
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File: bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier: h98cHXl9sHH7cPq2it+PdpX3+KF5r+Ix3SvpD5ozJbo=
Subject key identifier: AF:88:13:1D:97:28:F9:6D:23:9D:00:C9:D7:86:53:0C:A0:ED:56:94
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer: /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number: 85
Signing time: Fri 11 Sep 2026 07:43:49 +0000
Manifest this update: Fri 11 Sep 2026 07:43:49 +0000
Manifest next update: Fri 18 Sep 2026 07:43:49 +0000
Files and hashes: 1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: UI+2/SA/s0r7rMQY8RekF6X3wsVAXRVxyWdwvz9RDb4=)
2: EEE9D096FB5911F0B335DD54496F56BC.roa (hash: 6OTjANbCsH7alVj8xUPBjTt3S0ForgUt8vNg7J7WznU=)
3: 2tmHxIUiSQ-35Rba71M2fmHgKIY.asa (hash: QR/muQfN3wFXM038UwSUPSQw1cF2Ro2o8/hTCLgrj2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Validity
Not Before: Sep 11 07:43:49 2026 GMT
Not After : Sep 18 07:43:49 2026 GMT
Subject: CN=6aa3b135-60fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:57:1d:49:0a:ee:20:fc:78:d9:ae:90:b8:
13:b9:48:f0:a7:5e:d3:25:34:40:ff:df:f4:31:60:
3f:1e:44:93:2e:5c:ee:87:90:e1:5a:4e:c6:e2:f4:
70:d4:3d:bd:d7:ce:9b:52:52:88:39:fa:1b:d0:e9:
b8:30:15:6f:2c:0b:9e:02:05:43:09:86:fc:8c:c1:
23:89:c0:52:a6:a9:9b:cb:76:e2:38:94:5c:19:18:
e1:e0:e2:51:d0:80:30:f7:09:a3:8a:e7:a2:37:87:
b5:b2:e3:8b:84:4f:53:29:4e:1b:cb:ff:63:2f:fd:
4e:26:21:f9:b2:b8:8c:a9:aa:a3:5d:d9:ee:fe:4e:
97:88:6b:9b:7f:d8:23:23:66:39:bb:5c:ea:d3:da:
0d:5b:ee:07:d0:7b:ec:b1:a4:99:97:d3:53:5f:60:
5f:02:e5:a3:bb:06:ec:ec:99:e3:81:92:77:01:b1:
a7:d4:f9:24:34:45:99:c0:52:22:89:f6:36:e1:1d:
4d:e1:00:55:82:49:83:b7:e2:c2:c2:98:d0:e4:83:
57:63:0a:95:2f:38:eb:6b:a2:a0:a8:17:71:87:55:
95:2e:c7:22:e5:f0:ca:ef:d5:67:93:82:aa:81:f1:
8f:55:73:72:c9:d0:44:07:bd:ff:b0:d9:56:0d:ff:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:13:1D:97:28:F9:6D:23:9D:00:C9:D7:86:53:0C:A0:ED:56:94
X509v3 Authority Key Identifier:
keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:34:5d:cb:9a:e4:b2:ed:e4:a0:d1:d4:8a:22:5b:b0:ba:62:
f0:36:e0:01:b4:cd:97:09:42:98:44:ab:9b:d1:c1:e6:bb:5e:
49:1b:93:92:9b:2c:55:d3:7c:ad:c7:bc:70:d4:ee:24:17:87:
15:f9:80:7b:e9:f1:ba:8f:93:cc:5f:5f:4b:00:19:29:b1:8b:
a5:7d:5a:f8:2b:79:8e:c2:e6:fa:18:98:68:a2:fe:b2:9b:7c:
ba:16:c2:6a:f8:37:bd:f5:f9:85:9f:54:81:2a:ee:aa:7d:cf:
fa:68:4c:f3:8a:e3:06:b8:6e:0d:13:0c:dc:dd:bf:ec:c8:c2:
65:09:ce:d0:0f:6e:60:47:ca:4e:1e:ae:ef:eb:bd:a6:96:3d:
9e:bb:21:ba:26:18:67:9d:ce:49:82:8e:40:f1:ec:f8:3c:ce:
72:48:00:b2:c6:a5:dc:8d:32:da:7c:75:b0:44:b9:71:e7:4e:
33:3c:fc:5a:4a:dd:7b:bf:63:c6:a4:35:2b:da:67:f5:a5:35:
3d:19:81:22:77:84:ba:4b:d4:36:87:dc:e4:c1:39:d7:15:18:
77:7a:bf:f4:79:f1:9b:a6:43:42:a3:cf:62:ce:78:fe:06:08:
96:b6:12:19:33:85:0f:2c:23:71:f8:5a:e0:29:41:3c:9b:76:
f9:27:4d:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5MDkxMTAvBgNVBAUTKDZFOTZFQUZDOEZDRUExQTdGRjMxRUNERTBBNTA2NkQ3
QjFDM0M0N0EwHhcNMjYwOTExMDc0MzQ5WhcNMjYwOTE4MDc0MzQ5WjAYMRYwFAYD
VQQDEw02YWEzYjEzNS02MGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0tdXHUkK7iD8eNmukLgTuUjwp17TJTRA/9/0MWA/HkSTLlzuh5DhWk7G4vRw
1D29186bUlKIOfob0Om4MBVvLAueAgVDCYb8jMEjicBSpqmby3biOJRcGRjh4OJR
0IAw9wmjiueiN4e1suOLhE9TKU4by/9jL/1OJiH5sriMqaqjXdnu/k6XiGubf9gj
I2Y5u1zq09oNW+4H0HvssaSZl9NTX2BfAuWjuwbs7JnjgZJ3AbGn1PkkNEWZwFIi
ifY24R1N4QBVgkmDt+LCwpjQ5INXYwqVLzjra6KgqBdxh1WVLsci5fDK79Vnk4Kq
gfGPVXNyydBEB73/sNlWDf80SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+IEx2X
KPltI50AydeGUwyg7VaUMB8GA1UdIwQYMBaAFG6W6vyPzqGn/zHs3gpQZtexw8R6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkwOS82NENBN0IwOEVC
QzkxMUYwOTM2RURCODM2NzZGNTZCQy9icGJxX0lfT29hZl9NZXplQ2xCbTE3SER4
SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JwYnFfSV9Pb2FmX01lemVDbEJtMTdIRHhIby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjkwOS82NENBN0IwOEVCQzkxMUYwOTM2RURCODM2NzZGNTZCQy9icGJxX0lfT29h
Zl9NZXplQ2xCbTE3SER4SG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVzRdy5rksu3koNHUiiJbsLpi8DbgAbTNlwlCmESrm9HB5rteSRuTkpssVdN8
rce8cNTuJBeHFfmAe+nxuo+TzF9fSwAZKbGLpX1a+Ct5jsLm+hiYaKL+spt8uhbC
avg3vfX5hZ9UgSruqn3P+mhM84rjBrhuDRMM3N2/7MjCZQnO0A9uYEfKTh6u7+u9
ppY9nrshuiYYZ53OSYKOQPHs+DzOckgAssal3I0y2nx1sES5cedOMzz8Wkrde79j
xqQ1K9pn9aU1PRmBIneEukvUNofc5ME51xUYd3q/9Hnxm6ZDQqPPYs54/gYIlrYS
GTOFDywjcfha4ClBPJt2+SdNzQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:09 2026 by rpki-client