
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json)
Hash identifier: 4Z3a/ayZYR2cHTqZ+Lttjbvr+aeHdR6lJOr6OGPE5Po=
Subject key identifier: B8:9E:46:57:6C:F8:66:23:77:07:72:13:09:FC:64:EE:43:7F:1E:84
Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Certificate serial: 0668
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
Manifest number: 065A
Signing time: Wed 22 Jul 2026 23:22:34 +0000
Manifest this update: Wed 22 Jul 2026 23:22:33 +0000
Manifest next update: Wed 29 Jul 2026 23:22:33 +0000
Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: gnlT18ZMl5d7OZaEyPaEAHT4i5z4SpUZLmgOJtZP6R8=)
2: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: wpTOnbFzHuZykJ8pDXVXmzxxqZkD4nI9a0iplVk0s2M=)
3: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: cye1hIVFGwa2LCmeYD2ib4pZaHJ8xh8Jr5cItjYasmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1640 (0x668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Validity
Not Before: Jul 22 23:22:33 2026 GMT
Not After : Jul 29 23:22:33 2026 GMT
Subject: CN=6a6150ba-501c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:7b:79:cd:f1:5b:65:b1:08:6e:10:0e:06:
91:c4:84:52:36:e7:a0:82:7f:1b:2d:34:ab:06:a3:
d3:1f:8e:85:1f:e8:3f:c6:70:52:e8:4e:7e:09:2a:
24:71:ec:c0:e6:9a:8e:fd:42:04:7a:23:5e:08:ec:
bc:96:76:8a:bf:45:cb:b4:47:fc:b2:d6:c0:1f:25:
24:dd:83:ca:19:ce:ea:d7:ea:4c:13:85:f9:fe:2a:
03:0d:b0:f2:d3:7a:15:ff:24:5b:54:7e:13:79:91:
13:1d:4e:b0:c0:8b:ea:ba:95:71:c6:bd:0b:29:76:
22:f5:9b:ad:89:1f:97:99:7f:30:8d:2c:b8:65:be:
fc:7a:00:e1:50:65:20:8f:b4:bc:36:8c:97:5a:c5:
cb:51:ac:00:b1:cb:de:83:2b:8d:29:30:d9:38:4a:
a4:f5:98:e0:b2:94:77:16:40:bc:07:33:b2:c0:57:
c3:31:9c:8c:24:10:11:bc:fa:15:48:17:c7:ea:24:
9b:8e:a6:88:31:ee:11:82:38:71:00:9f:ef:9b:7d:
97:0e:2b:76:97:36:45:fb:eb:a0:27:96:1e:ff:83:
e9:77:de:bd:a0:9d:1e:5d:f6:c1:02:11:92:8e:63:
0a:92:28:c5:83:1e:cf:d4:7b:e3:cf:f6:6a:55:4f:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9E:46:57:6C:F8:66:23:77:07:72:13:09:FC:64:EE:43:7F:1E:84
X509v3 Authority Key Identifier:
keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:07:9a:34:d5:3e:3f:3d:39:40:37:fe:9f:01:b5:64:82:0b:
f7:74:58:25:be:7a:62:ea:c3:4e:8a:27:d6:34:ce:72:ab:a8:
06:9c:13:90:a6:70:c4:80:cc:ad:e8:d3:80:e5:c0:45:52:28:
33:21:92:d9:2b:24:be:10:ab:df:8c:a7:93:02:e0:82:b1:13:
ca:5d:fe:02:17:e3:ab:c3:1f:7d:1b:28:99:44:9f:07:40:89:
e0:0e:70:4e:d3:45:cd:24:f2:fe:ce:06:05:76:c3:54:6e:54:
23:75:87:d7:71:ab:e3:7b:48:66:8f:e9:f0:90:40:86:f7:6d:
a2:8f:f6:72:09:00:cb:71:6e:bd:26:21:bb:e0:4e:c8:39:2f:
9d:4f:e8:d1:bc:a5:b1:c8:23:99:87:53:17:1a:df:37:66:78:
5e:12:e6:91:fd:c6:d2:16:c0:dc:cb:86:90:6f:e0:60:2d:cc:
d9:e5:18:df:bc:10:61:a5:3c:01:7b:13:ef:06:18:83:d2:65:
88:bb:71:10:4c:66:94:cb:29:b0:46:b5:bf:78:93:dd:1c:0c:
bb:ea:80:89:4b:55:fb:9a:05:33:0a:68:30:32:a6:f6:ef:1d:
4a:8b:e7:3c:cf:b9:05:3d:a5:61:8a:0f:ce:eb:57:c0:3a:2e:
2f:a7:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:47 2026 by rpki-client