
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json)
Hash identifier: 7VznWEHm25MULMHsvNFr33EEFkTjXaCdih5XI6fJB0s=
Subject key identifier: F4:53:FA:1B:A6:35:49:CC:6F:71:66:D8:A6:DD:E6:DF:52:34:EA:37
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
Manifest number: 0175
Signing time: Wed 13 May 2026 04:50:57 +0000
Manifest this update: Wed 13 May 2026 04:50:56 +0000
Manifest next update: Wed 20 May 2026 04:50:56 +0000
Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: v97U3H0Ik3pmdJHMcR36kcf2V9BPrBuEKJ16cB8SfyY=)
2: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=)
3: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=)
4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=)
5: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=)
6: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Validity
Not Before: May 13 04:50:56 2026 GMT
Not After : May 20 04:50:56 2026 GMT
Subject: CN=6a040330-1776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:09:75:65:78:3f:7c:e7:a4:b2:23:6a:fd:
ab:89:6d:a3:b4:45:7d:fe:74:b5:ca:b3:62:eb:ee:
e9:73:ae:24:f7:6c:34:73:5d:de:98:54:9f:8d:65:
fb:f8:80:fb:84:0d:14:9b:eb:b9:f5:28:42:6f:35:
06:03:00:70:d7:b2:1b:af:15:86:50:b6:25:8d:25:
69:cb:f1:58:f7:17:2c:75:15:ff:66:87:84:ce:50:
1e:4f:fd:5b:5f:09:6d:1f:5d:f5:86:bf:14:3a:53:
0f:50:8f:47:d4:1f:d1:da:26:4e:ec:9d:be:1f:3d:
c1:2e:fe:01:84:9a:90:88:10:79:94:ea:88:92:11:
1b:51:45:81:42:a4:4c:03:03:16:fe:0d:ad:d5:9c:
e0:d8:6f:96:d6:0e:a9:4a:da:4d:89:36:00:bf:4a:
69:b7:08:87:77:f7:d6:c8:93:00:5d:fc:ff:51:36:
51:a9:e8:84:bc:70:88:a4:84:fc:14:87:5b:b0:7a:
b0:72:9e:a8:4b:b0:93:bd:13:d1:d0:df:9a:69:3a:
5d:c2:5b:09:0d:31:dc:70:8a:2e:4e:b5:3c:3f:ff:
ff:70:ca:48:5a:25:1a:58:f3:b3:fd:41:42:c1:46:
e7:9f:0b:83:4a:88:73:4a:a2:8b:12:47:29:53:fd:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:53:FA:1B:A6:35:49:CC:6F:71:66:D8:A6:DD:E6:DF:52:34:EA:37
X509v3 Authority Key Identifier:
keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:a8:27:cc:c1:93:95:72:eb:2b:6b:8e:3e:76:e1:5a:97:
18:3a:24:ed:e7:d4:d5:ef:56:ef:90:87:60:70:11:c7:ec:07:
48:d7:34:a2:9a:42:80:77:83:77:05:94:35:d4:36:2e:f0:cb:
76:12:51:a4:d2:76:c5:46:2f:94:27:fe:2b:b9:f3:07:1d:7e:
8e:6c:3a:bf:8f:c2:b9:c9:0a:8d:fd:0a:89:a4:fe:be:e9:68:
cf:54:8a:19:1c:81:03:2e:51:52:50:41:65:20:30:76:e0:9f:
f5:0c:3b:fc:9f:96:bf:08:e6:5b:34:0e:04:a9:c0:64:4e:57:
3a:99:ea:80:44:7f:57:d7:1a:b2:b0:55:6a:b2:95:0b:9f:7e:
9a:82:ee:e7:15:a6:30:36:9d:0b:c6:3d:99:ec:c0:6f:f6:c5:
e6:aa:b9:e5:7e:d4:05:55:41:29:0b:bf:d5:32:19:54:f5:50:
a4:1f:3f:32:0f:b8:41:8c:a7:fa:4d:94:68:5b:d0:95:3d:4a:
c0:12:3e:63:72:90:e2:8d:d6:3f:cd:c5:e5:ae:45:33:a4:e2:
b4:17:4f:b3:fb:1e:a0:46:bb:ef:69:d2:84:7c:b5:df:0d:4a:
d6:40:b4:ed:d1:3a:e9:e3:73:45:fd:40:3d:f4:78:3a:e6:cc:
45:96:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:32:01 2026 by rpki-client