
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
File: BoQptByg8Segp10v_LJsA6lfYHE.mft (raw, json)
Hash identifier: npSuRafFTWgdD//3GkAnGagF6jihl96GjhADRaX5pd4=
Subject key identifier: 88:C8:01:1D:92:E8:EC:F0:4F:7C:34:DC:46:C4:3B:3A:BE:78:C3:6A
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Certificate issuer: /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
Manifest number: 91
Signing time: Wed 23 Sep 2026 07:16:06 +0000
Manifest this update: Wed 23 Sep 2026 07:16:05 +0000
Manifest next update: Wed 30 Sep 2026 07:16:05 +0000
Files and hashes: 1: BoQptByg8Segp10v_LJsA6lfYHE.crl (hash: GhGacJyLgXTJQzjpmnckV3NKlw1WKpAa2dabdjXgvIY=)
2: BE1ACA36DD7911F088A95D31386F56BC.roa (hash: wFVA3jy/rKVpvXwLeuTYWtSknure16Z8S/vPIwlvU8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Validity
Not Before: Sep 23 07:16:05 2026 GMT
Not After : Sep 30 07:16:05 2026 GMT
Subject: CN=6ab37cb6-63b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:2a:40:78:aa:eb:82:94:fa:32:11:0b:c0:
e6:b7:6f:e4:cd:29:00:6c:2d:b4:fd:4b:90:5e:7d:
fa:4c:6a:c4:bd:9b:36:00:fc:e4:82:ff:4d:45:bc:
75:23:09:c2:16:17:9c:0c:eb:20:03:aa:8f:b6:32:
5f:09:fd:97:40:fb:52:ab:e0:93:34:24:b3:bb:76:
79:16:08:da:cd:57:3d:9a:08:83:1c:db:cb:12:0e:
78:3e:b4:97:67:62:9a:4e:87:e0:b2:d1:eb:e5:a8:
42:00:fb:18:cd:43:f2:d0:00:31:06:6f:9b:dd:4e:
22:28:29:a9:d3:dd:50:ad:f7:99:c3:9b:f7:be:fb:
65:fc:22:fb:86:a7:89:bc:ad:b7:2f:87:b6:2b:61:
00:90:63:ef:49:b5:74:02:ae:12:43:c1:36:a5:3f:
3b:13:1c:6f:fd:39:9a:0b:f5:16:c7:1c:ff:26:fd:
02:ae:d7:21:c0:ff:26:01:3d:db:94:71:c5:28:71:
73:86:54:41:6c:43:0f:4c:51:1a:13:d8:51:37:20:
8d:25:fb:0c:1e:2e:c2:8b:a4:ee:8c:c8:79:c6:71:
93:44:81:21:8c:3f:18:7a:a8:ff:2b:96:19:24:37:
2c:af:e0:ac:32:9d:78:8f:c2:ac:15:1a:a1:62:2e:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C8:01:1D:92:E8:EC:F0:4F:7C:34:DC:46:C4:3B:3A:BE:78:C3:6A
X509v3 Authority Key Identifier:
keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:25:da:d9:b0:91:d9:55:85:c0:d6:f2:f5:26:da:39:5f:d9:
a7:1f:5d:cb:37:96:ca:13:a8:2d:6a:66:11:3d:e0:f3:77:a9:
94:8b:0f:83:2a:46:17:80:6a:fa:7b:6c:f4:54:8d:e6:5e:ed:
53:56:95:8d:67:a4:f5:59:8e:48:fe:c6:f4:60:8a:00:98:f1:
a7:05:23:3d:19:26:dc:28:a8:f1:23:10:f9:84:57:fa:22:81:
d5:a3:9f:25:58:6b:ee:40:64:bb:a8:68:03:02:0e:36:a7:47:
77:68:49:06:5a:cc:23:31:1d:99:91:1a:89:26:7a:be:ac:3c:
eb:56:fb:b6:50:6e:55:63:8f:65:8a:7b:fb:70:bb:2f:6a:6a:
03:39:bc:f1:33:a6:16:8a:ae:10:92:03:3e:b3:38:2b:b9:8b:
2a:83:8e:dc:9f:da:6f:92:03:7f:ee:a8:f2:2f:64:ab:08:93:
fc:a1:3d:c0:d5:f3:f5:e0:09:f2:45:4a:49:b2:5b:69:16:56:
ff:0b:67:c0:8c:58:59:27:84:5c:a7:65:45:74:1c:7b:61:80:
ef:a0:f5:9e:b3:68:f0:29:d9:d6:93:18:e5:e4:27:86:e6:43:
78:2c:e8:7a:27:8d:ee:8a:b6:67:0b:18:67:9d:b0:d4:3f:2b:
9e:94:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:41:41 2026 by rpki-client