
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
File: BoQptByg8Segp10v_LJsA6lfYHE.mft (raw, json)
Hash identifier: 0M73rd7u/hB8nq50Ut2jXmGK/pKsbDKpf6veaBALm2E=
Subject key identifier: 76:4F:46:4E:87:90:AD:CB:77:50:1C:25:FE:6B:54:2B:76:E0:B9:25
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Certificate issuer: /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
Manifest number: 58
Signing time: Mon 01 Jun 2026 09:00:07 +0000
Manifest this update: Mon 01 Jun 2026 09:00:06 +0000
Manifest next update: Mon 08 Jun 2026 09:00:06 +0000
Files and hashes: 1: BoQptByg8Segp10v_LJsA6lfYHE.crl (hash: NsTPBk7bh8uo48dLrAt8uXqzM4ofuQUzyeP0ZgKnvFo=)
2: BE1ACA36DD7911F088A95D31386F56BC.roa (hash: wFVA3jy/rKVpvXwLeuTYWtSknure16Z8S/vPIwlvU8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Validity
Not Before: Jun 1 09:00:06 2026 GMT
Not After : Jun 8 09:00:06 2026 GMT
Subject: CN=6a1d4a16-9e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:55:63:21:60:ad:3f:e8:1c:b2:cf:42:c2:
c8:49:22:12:14:af:99:3b:1c:11:fe:06:56:a1:8b:
2d:8a:f3:b5:8a:b5:32:57:d9:40:26:58:48:3a:92:
1a:85:83:97:44:e6:00:32:cc:38:d6:42:86:5c:67:
f9:37:2c:b0:3d:fe:2c:37:e5:07:46:3f:a4:ed:f4:
4d:76:2a:75:2e:0a:c5:a2:bb:c4:2c:5f:d0:b0:86:
dd:d1:9c:e4:07:73:87:88:25:1f:bf:e4:6d:c4:df:
b3:44:56:04:e0:89:e0:b9:9d:9f:d8:a9:78:84:48:
43:db:87:8f:90:63:0f:d8:13:7f:c5:7e:09:c6:90:
94:a9:e0:17:08:57:15:0c:0e:79:0a:c7:26:eb:73:
3c:80:fc:cf:b3:bc:1e:8f:5e:a4:88:24:ee:cf:a7:
c8:5d:09:16:d6:11:0e:3d:74:f3:96:9f:84:62:64:
e8:e1:d1:d5:43:b4:67:75:e4:91:6a:a4:b0:8e:41:
ae:99:49:32:e1:16:39:2b:c7:69:02:62:68:4e:ba:
85:ee:a4:30:32:40:bb:4f:6d:6e:f9:5d:52:ca:f0:
cc:84:21:81:a4:48:9b:22:a8:20:c8:fd:4a:4d:a2:
c2:3b:e3:2c:a7:73:49:75:58:e2:04:db:77:34:da:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:46:4E:87:90:AD:CB:77:50:1C:25:FE:6B:54:2B:76:E0:B9:25
X509v3 Authority Key Identifier:
keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:b7:4a:9f:29:7a:e2:37:61:69:df:21:be:c6:ab:fc:77:92:
e0:a5:22:63:8b:b8:dd:5b:d9:45:64:07:e4:98:75:10:8b:48:
93:b2:49:10:c1:29:92:72:fe:a2:98:d3:7f:3f:50:f9:eb:7c:
c8:8a:98:d1:ac:e5:bc:f1:43:e4:14:94:5b:9e:44:46:e4:90:
47:a2:c7:1d:57:6a:79:87:25:39:e3:8c:8d:b2:4b:fe:5a:9c:
b0:30:3e:3b:89:10:3f:d1:0e:cc:76:a0:00:8c:95:1d:49:33:
b5:74:5b:2b:5c:38:44:71:d1:a4:e7:79:cc:56:a3:eb:61:91:
e7:5a:27:d2:26:39:de:07:11:fa:b2:84:81:f1:a5:9c:97:42:
03:ab:98:5c:60:ae:9c:71:cd:39:17:f0:49:aa:f6:c6:45:4f:
ea:12:8b:cb:cd:8f:55:00:82:5c:87:2a:a3:a9:5a:ab:ea:cf:
76:de:80:5a:b6:71:b0:e8:2d:2b:32:fa:a4:e8:ee:55:0d:bf:
26:1a:2b:92:b1:50:28:12:83:4b:3e:e1:a6:65:09:8b:08:54:
f7:f7:80:3e:6d:f8:a8:72:97:5c:bb:cf:a4:ae:96:a8:df:db:
01:b3:31:68:40:4a:5c:0f:b8:f0:67:5e:ff:0a:89:0a:ea:7a:
70:51:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:56 2026 by rpki-client