
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier: 6DT7StaE9cR8MW189o1Z41RetNt6UwUqxpG7mla6Ang=
Subject key identifier: FC:97:13:C9:18:9B:AB:47:73:BE:B2:0A:9B:58:62:88:B1:86:48:19
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number: 04AF
Signing time: Tue 22 Sep 2026 23:34:40 +0000
Manifest this update: Tue 22 Sep 2026 23:34:39 +0000
Manifest next update: Tue 29 Sep 2026 23:34:39 +0000
Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: a6Cy5L+gP9owCRtf00KpbWcYp2WUHYHzpYMh8zYyqoU=)
2: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: 2Ejpb7iiO3JmzRqpewiLL1vt+WHuS/YGJN8reYrEMtI=)
3: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: emYB90Tc6vUDMKCJrE8EikFcQqSVRLawl5Ox0dxnDFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Validity
Not Before: Sep 22 23:34:39 2026 GMT
Not After : Sep 29 23:34:39 2026 GMT
Subject: CN=6ab31090-c523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:58:e1:12:e5:bc:20:6c:1c:ae:62:ec:b0:
47:56:91:ed:fb:2b:49:de:c6:5d:8e:ac:44:3f:36:
cb:c5:45:25:a2:45:c3:58:9d:82:29:7d:4a:09:cf:
ad:67:55:fc:e3:82:cd:0b:2d:00:96:10:e4:63:d2:
b4:6e:b9:8f:c2:69:d2:fb:e7:2c:0a:a6:48:45:a7:
5d:53:d7:74:aa:1c:7e:8a:1c:83:17:bd:31:20:fe:
00:bd:02:33:8f:2a:16:f0:04:ff:14:7b:79:c0:63:
cd:93:52:fe:d2:99:0f:ad:5e:85:7d:1c:7d:56:29:
aa:5b:bc:bb:2b:4d:f3:38:d7:06:fc:8e:f0:1b:f1:
ba:71:4b:a2:c6:33:01:c5:da:e7:26:ef:96:e3:58:
64:0a:04:0e:cf:74:98:78:0f:d7:0a:6d:26:4c:50:
83:ed:75:a9:e1:aa:e0:ba:23:19:7a:28:68:ca:44:
1a:f0:77:7b:dd:b5:cf:86:5b:a1:7b:dd:9a:75:10:
fa:7f:a7:f7:da:25:b1:fe:32:2c:ca:77:59:27:b7:
c4:7e:61:bd:48:0b:3a:15:58:63:2d:9d:fa:75:73:
27:5a:7e:86:6d:4a:58:dc:ff:d4:ec:1d:c4:7c:96:
3c:26:0c:6e:4d:de:98:26:12:3d:c6:41:e0:38:09:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:13:C9:18:9B:AB:47:73:BE:B2:0A:9B:58:62:88:B1:86:48:19
X509v3 Authority Key Identifier:
keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5b:25:ad:35:e5:fe:98:2e:29:d4:88:33:c6:c8:71:5a:22:
cd:10:d5:1e:2b:32:61:3b:f4:5f:f3:47:9f:dd:6c:a1:e7:c7:
a4:02:4f:35:68:44:b1:eb:e0:05:4c:81:8b:60:9e:d7:cf:1c:
de:c4:63:e0:35:a7:37:c0:65:9c:76:5f:90:6a:46:46:e1:4e:
fb:44:94:2c:e6:90:19:9d:8d:e9:3b:5a:b0:f9:f9:00:74:24:
bb:0d:9a:97:d9:df:27:2b:7a:aa:4d:f9:5c:3b:9e:c0:78:20:
19:60:86:e8:2a:28:53:2c:f7:7c:e4:e3:17:2e:43:42:4f:aa:
3c:71:f8:89:3c:05:eb:89:ca:90:a9:3d:91:d0:ce:2d:d2:90:
a3:66:53:27:5d:18:62:06:05:f4:86:69:9f:ec:bc:76:07:45:
54:32:68:7f:3a:77:cb:f5:34:e4:b6:56:8d:34:73:8c:ee:3d:
32:00:0f:90:cc:0b:b1:08:34:23:f2:39:ae:56:41:77:8e:90:
ea:4b:ec:ac:d8:41:fd:0b:4f:c1:94:9e:8e:8a:0a:b6:ba:40:
1a:8a:fe:14:4b:d1:e4:c4:34:93:36:ba:65:41:2f:3e:15:a1:
a7:e3:dc:b5:4d:85:7d:74:d9:46:d9:5f:22:41:a7:90:37:19:
60:56:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:31:10 2026 by rpki-client