
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
File: BoQptByg8Segp10v_LJsA6lfYHE.mft (raw, json)
Hash identifier: OLXqOgO/DJrVfcRUcPI8vvVMkDFDekKutQpkIQhOz0c=
Subject key identifier: DC:26:56:06:0A:AE:4E:DE:13:7E:EE:39:C3:BE:4D:A4:B9:AA:03:D2
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Certificate issuer: /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
Manifest number: 35
Signing time: Wed 25 Mar 2026 07:49:05 +0000
Manifest this update: Wed 25 Mar 2026 07:49:04 +0000
Manifest next update: Wed 01 Apr 2026 07:49:04 +0000
Files and hashes: 1: BoQptByg8Segp10v_LJsA6lfYHE.crl (hash: GTnRtIuB8AlA6BHgxysWPzbzdlJ+Tgk9+eraz06a/9Y=)
2: BE1ACA36DD7911F088A95D31386F56BC.roa (hash: wFVA3jy/rKVpvXwLeuTYWtSknure16Z8S/vPIwlvU8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Validity
Not Before: Mar 25 07:49:04 2026 GMT
Not After : Apr 1 07:49:04 2026 GMT
Subject: CN=69c39371-0c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:a0:dd:2b:aa:88:e1:fb:e8:f3:a2:2e:de:
f4:41:5c:55:9f:46:eb:d6:c8:0e:89:b1:15:25:e5:
96:9e:68:28:d1:a0:ea:d4:52:81:ba:19:91:ed:8b:
20:83:a5:87:82:4a:49:d8:b5:cd:a2:d0:65:a7:91:
bb:20:cd:c7:03:fd:a6:9d:f4:80:1d:3a:c4:e7:0a:
a5:69:27:84:17:b5:ec:5f:d6:e4:84:33:3f:9f:93:
4b:ee:54:5d:1f:d3:84:17:1f:96:14:bb:28:8b:45:
7b:60:c9:7a:c3:24:e7:90:35:2b:5d:e4:56:33:69:
8f:42:b5:5f:cc:48:f5:05:30:20:6b:fd:0c:bd:0b:
d2:31:27:1c:ed:1d:3a:fd:d6:f2:70:34:41:4a:cb:
60:3d:b7:50:a9:e3:a8:ab:23:83:af:24:3e:c5:a3:
da:07:42:44:1a:cb:7a:db:5b:aa:b6:de:42:b4:a4:
53:c0:6b:2f:0b:67:22:eb:db:25:80:c7:4e:fd:07:
85:d8:51:0d:95:8e:92:ef:28:0f:cd:60:eb:13:01:
28:19:f9:56:e5:ef:8d:4b:cc:1d:38:25:a7:01:01:
ff:e5:7e:77:6f:e7:e8:00:0c:63:af:57:0a:25:94:
e4:a0:8a:b8:c5:5d:d0:6f:9e:00:b4:c7:ba:2b:27:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:56:06:0A:AE:4E:DE:13:7E:EE:39:C3:BE:4D:A4:B9:AA:03:D2
X509v3 Authority Key Identifier:
keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:4d:91:35:7c:2d:2e:a6:dc:78:85:53:b3:a8:ae:5c:99:
9f:9c:9c:82:66:a6:88:1e:16:10:26:12:82:bf:89:88:15:b5:
aa:5b:06:a7:92:44:ac:5d:92:c0:8b:71:ec:78:64:fa:47:bf:
21:69:64:c9:1a:38:49:70:d5:71:ad:12:83:c8:f2:95:8c:95:
24:11:3f:6a:b7:98:d7:de:9f:df:aa:59:3d:9d:64:1e:32:21:
41:55:5f:89:08:01:42:5c:d2:0a:a5:bd:65:23:f2:e9:86:99:
ad:2d:28:13:59:7e:1c:ec:2d:37:0f:66:e3:12:24:05:27:5a:
25:65:01:79:14:40:4f:52:fd:45:08:29:60:9a:98:49:da:93:
57:5b:1d:fc:fe:4e:b9:fb:85:e5:7a:c9:4d:57:ee:be:8b:bc:
7d:0e:45:23:d5:2c:f4:16:cd:76:ed:de:d6:43:a5:dc:d6:b2:
eb:91:54:5f:a5:97:64:45:5f:24:d6:48:36:2c:ce:2c:44:7b:
a6:c4:3a:6c:17:2a:7b:cc:6b:67:0d:7b:29:8d:39:1e:aa:64:
15:b4:21:f2:d1:22:b1:3e:39:de:10:53:cd:28:24:e9:6f:24:
4b:c7:83:4e:2e:30:6b:86:83:23:02:56:d4:db:e0:ba:17:37:
2b:79:bd:fc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0FCQjExMC8GA1UEBRMoMDY4NDI5QjQxQ0EwRjEyN0EwQTc1RDJGRkNCMjZDMDNB
OTVGNjA3MTAeFw0yNjAzMjUwNzQ5MDRaFw0yNjA0MDEwNzQ5MDRaMBgxFjAUBgNV
BAMTDTY5YzM5MzcxLTBjN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSnaDdK6qI4fvo86Iu3vRBXFWfRuvWyA6JsRUl5ZaeaCjRoOrUUoG6GZHtiyCD
pYeCSknYtc2i0GWnkbsgzccD/aad9IAdOsTnCqVpJ4QXtexf1uSEMz+fk0vuVF0f
04QXH5YUuyiLRXtgyXrDJOeQNStd5FYzaY9CtV/MSPUFMCBr/Qy9C9IxJxztHTr9
1vJwNEFKy2A9t1Cp46irI4OvJD7Fo9oHQkQay3rbW6q23kK0pFPAay8LZyLr2yWA
x079B4XYUQ2VjpLvKA/NYOsTASgZ+Vbl741LzB04JacBAf/lfndv5+gADGOvVwol
lOSgirjFXdBvngC0x7orJ2M3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3CZWBgqu
Tt4Tfu45w75NpLmqA9IwHwYDVR0jBBgwFoAUBoQptByg8Segp10v/LJsA6lfYHEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUJCLzQwM0IwRDhFREQ3
ODExRjBBNTg2QjEyODM4NkY1NkJDL0JvUXB0QnlnOFNlZ3AxMHZfTEpzQTZsZllI
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQm9RcHRCeWc4U2VncDEwdl9MSnNBNmxmWUhFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
QUJCLzQwM0IwRDhFREQ3ODExRjBBNTg2QjEyODM4NkY1NkJDL0JvUXB0QnlnOFNl
Z3AxMHZfTEpzQTZsZllIRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQANE02RNXwtLqbceIVTs6iuXJmfnJyCZqaIHhYQJhKCv4mIFbWqWwankkSsXZLA
i3HseGT6R78haWTJGjhJcNVxrRKDyPKVjJUkET9qt5jX3p/fqlk9nWQeMiFBVV+J
CAFCXNIKpb1lI/LphpmtLSgTWX4c7C03D2bjEiQFJ1olZQF5FEBPUv1FCClgmphJ
2pNXWx38/k65+4XleslNV+6+i7x9DkUj1Sz0Fs127d7WQ6Xc1rLrkVRfpZdkRV8k
1kg2LM4sRHumxDpsFyp7zGtnDXspjTkeqmQVtCHy0SKxPjneEFPNKCTpbyRLx4NO
LjBrhoMjAlbU2+C6Fzcreb38
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:22:58 2026 by rpki-client