
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier: vwDcYc823gl6wpxExI3uiK07bTQJbmb6/BmCC2q+Wko=
Subject key identifier: C5:08:3D:18:8A:4C:BD:A9:2C:CA:8C:33:4C:6D:E5:45:0B:84:86:2E
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial: 0540
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number: 04B7
Signing time: Fri 09 Oct 2026 00:05:03 +0000
Manifest this update: Fri 09 Oct 2026 00:05:02 +0000
Manifest next update: Fri 16 Oct 2026 00:05:02 +0000
Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: ps4IIVnGTbLuJOxWrQ2+NDpzqsle7GQlcBa+MfLbqDM=)
2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: emYB90Tc6vUDMKCJrE8EikFcQqSVRLawl5Ox0dxnDFU=)
3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: 2Ejpb7iiO3JmzRqpewiLL1vt+WHuS/YGJN8reYrEMtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 00:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Validity
Not Before: Oct 9 00:05:02 2026 GMT
Not After : Oct 16 00:05:02 2026 GMT
Subject: CN=6ac82faf-b7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:e6:f1:0f:d8:f8:04:8a:d4:93:4e:41:bf:
c0:4c:3e:e0:fc:0f:00:95:4c:fb:98:8b:6d:43:be:
f2:c1:83:bf:a1:c0:76:40:81:ce:30:d5:d9:e2:97:
66:af:98:5e:f7:44:ff:f8:f6:f2:86:aa:4c:29:58:
f5:4c:73:f6:25:29:58:e4:5e:ec:f4:07:c0:19:48:
f1:6e:94:f5:a5:bb:98:e7:02:1a:f3:21:53:94:7d:
ff:aa:f0:4d:9c:f2:e3:7e:a9:72:58:95:83:eb:83:
52:b8:c3:20:e0:cc:32:12:b5:bc:99:aa:57:60:ce:
71:99:d1:92:51:16:50:3b:ec:96:96:e0:5c:23:8f:
58:6e:eb:47:ce:ae:cc:40:67:56:2c:f3:53:af:ba:
d2:20:4e:5c:33:3b:d3:3a:0e:97:92:dc:a0:ae:58:
b1:3a:b5:77:9c:c7:71:31:e7:d1:76:7d:ae:85:00:
59:33:57:69:e9:7c:4b:61:44:79:74:14:21:76:05:
0f:5d:52:3e:ee:a5:39:e7:32:15:80:22:9e:8b:d1:
55:1f:04:bd:6b:27:1b:89:b9:82:b9:15:d5:0b:18:
e2:04:86:fd:86:0e:aa:04:95:9b:dd:cb:20:31:87:
0c:c9:27:14:64:98:76:f5:32:63:08:af:4d:f2:6e:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:08:3D:18:8A:4C:BD:A9:2C:CA:8C:33:4C:6D:E5:45:0B:84:86:2E
X509v3 Authority Key Identifier:
keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0d:12:da:66:d1:24:72:78:54:dd:dd:f7:f8:7d:50:81:df:
67:90:5c:e1:8b:5c:88:68:b0:9a:b3:96:58:f6:77:55:45:df:
a5:bf:97:6d:85:ec:94:1d:0e:9b:60:c9:3b:0d:fa:ba:68:98:
2b:f8:48:55:c5:86:d3:ca:0e:72:14:81:56:a3:89:3a:41:99:
df:35:7c:03:8a:6e:b9:e8:5d:96:92:e4:46:72:fa:bb:dc:a8:
bd:fd:85:f0:36:c3:b1:d2:43:54:3e:42:56:5a:fb:42:19:de:
aa:1d:e4:42:6c:1e:6e:c6:9c:55:6f:7a:59:1d:9b:26:02:ef:
e4:ab:ca:1d:f3:4f:09:b4:ff:aa:72:ea:ae:b1:66:48:42:b1:
25:b9:22:b5:20:52:b1:05:e6:8a:82:2a:a7:0e:96:0d:03:24:
fd:64:50:a5:f3:12:0a:24:25:df:2e:4a:6e:a7:bf:af:f9:37:
be:ba:a4:cb:44:50:02:78:2b:79:6e:9e:7c:f0:e1:0e:50:ab:
19:3f:14:f9:5e:b0:c6:fa:24:ad:30:c4:00:cb:62:64:92:22:
78:46:2c:31:90:f5:b2:09:d1:62:b5:fb:54:96:c9:4e:ec:a3:
31:fb:08:76:38:0c:ac:a4:03:0b:50:a2:c1:4b:fc:f9:0d:48:
ac:8d:d1:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF
OEU4NkQ4MEIwHhcNMjYxMDA5MDAwNTAyWhcNMjYxMDE2MDAwNTAyWjAYMRYwFAYD
VQQDEw02YWM4MmZhZi1iN2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Q7m8Q/Y+ASK1JNOQb/ATD7g/A8AlUz7mIttQ77ywYO/ocB2QIHOMNXZ4pdm
r5he90T/+PbyhqpMKVj1THP2JSlY5F7s9AfAGUjxbpT1pbuY5wIa8yFTlH3/qvBN
nPLjfqlyWJWD64NSuMMg4MwyErW8mapXYM5xmdGSURZQO+yWluBcI49YbutHzq7M
QGdWLPNTr7rSIE5cMzvTOg6XktygrlixOrV3nMdxMefRdn2uhQBZM1dp6XxLYUR5
dBQhdgUPXVI+7qU55zIVgCKei9FVHwS9aycbibmCuRXVCxjiBIb9hg6qBJWb3csg
MYcMyScUZJh29TJjCK9N8m42nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUIPRiK
TL2pLMqMM0xt5UULhIYuMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ
dzQtRHlNckNELURvNkcyQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPw0S2mbRJHJ4VN3d9/h9UIHfZ5Bc4YtciGiwmrOWWPZ3VUXfpb+XbYXslB0O
m2DJOw36umiYK/hIVcWG08oOchSBVqOJOkGZ3zV8A4puuehdlpLkRnL6u9yovf2F
8DbDsdJDVD5CVlr7Qhneqh3kQmwebsacVW96WR2bJgLv5KvKHfNPCbT/qnLqrrFm
SEKxJbkitSBSsQXmioIqpw6WDQMk/WRQpfMSCiQl3y5Kbqe/r/k3vrqky0RQAngr
eW6efPDhDlCrGT8U+V6wxvokrTDEAMtiZJIieEYsMZD1sgnRYrX7VJbJTuyjMfsI
djgMrKQDC1CiwUv8+Q1IrI3RCA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:17:08 2026 by rpki-client