
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier: hAHckfpg+s7uwm9iU1S9lkNARKwP72Wc1DJyUQ2gXCc=
Subject key identifier: 26:FB:2E:57:38:DC:11:32:61:08:89:19:7A:B3:55:C0:29:1D:27:B6
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial: 04D8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number: 0451
Signing time: Fri 27 Mar 2026 00:01:01 +0000
Manifest this update: Fri 27 Mar 2026 00:01:01 +0000
Manifest next update: Fri 03 Apr 2026 00:01:01 +0000
Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: E7+MlbDjIrLzyy7e03rQA1KGjOr3gWsTeZ2mAgCFKUg=)
2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: eYryKgNZm2qZqdFNNTLzTj59Jc409yodEwjuUOxXoJY=)
3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: glYctxlo8gx3BenqS2wSFdBXN3gLXFdiT5hyE/Vu8Ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Validity
Not Before: Mar 27 00:01:01 2026 GMT
Not After : Apr 3 00:01:01 2026 GMT
Subject: CN=69c5c8bd-1a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:83:53:81:59:15:3a:b5:26:9c:b4:d7:be:
9c:16:db:e7:b0:8f:be:70:30:48:81:b9:33:e9:0f:
22:29:f5:a1:69:82:ae:b1:d8:2c:09:5f:27:99:f3:
5a:b8:01:a0:ab:1b:b3:09:27:22:b1:01:10:60:6d:
b8:b4:ba:a2:43:5d:78:aa:90:20:ac:d9:82:17:29:
3b:3d:b8:8b:e4:a4:48:8c:40:52:f2:63:53:3a:49:
92:72:cc:fc:1f:eb:9b:4e:a3:0e:18:74:f9:05:12:
f2:5f:a6:30:a0:db:c1:23:a7:9b:24:63:48:74:92:
69:ce:10:fc:38:90:67:92:0c:f2:7c:a8:0b:f7:7f:
09:51:7b:52:81:e3:9e:84:28:e1:c8:c8:c7:3a:b5:
d4:9c:2d:87:ab:57:8c:39:d2:b8:fa:ac:66:0b:42:
d3:eb:c0:f4:86:e7:2e:d1:9e:ec:70:f4:ea:f2:51:
98:52:42:b3:96:25:08:f2:2b:48:c7:61:f3:25:a7:
a4:c3:07:78:15:56:57:36:46:3f:ff:32:e5:49:93:
68:43:2a:da:eb:fb:68:6b:4a:64:b6:a2:17:09:6f:
4e:60:78:65:7b:32:ce:b1:13:6e:e6:ac:4c:8e:db:
33:a3:ee:16:ae:68:e6:7c:5d:d4:65:7c:50:47:ae:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:2E:57:38:DC:11:32:61:08:89:19:7A:B3:55:C0:29:1D:27:B6
X509v3 Authority Key Identifier:
keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3a:a5:cd:42:f2:42:9b:66:20:0f:5f:3f:b3:03:3d:9f:b9:
5c:d2:1e:25:1e:28:fa:23:1f:4c:70:0a:41:51:61:10:da:6f:
9b:23:c3:cb:8e:35:31:4b:de:7e:1b:ce:1e:17:b1:12:28:56:
57:95:86:1b:c9:9e:f2:33:68:2d:e0:9c:36:4b:b4:f2:b8:7e:
21:28:7a:74:12:6c:c7:9b:86:fc:42:64:0b:5d:98:e0:c0:48:
c6:d9:fc:73:70:0e:94:d1:e1:e8:51:07:9e:16:f2:93:e3:dc:
55:47:1b:43:5d:9b:15:59:4b:97:7f:65:5b:74:93:b7:03:55:
6b:65:3e:eb:41:dc:cb:8a:a8:40:81:05:2f:53:4e:88:71:f1:
1a:c3:5c:17:64:91:98:4a:61:11:cd:82:47:40:b1:f9:57:68:
fe:ab:19:6c:d8:07:c3:f3:31:33:4b:10:03:89:3c:9b:ba:2e:
34:24:bd:ca:11:58:e7:73:2f:88:13:96:ac:ff:f1:f5:bf:bf:
13:8f:61:fc:cb:82:1c:9e:eb:04:4c:18:ae:17:5d:5f:8a:e6:
90:21:42:36:5d:6b:c8:6c:da:00:1a:7c:96:4d:86:b9:7d:b6:
0a:11:d8:6f:01:b5:a8:c6:ab:75:80:a6:1b:71:ed:2f:68:6b:
3a:78:58:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:28 2026 by rpki-client