
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json)
Hash identifier: vo7+/O54EDvz8qU+WKsE29l1R7CW8YrlKzrF6pwOq9Y=
Subject key identifier: A4:FE:82:88:A3:3A:0F:B4:5E:52:5C:CD:D3:23:74:14:F3:1D:7B:3E
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
Manifest number: 01C1
Signing time: Sun 11 Oct 2026 04:30:30 +0000
Manifest this update: Sun 11 Oct 2026 04:30:29 +0000
Manifest next update: Sun 18 Oct 2026 04:30:29 +0000
Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: 2oN6khxMIfDPZ7haUT3aUmdim1s9mqfGHDcFVPZybrQ=)
2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=)
3: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=)
4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=)
5: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=)
6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 04:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Validity
Not Before: Oct 11 04:30:29 2026 GMT
Not After : Oct 18 04:30:29 2026 GMT
Subject: CN=6acb10e5-0816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:c5:cf:30:dc:fb:d1:56:d9:8b:0c:81:a6:
82:c4:43:97:91:fa:4a:d8:48:ee:79:8f:bf:63:e3:
88:21:3c:09:5b:bf:08:43:06:a5:1f:16:2c:52:93:
b0:6f:e4:ad:94:62:eb:16:d4:61:82:ba:d6:f2:2f:
14:81:b2:30:40:ce:aa:47:54:40:64:58:8d:6c:be:
1f:1b:66:d7:2e:26:19:3f:e6:f9:35:bf:73:7b:ba:
a9:b5:3b:6f:10:51:bc:e5:2a:09:a2:40:2e:30:16:
8f:69:ac:72:58:47:db:5a:6d:ab:44:f0:d2:f2:16:
c9:8c:ff:ce:6f:8c:26:ab:db:d0:1a:b7:8e:b5:84:
27:c1:d2:a7:38:bb:c6:24:43:2b:f7:f6:fa:96:0e:
b5:c5:7c:dc:79:c6:8c:bd:09:2d:9a:a3:0d:da:e6:
ce:d0:a1:6c:63:04:51:58:44:b2:34:36:44:a4:18:
57:3c:fe:39:27:90:d8:80:0c:d2:85:5b:75:e9:ce:
d5:34:bb:6c:d1:2e:50:28:93:6f:b9:18:b3:81:16:
51:18:47:30:c5:54:81:41:50:46:66:1a:f0:32:b1:
26:d3:e1:bb:b9:55:c4:85:96:25:a9:ce:0d:b7:96:
4f:93:3e:52:2b:29:ef:0a:8c:6e:b4:30:9f:2d:36:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:82:88:A3:3A:0F:B4:5E:52:5C:CD:D3:23:74:14:F3:1D:7B:3E
X509v3 Authority Key Identifier:
keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9d:81:e9:7e:08:a8:72:5c:3e:65:f9:89:f4:88:87:4a:98:
ad:85:b6:f3:2d:eb:6f:ee:0e:2e:64:c9:8c:d5:12:f1:90:a6:
af:46:26:5f:3b:02:cf:c8:fa:a4:f5:35:90:10:86:cb:49:e7:
dc:22:b6:27:15:c5:c1:8c:ae:c1:17:04:fb:b9:93:13:24:4a:
e0:ed:cc:25:60:5c:a9:c1:c4:af:67:6e:9a:9c:0f:da:a3:08:
a8:a4:cb:a7:26:e5:f1:64:2d:87:d2:ca:97:37:c1:32:8e:46:
f0:2a:c1:b9:96:58:bb:ee:46:31:4a:b6:2d:fc:2b:f7:55:b4:
b3:01:d6:3c:12:8e:9c:d7:9b:14:06:68:53:7b:ee:ca:e2:73:
d1:a0:cd:44:ed:fa:77:34:c5:fe:8e:d1:bb:e4:22:85:a7:21:
b7:51:4f:03:44:52:cf:38:f6:42:04:58:fa:60:3d:b6:45:59:
b7:ed:5f:e8:8e:76:d1:aa:56:3a:01:10:e3:b1:e5:c2:59:a5:
de:24:d2:f6:1b:cb:1c:af:b8:f5:f5:94:27:c7:08:08:b2:72:
19:ba:ea:55:58:04:4c:e7:cb:c7:73:bd:3d:3e:5e:7c:41:9e:
6f:dd:75:28:00:c3:47:39:1e:e6:84:3c:84:00:ea:d1:e4:e4:
ce:a7:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:13:13 2026 by rpki-client