da:f2:94:2e:e2:
6a:67:b7:84:9a:41:f1:08:88:3b:8a:34:f7:ea:9c:
ef:91:ea:ed:95:94:75:52:3b:b6:b5:35:2c:48:8d:
35:e8:31:92:2e:8c:40:fa:53:66:a1:fd:30:f0:be:
44:6e:c1:3f:3b:99:7b:31:f6:ad:58:30:43:ec:f1:
f9:e4:76:5c:35:31:29:1f:0c:13:fd:27:63:ff:9a:
cc:52:bd:fd:1b:0f:21:e3:6f:63:d9:dd:9c:29:e3:
29:e7:c7:f2:e1:dc:fb:65:ac:0a:8a:97:3f:06:33:
8e:5b:a7:8d:23:ca:ba:dd:91:80:19:d7:31:fd:81:
03:73:aa:fe:3c:68:cc:52:09:f9:4b:99:f4:19:bd:
e0:e4:94:31:e6:b2:60:d6:c5:13:ad:4c:2a:f8:6b:
5b:57:89:23:ae:4c:df:c3:a9:f7:6e:57:42:8c:9d:
ab:c8:19:d7:4e:ef:64:5f:ba:e8:18:3b:23:1b:8e:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:99:D1:91:E8:00:9C:D6:30:BB:7A:D0:85:58:A0:17:CF:A1:DA:86
X509v3 Authority Key Identifier:
keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:d3:78:63:6b:c7:84:90:88:5b:6b:9d:d5:8f:1d:69:2c:
bb:c5:00:be:f1:71:51:d4:8d:fe:6c:33:d7:d9:6c:fb:7d:0e:
13:91:e7:09:f0:35:af:84:b0:b1:dd:4a:10:12:51:f7:07:9b:
68:21:93:ef:1c:3a:57:39:32:32:28:fb:01:7b:26:a0:80:c2:
45:b6:6e:cb:7d:b1:18:e6:08:06:ba:d8:5c:fc:5c:ba:2f:04:
80:90:91:eb:eb:1f:b7:b4:84:91:1c:74:51:30:21:dd:03:b7:
37:90:e8:ec:d2:22:b3:a7:e4:32:28:c3:a3:ce:48:02:68:b4:
98:50:fe:79:13:95:4e:01:71:5c:cb:1e:4f:8e:e6:7e:1a:f5:
52:02:12:dd:67:a3:00:6f:b3:5c:5a:1a:b1:6d:5f:29:32:24:
6a:86:7b:79:42:05:c4:63:83:2d:60:67:cb:ad:77:2e:42:61:
fe:7b:21:f4:16:5d:fa:fa:5a:3a:62:c1:68:ee:e8:23:44:62:
4a:17:cb:2a:4f:09:c3:bd:c6:79:d1:5d:b3:f9:c5:36:31:eb:
4d:8b:03:c3:d5:a8:c0:c7:06:55:62:e0:e2:f2:fe:8a:63:b4:
7c:62:72:f5:13:ca:a5:cf:6d:3f:9a:83:77:70:5a:43:d5:19:
54:7b:98:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4ODIxMTAvBgNVBAUTKDA0RjBEOEE5MzAyQjIyQjYwRTMwRjQ2NTFCODJBRTk5
OUZGNzRDOUIwHhcNMjYxMDA1MDM1NzU1WhcNMjYxMDEyMDM1NzU1WjAYMRYwFAYD
VQQDEw02YWMzMjA0My02OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1JpG7nLFV+rDvJm0TMp+TFZk7vgDjLb6rWX9B/ASl3hAZzzBVCQQZMpv5cRO
a8BuLKtgC40Tbr8GqrBBFSMgUU3y4Vtq2vKULuJqZ7eEmkHxCIg7ijT36pzvkert
lZR1Uju2tTUsSI016DGSLoxA+lNmof0w8L5EbsE/O5l7MfatWDBD7PH55HZcNTEp
HwwT/Sdj/5rMUr39Gw8h429j2d2cKeMp58fy4dz7ZawKipc/BjOOW6eNI8q63ZGA
Gdcx/YEDc6r+PGjMUgn5S5n0Gb3g5JQx5rJg1sUTrUwq+GtbV4kjrkzfw6n3bldC
jJ2ryBnXTu9kX7roGDsjG47uAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKZ0ZHo
AJzWMLt60IVYoBfPodqGMB8GA1UdIwQYMBaAFATw2KkwKyK2DjD0ZRuCrpmf90yb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9CMjM4QTE4NEYw
QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBcklyWU9NUFJsRzRLdW1aXzNU
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JQRFlxVEFySXJZT01QUmxHNEt1bVpfM1RKcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg4Mi9CMjM4QTE4NEYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBckly
WU9NUFJsRzRLdW1aXzNUSnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABpjTeGNrx4SQiFtrndWPHWksu8UAvvFxUdSN/mwz19ls+30OE5HnCfA1r4Sw
sd1KEBJR9webaCGT7xw6VzkyMij7AXsmoIDCRbZuy32xGOYIBrrYXPxcui8EgJCR
6+sft7SEkRx0UTAh3QO3N5Do7NIis6fkMijDo85IAmi0mFD+eROVTgFxXMseT47m
fhr1UgIS3WejAG+zXFoasW1fKTIkaoZ7eUIFxGODLWBny613LkJh/nsh9BZd+vpa
OmLBaO7oI0RiShfLKk8Jw73GedFds/nFNjHrTYsDw9WowMcGVWLg4vL+imO0fGJy
9RPKpc9tP5qDd3BaQ9UZVHuYUw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:56:36 2026 by rpki-client