
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
File: BoQptByg8Segp10v_LJsA6lfYHE.mft (raw, json)
Hash identifier: LtO4jXg+qKcRLyYpHEKPSEwrVcbj4DRyKNlx4qkDaUw=
Subject key identifier: 46:0E:0A:C9:3D:4E:49:D2:9B:4B:C4:AC:1F:E7:82:B9:ED:04:28:5A
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Certificate issuer: /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
Manifest number: 41
Signing time: Fri 17 Apr 2026 08:10:52 +0000
Manifest this update: Fri 17 Apr 2026 08:10:51 +0000
Manifest next update: Fri 24 Apr 2026 08:10:51 +0000
Files and hashes: 1: BoQptByg8Segp10v_LJsA6lfYHE.crl (hash: Aw+3RiBrKpWzgieBNuIm/kQ9iuxjGGBRAjmwLuUreio=)
2: BE1ACA36DD7911F088A95D31386F56BC.roa (hash: wFVA3jy/rKVpvXwLeuTYWtSknure16Z8S/vPIwlvU8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Validity
Not Before: Apr 17 08:10:51 2026 GMT
Not After : Apr 24 08:10:51 2026 GMT
Subject: CN=69e1eb0b-b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:1f:41:19:76:a8:32:37:41:d3:a0:cb:7d:
58:ab:0c:38:dd:f0:e5:8b:f6:ec:e6:6d:01:f7:11:
b8:ca:4c:07:e3:92:da:ec:e3:3c:52:28:10:ec:ac:
26:0c:a4:a1:af:49:fd:04:70:85:08:5f:f9:33:f0:
b1:84:80:3b:4a:d3:8f:3f:bc:64:ea:1a:12:41:3f:
23:12:0c:4d:5b:bb:32:fb:14:5d:f4:4b:38:84:6f:
5c:1a:67:27:84:9c:10:9e:2d:b2:40:37:d1:e0:cf:
0c:86:62:78:9d:b5:07:27:5a:6e:8f:a8:61:62:09:
d8:db:fb:b2:8d:69:8b:a5:74:3c:09:70:e8:70:bb:
06:b1:6d:6b:32:a6:a6:48:f2:cd:8a:20:c7:f8:4c:
40:4b:98:6c:63:91:67:93:4f:28:68:3b:fe:18:78:
cb:45:14:ea:e2:45:64:7e:5b:62:b8:78:a8:bd:c7:
6c:ea:f3:87:c6:3b:34:9e:79:5e:cc:6a:a1:1c:59:
c9:0a:55:e7:46:5c:91:99:a6:f7:65:d2:64:db:36:
53:59:54:19:3d:03:95:51:9d:89:db:64:db:ce:73:
42:cf:b6:1d:df:d0:27:c7:f1:b5:3d:76:95:e1:11:
a4:89:3b:a3:9f:17:29:73:04:20:92:b9:e3:a3:6f:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0E:0A:C9:3D:4E:49:D2:9B:4B:C4:AC:1F:E7:82:B9:ED:04:28:5A
X509v3 Authority Key Identifier:
keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:c5:0b:f8:b1:45:3d:6c:25:d4:7d:b4:db:6d:47:08:0b:26:
cf:bc:67:a8:37:4a:f9:ad:92:6e:fa:56:a9:0f:33:dc:5e:0f:
4e:87:43:95:c9:f0:bb:33:97:96:1b:41:6c:8e:bc:d5:1e:c6:
3e:9c:10:7d:26:08:7e:30:d2:c2:fb:a7:7c:05:e1:1d:ec:5a:
86:df:9a:9c:ec:e1:02:dc:55:c2:20:b8:cf:3c:53:5a:be:70:
66:33:0d:0b:ff:84:37:dd:24:7f:dd:61:e0:20:09:21:8c:d5:
c5:3b:b7:38:f3:78:38:b1:71:ab:dc:86:cb:bd:25:43:31:1b:
31:6a:74:8b:7b:28:78:cc:6a:38:62:16:4d:b2:07:30:b7:05:
ae:73:0f:ed:e0:89:55:22:9b:45:24:48:c1:5b:6f:28:4c:b9:
32:ef:50:f5:4e:ef:4c:d8:29:5b:f5:18:36:b8:c5:90:48:bc:
f8:5a:78:4b:63:a8:38:36:35:5d:70:d3:a6:a5:2d:e3:74:57:
f2:3a:17:0b:89:cd:b3:7d:ae:d6:7e:d3:61:e3:ca:80:ae:97:
71:0d:30:ca:5e:5c:6e:ae:97:e4:4e:fc:19:b3:af:6e:91:05:
d5:98:9f:0c:08:9f:79:ca:d1:0f:1e:46:ff:06:7b:82:22:09:
26:99:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:42 2026 by rpki-client