
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier: Fa8WfYtNqoZyI+iVzuipuycwfqSNNDbKMpnvEKkqd6M=
Subject key identifier: B5:C8:04:AF:F0:F3:61:77:27:B1:EA:8F:72:7C:48:F1:19:3F:A4:6E
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial: 0541
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number: 04B8
Signing time: Sat 10 Oct 2026 23:57:48 +0000
Manifest this update: Sat 10 Oct 2026 23:57:47 +0000
Manifest next update: Sat 17 Oct 2026 23:57:47 +0000
Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: aFgrsHQukA4hqaYChs0Mbo70SIsGu1Z/p9JfCOXzc5M=)
2: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: 2Ejpb7iiO3JmzRqpewiLL1vt+WHuS/YGJN8reYrEMtI=)
3: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: emYB90Tc6vUDMKCJrE8EikFcQqSVRLawl5Ox0dxnDFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Validity
Not Before: Oct 10 23:57:47 2026 GMT
Not After : Oct 17 23:57:47 2026 GMT
Subject: CN=6acad0fc-6bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:e5:6f:35:02:2d:5f:39:e6:b4:80:d2:4f:
27:95:5a:5d:13:fe:91:11:e6:16:13:7d:ac:1c:2c:
c6:60:5d:6e:79:de:39:08:a0:e2:02:92:70:4e:7c:
af:32:fb:a8:38:6d:ca:cf:04:1b:c5:94:38:7f:eb:
38:b7:b0:26:71:cc:65:ef:ad:93:a5:37:3d:3a:89:
cf:3f:27:a5:56:9b:57:fa:61:2a:e4:d9:aa:7e:9f:
91:04:e7:b3:61:fb:23:0c:64:b2:6d:46:59:27:4d:
39:6f:84:cf:4a:57:9e:ac:94:30:f9:47:ee:fa:03:
0c:52:9b:47:62:36:9f:c4:78:bb:f4:aa:f4:88:ef:
6a:8c:c9:09:b1:2d:e1:7d:0e:c8:aa:e1:88:79:c1:
e6:ec:42:9d:b9:36:b5:6b:b5:bd:14:4e:39:ad:bb:
e9:ec:df:b0:98:ca:83:c6:7b:77:14:b0:9b:ce:4f:
63:e1:8d:da:76:83:43:c9:a9:94:d8:9d:d2:01:c2:
11:3b:ca:23:46:e3:18:e2:34:a7:7f:56:10:b4:90:
92:94:5d:a8:fe:5f:1d:b2:a0:4b:41:d8:0c:e1:9b:
ec:51:33:57:c0:20:6c:b7:cf:cb:ac:cd:a7:90:f6:
7b:d4:13:25:bd:60:d8:4d:0f:bf:5a:bc:44:13:bf:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C8:04:AF:F0:F3:61:77:27:B1:EA:8F:72:7C:48:F1:19:3F:A4:6E
X509v3 Authority Key Identifier:
keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:46:73:38:95:26:2b:4b:35:02:f5:47:19:84:3a:c5:76:bb:
1b:ff:b2:8e:98:2b:81:61:e4:cf:da:95:f6:0e:08:f9:04:4e:
5e:ea:ae:c5:13:44:c2:72:d9:ff:df:69:80:58:ca:4f:3f:cd:
3d:b3:6f:d8:dc:fd:cc:6e:a9:4e:78:57:98:7c:b0:d5:c4:51:
38:cd:21:c8:d7:e4:b5:21:92:45:59:eb:6f:7f:44:d8:e3:74:
44:75:53:42:24:c9:00:2a:00:42:bb:c2:17:c7:41:f2:04:3e:
d3:de:ef:cc:18:93:ec:d5:0c:a7:6c:b9:62:10:cf:28:34:0e:
e7:ec:29:85:1c:63:cb:62:0f:fa:21:19:14:54:2d:67:c2:d2:
cc:16:12:3d:4d:49:36:e1:df:0d:35:d5:51:55:aa:a9:e0:2a:
90:08:2c:8f:c4:98:dd:ae:01:3b:1c:48:fe:6c:ad:28:07:7c:
1f:35:cf:32:88:ff:a0:20:1d:45:1a:a1:21:8d:27:51:b8:d9:
9c:2b:a3:ac:df:ac:2f:6b:8a:1f:3e:0b:49:6a:13:c6:00:77:
69:fd:7d:22:0f:b3:53:f0:4c:dd:c7:c7:7d:5c:63:1a:89:ee:
d1:62:02:48:53:e1:37:0f:ba:f8:75:b6:6e:1a:b1:db:46:90:
04:44:35:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:52:38 2026 by rpki-client