
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json)
Hash identifier: CDuQ6tPDCernXvCRbs2K0T9Ep+AnsznkxS7ObHFcElM=
Subject key identifier: F7:7F:E5:2C:08:E5:F1:E4:E7:E3:4A:D3:9A:2E:87:F4:50:B2:4F:20
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
Manifest number: 0198
Signing time: Thu 23 Jul 2026 05:49:28 +0000
Manifest this update: Thu 23 Jul 2026 05:49:27 +0000
Manifest next update: Thu 30 Jul 2026 05:49:27 +0000
Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: BzAIxmVM1KGRHMJJI6AXhBaZ6kUIC/wGlk7M1wqSoXk=)
2: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=)
3: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=)
4: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=)
5: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=)
6: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Validity
Not Before: Jul 23 05:49:27 2026 GMT
Not After : Jul 30 05:49:27 2026 GMT
Subject: CN=6a61ab68-587e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:15:8c:29:b1:4b:f3:16:64:84:ce:8e:a6:
98:e1:a4:00:79:dc:c4:42:c9:da:1c:df:ea:16:c4:
ec:14:e6:80:1b:bc:b5:24:38:34:30:5e:d3:51:ff:
6b:05:41:c9:9a:76:9a:76:cf:ad:b8:c1:22:76:1a:
cd:a1:d4:d3:57:32:f3:5f:28:c6:71:48:ee:1a:9d:
04:23:a9:d9:c1:8c:a1:bf:1e:5c:d9:2b:54:78:00:
66:4c:26:86:4f:67:97:ed:c5:ca:4f:60:73:dc:30:
5d:ed:2c:84:5c:29:38:72:31:13:af:af:3f:88:18:
ee:dc:b8:b6:0f:86:b4:03:73:24:ac:a8:ba:31:3e:
31:fe:e3:c5:6a:62:f6:9b:68:da:34:22:28:5b:5e:
8f:50:ba:74:79:dd:fb:ba:d4:cb:67:0c:62:a8:bc:
4b:16:60:32:7e:e5:42:53:d0:3a:51:f3:f9:ab:53:
df:d3:25:1f:4e:a6:58:44:12:3c:92:d5:16:2a:2e:
4e:b3:b6:b4:36:1b:cc:d4:c0:85:2c:29:ca:ac:69:
ba:2e:6c:18:1a:9d:19:de:1e:a1:bc:f8:50:e1:dc:
b6:9b:f4:75:dd:66:44:2b:80:48:59:47:36:66:6a:
97:93:c8:f3:33:78:c6:f0:58:e6:01:28:60:a2:04:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:E5:2C:08:E5:F1:E4:E7:E3:4A:D3:9A:2E:87:F4:50:B2:4F:20
X509v3 Authority Key Identifier:
keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:16:da:a6:26:10:e8:e7:a6:6a:9c:81:4c:14:ce:10:69:1f:
33:64:91:25:da:98:4f:cb:39:62:bf:0a:7e:14:b2:0d:57:71:
8c:cd:c3:e8:f7:e2:f3:f3:ad:01:68:53:75:5d:c3:6d:31:0c:
de:44:a8:8d:19:17:38:54:f6:21:a5:dd:94:7a:6a:e8:c6:5a:
f2:5c:1d:78:f2:55:a9:73:aa:b2:1f:23:ac:6a:e6:45:2a:dc:
4d:bb:cb:f8:e5:a8:23:53:04:bb:61:20:ee:02:bc:86:30:b0:
68:5f:49:72:84:73:6c:fd:b4:1e:67:cb:2f:c6:31:91:90:47:
f5:37:c9:0e:13:20:3b:33:2b:7b:e5:ca:c8:ca:41:94:a0:57:
8e:b0:a0:8d:1a:d8:86:40:fb:16:c1:aa:63:86:06:a6:e6:b9:
c3:60:ad:88:c7:59:8b:a9:e7:c4:84:ce:3c:77:e8:f8:60:c5:
6a:51:fd:91:43:34:20:d6:d5:3c:03:6a:24:59:0f:1b:40:6c:
3c:61:cc:15:88:14:d1:32:4e:5b:b8:40:6e:dd:08:5d:9e:fb:
40:1e:0e:cd:92:2c:9b:26:69:8b:ce:f9:84:cf:01:9d:c5:c8:
ae:73:2d:ba:b5:cb:1c:69:ed:9e:8b:16:da:8a:ca:58:87:b1:
29:f1:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:43 2026 by rpki-client