
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier: WfJlQNJqCuPueyixzotOjSW1/kA5z9biazirnJVPy/A=
Subject key identifier: 82:BC:87:CF:E2:F2:B6:5F:33:F2:0D:57:34:ED:10:46:99:D5:F7:A4
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial: 0518
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number: 048F
Signing time: Thu 23 Jul 2026 01:26:23 +0000
Manifest this update: Thu 23 Jul 2026 01:26:22 +0000
Manifest next update: Thu 30 Jul 2026 01:26:22 +0000
Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: WOOYkjU51WLeaXe48jtKSNKWrDMjBBPaIRkY7Re9BI4=)
2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: emYB90Tc6vUDMKCJrE8EikFcQqSVRLawl5Ox0dxnDFU=)
3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: 2Ejpb7iiO3JmzRqpewiLL1vt+WHuS/YGJN8reYrEMtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Validity
Not Before: Jul 23 01:26:22 2026 GMT
Not After : Jul 30 01:26:22 2026 GMT
Subject: CN=6a616dbe-610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:fc:bf:58:33:38:92:8d:cc:13:55:69:77:
f0:bb:6e:aa:87:e4:c7:89:ce:23:6c:5e:cf:a1:61:
6c:59:d2:63:24:61:ba:95:f7:3b:25:67:55:d9:ea:
a3:d8:97:83:10:b7:43:70:e2:fb:40:6d:71:7f:a2:
fc:6c:fe:f2:d2:a5:6b:ec:25:b3:1d:71:da:90:16:
1b:42:13:59:8e:e7:85:9a:3e:21:e8:ab:57:bd:29:
b2:6c:43:f3:5c:c7:7d:b1:e3:d0:79:d8:91:55:c5:
ef:52:20:14:94:4f:ad:39:58:97:09:44:44:d4:02:
c3:9d:0a:a8:e1:63:72:76:01:13:64:76:53:0c:9c:
9c:75:e5:a1:f2:77:43:bc:51:91:3d:85:34:05:40:
93:0a:1e:9a:d4:b4:50:e0:1f:ce:d7:d9:fd:73:0c:
87:e9:30:c2:29:04:b9:46:f8:fa:cc:b0:48:ec:de:
e4:5e:4c:96:08:c4:54:5b:03:24:df:cc:bc:ca:c7:
11:06:98:4b:9e:ae:6c:08:6f:f9:90:1e:bf:60:c9:
0b:5c:35:b0:98:f3:ea:be:f8:8d:0e:e1:18:31:46:
26:2f:17:a8:a3:3e:91:05:90:46:b6:45:62:51:85:
f1:7e:77:56:e4:8d:3f:4c:9a:98:a3:5d:98:aa:8a:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BC:87:CF:E2:F2:B6:5F:33:F2:0D:57:34:ED:10:46:99:D5:F7:A4
X509v3 Authority Key Identifier:
keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:c3:83:1f:30:4d:63:fd:d2:dc:ae:0a:ac:ae:23:cc:93:a9:
26:78:46:b5:d4:ba:92:3e:4b:24:2d:29:db:2a:10:47:b5:b7:
df:c6:4e:31:1a:2a:f9:a7:e1:17:9e:dc:f4:99:23:89:05:3e:
59:25:8e:5a:3c:62:d3:54:4f:65:76:30:36:b7:35:6e:87:3e:
0d:f6:05:f6:f6:4c:bf:a0:f8:d2:41:e2:25:63:4b:87:fa:2c:
d4:a6:16:61:9f:76:d3:92:37:08:f6:f8:8b:1f:3c:ad:ee:68:
e2:8c:58:3f:7c:68:19:af:d1:b9:1b:91:2d:ff:1e:30:56:07:
b0:ad:cb:1c:f1:82:a9:03:3e:1c:7f:62:1a:0e:85:85:15:7c:
5c:ef:80:ff:f4:66:64:45:e1:bd:cd:d8:ce:57:b4:a9:1f:32:
68:ef:75:7b:c9:29:72:9f:8e:48:c5:2d:e2:ab:92:0f:aa:57:
6c:89:44:cd:a4:64:79:42:f3:fb:c5:fc:85:2f:b6:d9:b8:df:
43:f9:be:77:f5:2a:f6:5e:8e:64:d3:29:4f:e5:bd:cf:f2:0f:
f5:02:a4:18:6c:38:8e:79:fe:6b:51:91:10:49:65:c4:2d:e9:
9d:42:d5:58:4b:ce:9b:81:69:69:06:09:00:34:16:b9:24:00:
1f:77:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:47 2026 by rpki-client