
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json)
Hash identifier: pLL1sEbvsq4QvPkYwT40Kil+n1vkGLJFOqGI3mUvzt0=
Subject key identifier: B2:4E:5D:55:D8:1D:EE:8A:B5:56:B3:83:99:F3:B8:CA:FE:BD:BA:3F
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
Manifest number: 019B
Signing time: Wed 29 Jul 2026 05:35:10 +0000
Manifest this update: Wed 29 Jul 2026 05:35:09 +0000
Manifest next update: Wed 05 Aug 2026 05:35:09 +0000
Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: 7YCZXtYQauekgmh0LzZutax8VorpRHB7OUxgzxcImCE=)
2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: zltU8OcTZDfiWXBOFopyM3AO0sTIvw5AHEm2VUlwxJ4=)
3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: fL06yPgS4ezfu1VXXB/XpGyrfEEpJ9h4DvKzlAVF6mk=)
4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: P93YtTccsAUlmOKKwCTve3DkmGjypKrwoRohv9QxCJY=)
5: A074721624CA11EF93486579C4F9AE02.roa (hash: 0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=)
6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: N3CKgL8VR5J+j4MjNsAzL57u7qAZEWn7fL43mg778lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Validity
Not Before: Jul 29 05:35:09 2026 GMT
Not After : Aug 5 05:35:09 2026 GMT
Subject: CN=6a69910e-57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:f4:3d:58:f8:31:b0:5c:56:57:cb:03:a9:
f8:0a:2f:3f:2b:fc:30:9c:e2:05:94:18:de:5c:14:
39:29:fb:70:d6:c1:af:33:19:64:42:38:08:ae:53:
14:4c:97:99:a9:44:ad:82:c3:62:d5:1f:57:b0:7f:
a2:aa:5a:65:57:97:fa:22:d6:a4:d7:b0:a6:ef:f4:
41:70:35:f9:34:17:83:f8:72:fc:d8:fa:1d:d5:fe:
63:45:62:e8:0d:d0:11:97:3e:61:c7:83:e2:d5:6a:
ec:cb:02:cc:f4:9d:25:8e:5e:d2:84:4b:f2:89:65:
53:da:3e:4c:fc:20:8d:da:b8:77:cc:08:c9:b2:c8:
f6:3c:87:87:49:fa:8d:e8:87:de:d3:20:fd:9d:f1:
34:00:8e:5b:a1:a8:03:9a:43:cf:9a:58:cd:f0:df:
d7:ee:ca:8f:f2:87:10:00:cd:07:b5:bd:fa:1c:58:
10:e2:2e:f2:f0:57:89:1a:a2:a2:e3:b6:29:31:68:
a1:42:c1:d3:f8:d0:ad:33:aa:07:1a:d8:ca:38:b9:
78:b1:07:76:da:a8:d9:14:2c:4b:1b:11:dc:83:ac:
5e:3f:cb:ab:06:b2:7e:fc:3d:3e:6f:09:a9:13:9f:
24:23:47:22:0c:cf:1a:5a:01:9e:4e:36:de:47:cd:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4E:5D:55:D8:1D:EE:8A:B5:56:B3:83:99:F3:B8:CA:FE:BD:BA:3F
X509v3 Authority Key Identifier:
keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:dd:39:c6:f4:ff:fb:22:ee:56:54:68:37:81:28:b0:53:89:
73:05:52:d0:d2:17:be:73:79:71:90:16:aa:de:6e:7b:8f:91:
f9:4a:c1:e0:b6:5e:7e:b1:29:23:34:37:5e:8a:c7:9b:2b:93:
ef:71:03:40:6d:04:e3:e2:53:3c:35:06:72:2f:81:24:38:9a:
12:75:bd:c3:76:ae:cb:45:d7:7c:9c:fc:78:10:44:ef:d8:66:
ca:24:ba:be:67:aa:6c:9a:a0:d7:45:d2:6c:25:ba:24:62:29:
85:9e:b0:2c:d8:19:6f:16:8e:10:ad:6d:bc:aa:64:f1:3e:ed:
dd:84:f0:25:e1:2b:24:46:8e:00:f3:39:f7:b3:b4:08:3f:1f:
d9:fd:ec:fb:77:bb:62:69:bc:26:23:0f:27:7a:49:86:5f:5a:
ba:8d:47:e6:f9:d9:3e:01:72:a1:e4:62:e5:69:2c:c0:1a:ac:
f0:81:12:4a:48:e4:e5:83:ab:94:ac:55:6f:71:aa:23:84:19:
bf:d5:4b:2b:d7:42:8c:c2:99:26:fa:51:0f:a8:13:e9:17:72:
c0:fa:61:96:ee:a1:8c:9e:27:d2:a8:41:27:c4:19:1d:a9:18:
6c:25:d2:55:d0:bd:ed:ef:d9:b2:a9:14:46:87:2e:d2:a7:2c:
69:62:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:49 2026 by rpki-client