
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier: hXRU/Kw5J1q55S1VQOFy0RfOS3TR8CDQswrG3UoDHhU=
Subject key identifier: BF:F5:CB:10:C8:6A:38:EE:7F:59:5A:FD:5A:89:62:3D:76:22:8A:D3
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial: 0508
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number: 0481
Signing time: Mon 29 Jun 2026 00:25:00 +0000
Manifest this update: Mon 29 Jun 2026 00:25:00 +0000
Manifest next update: Mon 06 Jul 2026 00:25:00 +0000
Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: wcMzi73xlICYkxGrHJxXwOB2SsyLMcVAN404AuZhijM=)
2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: eYryKgNZm2qZqdFNNTLzTj59Jc409yodEwjuUOxXoJY=)
3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: glYctxlo8gx3BenqS2wSFdBXN3gLXFdiT5hyE/Vu8Ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 00:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Validity
Not Before: Jun 29 00:25:00 2026 GMT
Not After : Jul 6 00:25:00 2026 GMT
Subject: CN=6a41bb5c-6956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:f5:04:04:12:a2:9d:11:53:0f:5d:bb:58:
b7:8c:62:77:ba:dd:48:e1:7e:8e:c0:7d:68:3e:8d:
ae:3a:bf:38:0f:d2:b6:74:30:02:24:78:c1:91:d1:
cf:be:bb:1c:09:78:20:eb:18:b5:fe:a5:93:35:e8:
2f:a1:9f:9e:e7:7b:dd:da:11:71:47:b4:dc:a2:bf:
be:06:2b:6c:2b:8f:c7:c5:b3:54:db:53:ae:bf:99:
53:40:2d:9d:45:3b:a7:dc:ee:3e:cf:92:33:54:af:
47:2d:0e:6c:ef:44:89:d1:64:76:4b:00:64:f9:8a:
20:2c:99:ac:8a:f6:0b:55:17:2c:ae:47:92:27:74:
74:79:04:79:30:8c:4b:a9:07:d1:f0:88:81:c2:e0:
c5:f4:98:48:d4:cc:3a:40:4a:55:53:b4:2b:e3:8d:
c8:ff:40:dd:57:c6:49:2b:cd:00:ef:d4:62:aa:ea:
fe:80:b5:ff:61:c7:10:ec:1d:a6:1d:e6:12:c8:90:
d1:ce:33:6d:ed:79:a8:57:18:02:54:27:7e:23:e3:
a4:23:84:b7:a3:87:b2:75:9b:86:29:6b:97:50:5e:
7a:50:f5:5c:0c:a8:b5:7a:16:b6:a9:ca:6d:00:ff:
09:48:19:a0:f2:c3:0e:dd:84:bb:d7:8e:ad:56:dc:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:CB:10:C8:6A:38:EE:7F:59:5A:FD:5A:89:62:3D:76:22:8A:D3
X509v3 Authority Key Identifier:
keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:65:d5:a8:64:96:ce:00:6b:25:e2:f9:29:e2:3f:78:d1:1f:
ea:f8:f0:bf:35:e5:26:ae:85:ae:05:dc:75:e0:d2:f7:13:c5:
55:c3:c9:0c:e0:ef:e6:6e:b2:1f:da:e1:e3:11:b6:13:15:69:
5a:dc:9a:2c:5f:2b:bd:f2:bd:70:35:22:94:2a:54:26:a8:28:
e0:54:52:45:c3:af:00:61:8d:a6:29:12:e9:ff:c3:2f:b4:cd:
c3:1f:0c:99:14:bf:de:42:28:d9:e9:bf:62:51:e6:c9:42:38:
ae:af:85:35:11:b9:83:66:d3:2e:5e:08:96:7e:08:bc:5e:96:
d8:c1:de:9b:2b:dd:be:bd:a3:17:7f:4d:ee:8e:28:4a:2e:b9:
a9:4c:9a:ff:42:28:9f:51:ce:4d:24:45:5d:ea:b0:b8:4e:04:
79:60:11:7c:73:69:77:39:67:c2:5f:1e:63:26:e4:fe:69:b4:
dd:b9:df:92:75:90:d4:ed:98:4d:c3:55:93:16:a1:56:95:ca:
02:ac:22:eb:42:d5:7e:6c:64:8d:e1:c8:55:7c:53:46:68:d6:
21:d3:c2:db:67:67:13:40:14:e6:43:6b:11:08:d2:4e:68:2b:
2a:d7:e4:fa:82:f6:8d:51:12:61:4a:25:a4:db:77:1b:3c:f1:
0e:42:3b:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF
OEU4NkQ4MEIwHhcNMjYwNjI5MDAyNTAwWhcNMjYwNzA2MDAyNTAwWjAYMRYwFAYD
VQQDEw02YTQxYmI1Yy02OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn2j1BAQSop0RUw9du1i3jGJ3ut1I4X6OwH1oPo2uOr84D9K2dDACJHjBkdHP
vrscCXgg6xi1/qWTNegvoZ+e53vd2hFxR7Tcor++BitsK4/HxbNU21Ouv5lTQC2d
RTun3O4+z5IzVK9HLQ5s70SJ0WR2SwBk+YogLJmsivYLVRcsrkeSJ3R0eQR5MIxL
qQfR8IiBwuDF9JhI1Mw6QEpVU7Qr443I/0DdV8ZJK80A79Riqur+gLX/YccQ7B2m
HeYSyJDRzjNt7XmoVxgCVCd+I+OkI4S3o4eydZuGKWuXUF56UPVcDKi1eha2qcpt
AP8JSBmg8sMO3YS7146tVtwZ1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/1yxDI
ajjuf1la/VqJYj12IorTMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ
dzQtRHlNckNELURvNkcyQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATGXVqGSWzgBrJeL5KeI/eNEf6vjwvzXlJq6FrgXcdeDS9xPFVcPJDODv5m6y
H9rh4xG2ExVpWtyaLF8rvfK9cDUilCpUJqgo4FRSRcOvAGGNpikS6f/DL7TNwx8M
mRS/3kIo2em/YlHmyUI4rq+FNRG5g2bTLl4Iln4IvF6W2MHemyvdvr2jF39N7o4o
Si65qUya/0Ion1HOTSRFXeqwuE4EeWARfHNpdzlnwl8eYybk/mm03bnfknWQ1O2Y
TcNVkxahVpXKAqwi60LVfmxkjeHIVXxTRmjWIdPC22dnE0AU5kNrEQjSTmgrKtfk
+oL2jVESYUolpNt3GzzxDkI7oQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:34 2026 by rpki-client