
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier: 5cW5swmWcS36JmgpEhrfsDROlOyd3hShA6K0J5wAfSw=
Subject key identifier: C5:98:BD:51:5A:11:BA:F5:14:0D:C5:23:1D:E3:57:61:F6:1F:99:10
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial: 25D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number: 25AF
Signing time: Sat 04 Apr 2026 15:40:46 +0000
Manifest this update: Sat 04 Apr 2026 15:40:46 +0000
Manifest next update: Sat 11 Apr 2026 15:40:46 +0000
Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: uSaP0BnzFoD88kSvGxb0Bjz2EPPRveJaB8bR47el/kk=)
2: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=)
3: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9683 (0x25d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Validity
Not Before: Apr 4 15:40:46 2026 GMT
Not After : Apr 11 15:40:46 2026 GMT
Subject: CN=69d130fe-4617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:c9:8d:32:be:c4:18:88:92:15:4e:f6:6f:
1c:84:85:78:41:a6:c7:66:22:4b:d7:86:d7:09:bb:
ca:83:58:40:4c:5f:eb:95:e1:b6:1a:e4:ad:46:c0:
dd:87:6d:a6:45:03:04:b2:af:6f:8a:34:f4:93:7f:
07:c8:f7:9c:fb:12:a4:81:8f:03:0e:11:96:5d:b5:
80:d4:67:20:df:48:ad:17:8e:29:f4:d4:80:24:52:
b3:b3:b9:c5:42:22:a4:b4:12:c3:f8:57:b4:7f:0b:
31:45:a0:f7:15:bc:24:2b:ce:da:8a:36:a6:62:a1:
93:da:70:f3:db:18:8b:be:22:14:30:79:86:43:5f:
2a:e1:6d:d5:f5:9e:95:3d:2d:34:08:0f:ef:85:b1:
a7:e2:c7:98:a5:d9:8e:10:ae:5b:55:63:9a:fe:30:
37:5a:ab:94:1c:e0:c7:66:6c:6f:3e:c8:f2:4f:91:
b2:07:9b:29:b5:f0:3c:43:c2:9c:aa:85:cb:c6:11:
7d:9b:83:a8:1e:d5:ed:94:48:45:07:32:6b:cd:da:
95:69:4a:3f:87:60:99:af:b3:bf:51:df:45:05:71:
77:a7:49:e3:13:66:30:7c:51:b0:6e:7b:63:99:d9:
be:26:82:d3:79:a5:d6:af:87:55:1b:7c:95:73:80:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:BD:51:5A:11:BA:F5:14:0D:C5:23:1D:E3:57:61:F6:1F:99:10
X509v3 Authority Key Identifier:
keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:53:4d:00:65:76:c3:4a:ef:b4:72:f2:d5:eb:ff:a8:bd:
ce:9e:c1:0b:71:fc:c2:b5:0e:1e:2c:36:9b:fc:b9:32:9d:b3:
3a:6f:f4:96:d2:9d:97:8a:a8:ad:fe:16:18:c1:d3:67:b6:eb:
b8:6c:67:8a:cb:43:6b:0f:bd:7c:e7:99:23:2e:0a:d3:ce:03:
8c:3e:28:b1:14:3b:2c:3d:d9:27:df:c0:68:28:86:dd:c5:66:
56:ab:c0:fe:59:cb:a5:a8:3a:ee:53:56:17:4d:11:9f:f6:9e:
f8:ed:76:78:58:d5:01:9b:d9:f5:6a:25:a3:7e:36:6d:f7:72:
7f:d4:68:bd:1b:1e:32:5c:19:92:32:f5:6e:ae:d8:a5:e8:85:
46:aa:31:a8:d9:f4:88:1f:9d:45:b1:17:6a:ab:d7:a2:11:cc:
01:4b:ff:c5:d7:61:f4:82:27:64:60:40:7b:54:e4:ee:c0:02:
a3:6f:ea:0a:de:b8:47:60:08:0a:d6:07:22:64:42:b3:07:4b:
0e:05:c2:49:fe:ae:ff:9f:32:a3:1f:0c:31:55:bf:db:eb:d3:
bf:3c:c3:09:26:14:c1:d3:df:b4:a5:b0:0a:35:27:1c:b7:8a:
80:a6:03:84:47:95:2a:fd:00:ff:44:01:f2:12:04:8e:d1:3b:
fc:14:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:46 2026 by rpki-client