
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json)
Hash identifier: xtUf35Xll7rLt+HUJXnFmwMMLJP8a+EDqoT/RjGe78A=
Subject key identifier: AD:D7:BA:68:89:76:01:14:F3:C7:0C:9A:EB:CA:FF:09:B3:69:9D:94
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
Manifest number: 015C
Signing time: Wed 25 Mar 2026 04:19:53 +0000
Manifest this update: Wed 25 Mar 2026 04:19:53 +0000
Manifest next update: Wed 01 Apr 2026 04:19:53 +0000
Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: 09SlJjZyZkdkSZ014kkQp5rmMgXS5rqM25vEbNIz/uI=)
2: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=)
3: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=)
4: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=)
5: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=)
6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Validity
Not Before: Mar 25 04:19:53 2026 GMT
Not After : Apr 1 04:19:53 2026 GMT
Subject: CN=69c36269-255b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:cd:35:77:a1:37:5e:43:cb:72:44:25:86:
6b:dc:6d:c1:13:36:e3:30:52:bb:5e:d5:73:d2:3d:
88:1e:b4:da:f6:e2:86:75:5e:03:14:eb:8a:3d:69:
d4:6b:52:b6:ef:37:8b:11:58:cd:3c:2f:c8:82:54:
22:d6:16:91:ea:a9:00:f0:08:21:f1:99:78:29:d0:
5d:78:ec:00:78:71:05:3f:4a:1f:d9:9a:df:db:7f:
06:9c:8c:2c:08:ae:71:77:53:a9:07:78:80:dc:38:
82:36:ea:d3:f5:41:43:61:f4:3f:64:2b:e8:2e:74:
29:2c:aa:9f:dc:ec:27:fb:79:38:6d:5d:ac:ff:77:
3b:8d:1a:20:af:4c:20:5d:37:d2:77:08:bf:7c:99:
5a:46:ff:ad:b4:70:41:27:56:36:19:d6:68:f5:2d:
cb:93:1d:19:b1:70:9d:5b:25:cc:20:2b:4f:ee:22:
44:22:be:2f:89:be:9f:34:f5:07:9d:f4:11:11:42:
a9:0c:f6:6e:6f:18:53:53:eb:c1:68:b0:d6:ba:33:
2f:72:48:46:d6:4c:a9:62:3a:a2:e1:cd:37:6e:a6:
47:60:55:8c:3b:11:54:6e:1b:65:e1:5a:f2:f3:1f:
94:36:40:fe:3b:7f:25:14:63:50:6f:3b:d7:f3:b7:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:BA:68:89:76:01:14:F3:C7:0C:9A:EB:CA:FF:09:B3:69:9D:94
X509v3 Authority Key Identifier:
keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:94:1f:96:37:ab:ca:ef:5d:5d:a7:bf:19:6f:fc:6d:ae:05:
7d:30:e8:2e:4e:56:8e:40:72:88:7b:17:28:65:db:9d:b9:8a:
c3:e5:d9:89:14:9d:93:07:93:21:21:d1:97:ec:30:a2:32:5e:
cc:34:4a:26:c1:ff:b0:12:fd:0c:ab:a1:83:11:13:23:be:c4:
54:88:e2:d3:c3:d2:95:44:ff:c1:8b:82:7b:14:c9:df:9c:7e:
c4:c7:31:e5:88:25:46:be:bc:04:0c:2d:62:db:97:6d:cc:ef:
aa:e0:f5:fb:18:0a:37:ad:af:07:88:58:f8:9f:06:c6:bf:78:
f1:80:fb:d6:a4:3e:8b:a0:96:d9:3f:7a:54:d7:15:8f:78:b9:
45:f1:56:fe:b1:36:8c:87:af:44:53:98:2a:44:d0:d7:96:61:
d5:2c:f8:8e:3c:0d:00:d9:ba:7c:d3:8a:41:73:85:b5:79:29:
71:c9:99:51:85:bc:4b:40:32:ae:59:b4:ae:93:00:01:7a:73:
7b:54:a3:cb:b1:2d:cb:67:7a:2b:6e:50:bf:85:c1:8c:7f:0d:
f7:bf:24:02:d4:50:4d:8e:a1:fa:28:46:5c:9f:8a:cb:30:5b:
09:a9:1c:1a:42:8d:14:30:a3:3a:f1:8f:11:75:c2:cb:57:75:
8d:fe:f8:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE
NTk1OUYzMjUwHhcNMjYwMzI1MDQxOTUzWhcNMjYwNDAxMDQxOTUzWjAYMRYwFAYD
VQQDEw02OWMzNjI2OS0yNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TvNNXehN15Dy3JEJYZr3G3BEzbjMFK7XtVz0j2IHrTa9uKGdV4DFOuKPWnU
a1K27zeLEVjNPC/IglQi1haR6qkA8Agh8Zl4KdBdeOwAeHEFP0of2Zrf238GnIws
CK5xd1OpB3iA3DiCNurT9UFDYfQ/ZCvoLnQpLKqf3Own+3k4bV2s/3c7jRogr0wg
XTfSdwi/fJlaRv+ttHBBJ1Y2GdZo9S3Lkx0ZsXCdWyXMICtP7iJEIr4vib6fNPUH
nfQREUKpDPZubxhTU+vBaLDWujMvckhG1kypYjqi4c03bqZHYFWMOxFUbhtl4Vry
8x+UNkD+O38lFGNQbzvX87cO/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3XumiJ
dgEU88cMmuvK/wmzaZ2UMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0
QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5
UFRucld3aF8wX3JWbFo4eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOJQfljeryu9dXae/GW/8ba4FfTDoLk5WjkByiHsXKGXbnbmKw+XZiRSdkweT
ISHRl+wwojJezDRKJsH/sBL9DKuhgxETI77EVIji08PSlUT/wYuCexTJ35x+xMcx
5YglRr68BAwtYtuXbczvquD1+xgKN62vB4hY+J8Gxr948YD71qQ+i6CW2T96VNcV
j3i5RfFW/rE2jIevRFOYKkTQ15Zh1Sz4jjwNANm6fNOKQXOFtXkpccmZUYW8S0Ay
rlm0rpMAAXpze1Sjy7Ety2d6K25Qv4XBjH8N978kAtRQTY6h+ihGXJ+KyzBbCakc
GkKNFDCjOvGPEXXCy1d1jf74uQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:26 2026 by rpki-client