
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier: K6uZQVeU+qq5o1Xop2rxM+o3j1Sl4pbLx8QLTfG/Snk=
Subject key identifier: 9B:DD:A9:F3:68:06:F3:AA:A1:5A:C0:CC:68:3A:92:EC:EF:86:A6:46
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial: 25E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number: 25C2
Signing time: Tue 12 May 2026 15:44:26 +0000
Manifest this update: Tue 12 May 2026 15:44:26 +0000
Manifest next update: Tue 19 May 2026 15:44:26 +0000
Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: RAsL8ygyPZBGiba4FF2fz7O67Ri1xh4Jo6IKwbpHERc=)
2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=)
3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9702 (0x25e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Validity
Not Before: May 12 15:44:26 2026 GMT
Not After : May 19 15:44:26 2026 GMT
Subject: CN=6a034ada-c21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5a:df:cd:38:68:9c:7e:e6:fa:93:c3:84:d0:
c7:8f:79:a9:60:ab:6a:32:72:74:c6:31:98:da:d3:
70:dd:a3:6d:25:d4:72:c2:d8:a7:a5:30:48:0a:41:
3f:d2:30:b9:2c:82:c7:b7:a8:c8:be:3a:8b:eb:65:
ae:fd:13:f8:93:70:01:fb:52:85:95:a5:dc:f3:7d:
31:a7:64:11:c6:8d:fa:77:ad:04:72:d5:b1:f9:c4:
69:37:21:a9:5a:6e:ce:8a:20:6a:e1:46:05:ab:fd:
a5:e3:90:21:3a:1a:5f:33:69:54:20:8c:54:1e:d8:
c4:7d:d7:4e:8e:d9:71:e8:38:da:4b:49:57:14:a6:
01:c5:85:ec:ba:d8:66:a6:33:9f:76:a4:fe:8c:1a:
24:24:67:bc:70:8a:a8:44:c1:95:b1:79:b9:46:fd:
34:23:bd:a7:0d:bd:41:b2:e8:8c:62:44:39:bc:62:
62:07:c1:df:4e:28:4d:78:ef:2c:36:e2:18:20:4f:
39:69:e6:17:19:fb:df:1b:25:e4:9a:b8:7b:06:a6:
44:ee:ef:b5:f1:7c:2b:6e:73:71:05:73:fd:4a:92:
67:73:e0:d5:13:15:98:87:43:d7:e7:fc:46:5e:3f:
38:03:a2:ca:c0:42:53:7e:f3:00:95:13:ef:61:5b:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:A9:F3:68:06:F3:AA:A1:5A:C0:CC:68:3A:92:EC:EF:86:A6:46
X509v3 Authority Key Identifier:
keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:38:d1:c5:87:7e:5e:07:03:92:fd:66:d6:6b:27:fb:1d:15:
e7:d0:0b:ab:39:4b:98:0e:ee:70:47:b2:5b:20:54:87:b6:6e:
8b:66:37:da:c7:6f:76:fe:f8:4e:7e:a2:e7:9f:b6:2a:e9:0e:
29:77:30:74:3b:78:ff:0b:e5:a9:2c:d0:8d:3b:8c:47:c5:22:
79:49:2b:54:e4:05:0f:27:0d:35:93:06:3d:33:b3:25:03:f6:
3a:84:e4:f5:d7:a0:5a:54:3a:5c:45:72:ac:b4:0f:f9:c2:ac:
5e:6b:79:b8:5c:4e:bb:28:39:c5:bf:08:aa:66:bc:c7:1b:c1:
14:bf:3e:83:b6:ce:f6:e8:7c:e7:b9:14:b1:eb:44:59:bc:80:
a5:d8:21:91:b1:89:b9:f3:eb:8e:d7:cf:c3:31:1c:a0:f4:f0:
16:10:8a:85:e6:10:9c:f8:ea:4d:5f:6b:4e:0a:6c:d5:da:df:
4b:7f:e7:e3:1d:68:9d:96:ea:0f:9c:59:31:6b:5b:ac:60:83:
4a:50:bf:0a:d8:97:4c:90:bb:c5:78:e5:33:d2:26:93:70:b8:
49:8a:82:85:2c:8d:16:94:43:6d:1a:c5:2a:64:62:58:a3:73:
48:a0:fe:6d:ab:6e:62:4c:d7:f1:85:82:02:97:71:90:82:a4:
c9:93:de:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2
QTU2OEVDODcwHhcNMjYwNTEyMTU0NDI2WhcNMjYwNTE5MTU0NDI2WjAYMRYwFAYD
VQQDEw02YTAzNGFkYS1jMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+lrfzThonH7m+pPDhNDHj3mpYKtqMnJ0xjGY2tNw3aNtJdRywtinpTBICkE/
0jC5LILHt6jIvjqL62Wu/RP4k3AB+1KFlaXc830xp2QRxo36d60EctWx+cRpNyGp
Wm7OiiBq4UYFq/2l45AhOhpfM2lUIIxUHtjEfddOjtlx6DjaS0lXFKYBxYXsuthm
pjOfdqT+jBokJGe8cIqoRMGVsXm5Rv00I72nDb1BsuiMYkQ5vGJiB8HfTihNeO8s
NuIYIE85aeYXGfvfGyXkmrh7BqZE7u+18XwrbnNxBXP9SpJnc+DVExWYh0PX5/xG
Xj84A6LKwEJTfvMAlRPvYVv+GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvdqfNo
BvOqoVrAzGg6kuzvhqZGMB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC
NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3
UFJPMDBuWEd3REpxVm83SWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqzjRxYd+XgcDkv1m1msn+x0V59ALqzlLmA7ucEeyWyBUh7Zui2Y32sdvdv74
Tn6i55+2KukOKXcwdDt4/wvlqSzQjTuMR8UieUkrVOQFDycNNZMGPTOzJQP2OoTk
9degWlQ6XEVyrLQP+cKsXmt5uFxOuyg5xb8Iqma8xxvBFL8+g7bO9uh857kUsetE
WbyApdghkbGJufPrjtfPwzEcoPTwFhCKheYQnPjqTV9rTgps1drfS3/n4x1onZbq
D5xZMWtbrGCDSlC/CtiXTJC7xXjlM9Imk3C4SYqChSyNFpRDbRrFKmRiWKNzSKD+
batuYkzX8YWCApdxkIKkyZPe0g==
-----END CERTIFICATE-----
Generated at Wed May 13 13:14:53 2026 by rpki-client