
$ rpki-client -vvf rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
File: boeJT2AXn8vHknMo9a7V591-s_A.mft (raw, json)
Hash identifier: JpE63djrPK+eKIKzJiflT/akNOhW/pRJNKyaGQwKSd8=
Subject key identifier: D2:9A:BC:2A:87:30:63:3B:65:31:A9:B5:6C:64:AB:2C:84:E4:1E:8A
Authority key identifier: 6E:87:89:4F:60:17:9F:CB:C7:92:73:28:F5:AE:D5:E7:DD:7E:B3:F0
Certificate issuer: /CN=A91806BA/serialNumber=6E87894F60179FCBC7927328F5AED5E7DD7EB3F0
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
Manifest number: 3D
Signing time: Mon 15 Jun 2026 08:38:26 +0000
Manifest this update: Mon 15 Jun 2026 08:38:25 +0000
Manifest next update: Mon 22 Jun 2026 08:38:25 +0000
Files and hashes: 1: boeJT2AXn8vHknMo9a7V591-s_A.crl (hash: eHkl5vvDIbbM/X8PeR14MqzYJKakh5djmAjkURzJlec=)
2: B44E8878129C11F1B0F372353D3D8C67.roa (hash: nVuAqCAmrtCFyjzAaGnxdvmFqZJr1Uq5L661kFJXcwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.crl
rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91806BA, serialNumber=6E87894F60179FCBC7927328F5AED5E7DD7EB3F0
Validity
Not Before: Jun 15 08:38:25 2026 GMT
Not After : Jun 22 08:38:25 2026 GMT
Subject: CN=6a2fba02-d8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:c4:f9:cc:8b:0e:db:9f:a2:7d:ff:c2:72:
6a:e5:35:eb:9e:22:fe:1f:20:0d:6d:ce:9a:c2:be:
b0:88:17:a1:e9:98:bf:e6:5b:62:ef:4f:d4:d0:22:
54:7d:51:2d:9d:f9:6c:20:3d:9d:eb:7b:01:d8:40:
e0:47:89:87:16:49:ac:ce:c4:c8:82:91:be:76:4c:
17:9e:6d:95:9c:23:7b:aa:ac:31:a3:f2:b6:7c:55:
e4:7a:c5:23:46:88:68:88:16:21:4b:5a:17:31:11:
cc:18:57:90:a6:c6:8f:5d:bc:73:0c:78:8a:41:40:
2d:6e:b5:87:a7:4c:41:8b:a6:22:e2:db:05:3d:00:
de:c7:f8:c8:6f:49:a1:bf:18:35:97:fe:db:f2:a4:
5b:ab:a0:3c:f3:4f:f1:a7:f7:39:f2:10:3e:92:99:
19:65:52:de:12:12:f7:de:9a:a8:f0:80:e1:be:eb:
f8:79:47:19:d3:63:bf:cb:7e:72:5f:f8:ef:9a:09:
0b:46:bc:e9:d2:e8:ae:9f:ae:78:75:70:c3:93:b7:
aa:db:5d:5f:14:bb:fb:b4:dd:32:6b:8e:c5:23:1d:
e1:c5:9c:92:5a:32:6c:c0:b4:56:0a:c6:58:03:f0:
68:15:df:80:d5:f2:59:b8:26:ab:3a:81:26:d7:4f:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:BC:2A:87:30:63:3B:65:31:A9:B5:6C:64:AB:2C:84:E4:1E:8A
X509v3 Authority Key Identifier:
keyid:6E:87:89:4F:60:17:9F:CB:C7:92:73:28:F5:AE:D5:E7:DD:7E:B3:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:d4:77:cb:5c:8c:d7:06:f9:0a:16:98:c8:cc:60:1a:89:8a:
c2:20:ea:58:69:ea:b3:14:86:47:3a:2d:c9:0c:83:5b:fd:c5:
c8:dc:f3:85:03:73:db:80:dd:9a:0b:31:0a:ba:da:bf:88:08:
69:66:0b:6b:27:24:30:14:0c:67:78:db:81:ef:34:c8:04:89:
ea:d4:77:6f:4b:1a:75:17:31:ea:0d:2e:cc:27:85:a2:00:65:
e7:e4:be:eb:5a:22:36:34:ab:99:6a:58:d6:5d:a6:05:46:a5:
de:4a:46:0d:22:e4:45:7f:bc:12:df:ca:f7:50:d4:7d:40:63:
46:78:ce:03:0a:90:8f:b5:d0:44:af:07:31:07:e8:a6:26:e0:
31:0e:59:a8:ce:7c:cf:91:4b:ed:71:f3:64:d6:51:48:27:d7:
7a:0e:fc:21:bd:a2:03:42:3b:35:4e:1a:b7:1e:db:28:75:b5:
2d:8a:d4:b0:24:e2:98:51:72:17:03:93:63:12:75:78:ee:1e:
64:9a:4a:ae:63:e1:96:9b:42:06:9d:76:1b:4b:2d:fa:6d:7e:
95:3e:06:d9:e7:38:7e:18:4d:3a:a3:3f:d8:77:e4:d1:3c:bf:
7b:fd:fd:cc:d4:59:8a:09:e8:9c:66:57:ee:d7:ff:af:10:6a:
a0:4f:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 09:07:39 2026 by rpki-client