
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier: zILQIetcpp2KZve6gp54bhjhIwm34/C+0g7+wCsQqsI=
Subject key identifier: ED:FF:6D:77:35:3E:E4:65:A1:6B:D0:80:E3:31:C4:EA:E6:E4:9F:3F
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial: 25D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number: 25B5
Signing time: Thu 16 Apr 2026 15:42:20 +0000
Manifest this update: Thu 16 Apr 2026 15:42:19 +0000
Manifest next update: Thu 23 Apr 2026 15:42:19 +0000
Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: QtLfTt+wDvSdCC/8Jq5VMzDrAqt8gf8WHV35ipUkk1M=)
2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=)
3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9689 (0x25d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Validity
Not Before: Apr 16 15:42:19 2026 GMT
Not After : Apr 23 15:42:19 2026 GMT
Subject: CN=69e1035c-8ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:3d:39:4e:63:e3:2e:ae:d0:63:e7:0f:dd:
a1:5f:70:43:30:ed:2c:07:f6:26:ee:a8:b8:a3:31:
c8:88:13:d1:d1:d8:d7:93:bd:a6:43:18:47:f6:93:
ef:6e:8c:3d:65:71:32:cb:bd:19:d5:f8:b0:d5:8c:
72:9b:d1:f2:91:29:14:5a:af:46:a2:ee:59:8b:49:
16:ce:25:67:95:6c:67:6a:ae:69:5b:4d:53:f6:bb:
10:c4:cc:28:cf:ce:75:1a:bc:b2:a5:54:3f:6c:c9:
39:63:d6:41:0c:1a:28:b1:59:a7:a8:29:f7:2c:e0:
68:b4:3e:66:6d:3a:5a:60:1b:1e:7c:f4:1a:d3:3d:
1b:0d:37:26:2e:c5:d6:cb:cb:f5:20:4f:d8:9d:bf:
2e:c5:03:8c:41:2a:76:62:39:8a:cb:8a:b5:b8:71:
04:0a:5a:d0:f2:be:3b:0b:19:fc:cf:07:48:65:6c:
ab:4d:41:c2:16:9a:ab:fb:cc:70:30:b6:92:b7:16:
c1:62:fd:ee:d3:62:66:a2:d2:de:59:19:fb:df:4a:
67:ef:4c:60:d9:25:20:ea:b7:d3:db:f7:ab:d3:b6:
f5:2f:d5:0b:25:f1:d4:20:11:c6:9e:b6:48:e4:ff:
9f:51:1f:a7:9f:ca:d0:d2:35:ea:ce:84:a1:1a:f0:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:6D:77:35:3E:E4:65:A1:6B:D0:80:E3:31:C4:EA:E6:E4:9F:3F
X509v3 Authority Key Identifier:
keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:60:45:78:ce:b0:e8:03:7c:74:72:76:c1:8e:11:d7:31:b7:
62:71:9d:55:b7:7b:70:dc:a1:46:25:79:79:e1:6e:66:dd:a5:
93:78:c9:07:78:9e:95:fe:6a:1b:f1:2a:55:49:7d:44:07:82:
7e:3a:ae:5d:7a:c1:ce:b0:80:77:f2:40:c8:1b:f5:fb:68:b7:
02:ed:85:fa:f8:8d:00:2a:6b:95:bf:0c:67:56:9f:b5:0e:c0:
b6:53:06:c5:fc:bb:27:c6:31:c4:df:ba:48:b6:68:cb:b6:ad:
1b:f2:f2:7e:01:b7:60:76:cb:37:81:37:a9:07:99:96:6a:26:
aa:2b:d1:45:a7:2e:f4:86:fe:82:c1:25:2d:ee:60:36:71:32:
63:d0:61:12:13:b6:e8:bd:db:94:88:ca:8f:3f:c6:d7:3c:61:
56:9b:89:79:6e:fc:d0:07:e6:34:d7:c2:aa:fc:7a:bc:60:04:
e5:56:43:c3:ed:05:09:b4:05:f5:9f:56:0f:00:8b:b7:15:0f:
c1:02:1c:93:46:d3:bb:e9:58:03:2b:ae:c3:2a:10:94:bd:bf:
81:79:7d:4f:ca:87:85:99:b2:ac:59:d5:5a:4c:1a:06:4f:93:
f8:62:b4:34:32:52:85:67:09:50:7d:66:51:c4:7e:d3:c1:b0:
89:12:be:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:21 2026 by rpki-client