
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json)
Hash identifier: FIS0E2EuMkfiXBrPhaoQmwiZ4dou1+Bu4pIKH1+u6p4=
Subject key identifier: AA:D7:D2:8A:6C:F2:2F:90:CF:D4:6B:93:81:49:FA:C0:D3:F6:85:4E
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
Manifest number: 0179
Signing time: Thu 21 May 2026 04:49:23 +0000
Manifest this update: Thu 21 May 2026 04:49:22 +0000
Manifest next update: Thu 28 May 2026 04:49:22 +0000
Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: xb+NBoHxT57Qr/CKWZJ6XgcuHpy/o1QPRagkK4qgdI4=)
2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=)
3: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=)
4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=)
5: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=)
6: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Validity
Not Before: May 21 04:49:22 2026 GMT
Not After : May 28 04:49:22 2026 GMT
Subject: CN=6a0e8ed2-8bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:a9:b1:1f:9f:e5:47:2d:10:32:b4:99:81:
1d:04:e7:44:b7:8d:de:c5:44:b4:68:d9:93:b5:69:
37:d0:49:2e:54:5e:e7:10:dd:31:61:0d:93:ea:0d:
fd:0e:1e:62:b1:09:09:a8:f5:43:1d:1a:36:b9:16:
a5:52:7c:1c:c8:01:81:4e:8b:ef:a2:b7:ed:20:ed:
e9:1e:a7:1e:f5:00:cf:b9:d2:ff:58:98:94:fb:86:
83:71:1e:6d:48:b6:97:d9:cf:4c:fa:5f:38:9a:01:
2f:20:8e:2e:2a:73:98:3b:c9:ed:41:2f:7c:08:c7:
29:33:90:d3:05:5e:fb:13:bd:ff:0f:f3:87:32:b1:
32:9f:59:93:f6:aa:0f:79:0e:6b:49:7e:62:48:d3:
c7:5f:e7:ab:f1:3b:2c:3d:8c:cc:7d:6c:2a:d7:15:
21:79:40:75:00:43:3e:34:2d:2f:a1:b1:e4:ec:55:
22:6c:cb:36:11:86:78:92:e2:c9:e9:99:13:ad:1e:
5d:72:a0:34:83:4f:e0:54:95:de:e8:f4:d2:da:24:
06:90:de:96:39:08:13:bc:d0:07:a4:86:ee:a5:7a:
37:4c:77:0e:94:6a:82:22:e7:a3:1a:05:21:bf:10:
e2:ac:2d:89:b0:9b:54:89:e4:44:00:1d:36:be:ad:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:D2:8A:6C:F2:2F:90:CF:D4:6B:93:81:49:FA:C0:D3:F6:85:4E
X509v3 Authority Key Identifier:
keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6d:06:73:d5:6e:19:28:50:03:07:0f:49:6a:11:91:8a:5d:
bf:5d:09:fd:cd:04:49:07:a4:ca:f9:e5:de:31:fc:79:a9:d8:
0f:b5:0c:cb:d9:fb:38:c5:90:b2:0a:5a:95:99:35:42:65:d0:
4b:f5:4b:e2:5f:04:68:22:70:cd:d5:fa:c1:ea:56:d5:b5:37:
c5:9f:b8:b0:0a:12:f4:a1:4b:45:1f:89:64:d9:37:5e:1e:51:
18:73:aa:b1:97:83:c3:04:ec:e2:a2:8a:2f:e9:54:ae:df:c9:
62:e0:40:99:0b:eb:2a:cc:3b:9b:6d:ec:af:b8:9b:f6:20:d5:
4c:2e:0d:13:4f:88:31:68:d7:3c:2f:36:ee:3b:71:94:80:84:
0d:f6:5d:e9:97:83:12:72:82:4c:82:67:95:f7:df:20:74:71:
2d:68:3d:b6:2a:09:5c:2b:82:7e:a9:81:39:8f:13:79:28:9d:
38:b4:26:87:af:11:9a:dd:a7:16:f2:73:1c:5d:47:dd:6a:85:
84:ae:bb:c7:7d:fb:8c:25:34:3c:96:b2:28:6c:15:7f:f9:84:
96:6c:d7:28:f5:7b:b6:4f:e3:d3:2b:fa:41:e0:0f:ce:e6:3a:
40:ac:e1:2c:4e:32:fa:9d:84:d5:57:66:d1:13:3b:f3:09:df:
68:34:33:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE
NTk1OUYzMjUwHhcNMjYwNTIxMDQ0OTIyWhcNMjYwNTI4MDQ0OTIyWjAYMRYwFAYD
VQQDEw02YTBlOGVkMi04YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyepsR+f5UctEDK0mYEdBOdEt43exUS0aNmTtWk30EkuVF7nEN0xYQ2T6g39
Dh5isQkJqPVDHRo2uRalUnwcyAGBTovvorftIO3pHqce9QDPudL/WJiU+4aDcR5t
SLaX2c9M+l84mgEvII4uKnOYO8ntQS98CMcpM5DTBV77E73/D/OHMrEyn1mT9qoP
eQ5rSX5iSNPHX+er8TssPYzMfWwq1xUheUB1AEM+NC0vobHk7FUibMs2EYZ4kuLJ
6ZkTrR5dcqA0g0/gVJXe6PTS2iQGkN6WOQgTvNAHpIbupXo3THcOlGqCIuejGgUh
vxDirC2JsJtUieREAB02vq3R7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrX0ops
8i+Qz9Rrk4FJ+sDT9oVOMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0
QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5
UFRucld3aF8wX3JWbFo4eVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX20Gc9VuGShQAwcPSWoRkYpdv10J/c0ESQekyvnl3jH8eanYD7UMy9n7OMWQ
sgpalZk1QmXQS/VL4l8EaCJwzdX6wepW1bU3xZ+4sAoS9KFLRR+JZNk3Xh5RGHOq
sZeDwwTs4qKKL+lUrt/JYuBAmQvrKsw7m23sr7ib9iDVTC4NE0+IMWjXPC827jtx
lICEDfZd6ZeDEnKCTIJnlfffIHRxLWg9tioJXCuCfqmBOY8TeSidOLQmh68Rmt2n
FvJzHF1H3WqFhK67x337jCU0PJayKGwVf/mElmzXKPV7tk/j0yv6QeAPzuY6QKzh
LE4y+p2E1Vdm0RM78wnfaDQzCA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:39:37 2026 by rpki-client