
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
File: BoQptByg8Segp10v_LJsA6lfYHE.mft (raw, json)
Hash identifier: VZdHoc8Xbh5KBUV3otekZjmLUvyBLvIeQzhQjCDBTx4=
Subject key identifier: FB:DE:95:B4:64:22:98:E5:CF:F0:29:2F:DA:2D:02:E3:BD:93:27:23
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Certificate issuer: /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
Manifest number: 90
Signing time: Mon 21 Sep 2026 07:31:56 +0000
Manifest this update: Mon 21 Sep 2026 07:31:56 +0000
Manifest next update: Mon 28 Sep 2026 07:31:56 +0000
Files and hashes: 1: BoQptByg8Segp10v_LJsA6lfYHE.crl (hash: y6KvYhpNBXm/5XyyaHmdE0l/kMmnIrGwFjGos3ADgAA=)
2: BE1ACA36DD7911F088A95D31386F56BC.roa (hash: wFVA3jy/rKVpvXwLeuTYWtSknure16Z8S/vPIwlvU8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Validity
Not Before: Sep 21 07:31:56 2026 GMT
Not After : Sep 28 07:31:56 2026 GMT
Subject: CN=6ab0dd6c-fd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:ec:6e:f9:d7:67:75:4a:d8:0a:4d:26:6c:
40:cd:a4:b0:57:9d:9c:6d:ea:22:93:1d:29:c3:e2:
ba:08:0a:a9:e1:6b:29:86:29:f8:a5:27:c1:4f:4c:
43:cb:a1:61:a0:26:93:b3:78:1d:16:5d:a3:b0:a9:
9d:25:84:77:a6:fb:e6:79:8f:37:a4:aa:7f:5e:dc:
28:ee:cc:62:d5:3c:a1:87:de:b4:77:04:35:2e:44:
b7:1f:65:e1:70:35:52:70:c3:42:81:c1:0a:91:78:
ef:fb:85:e9:09:41:59:78:fe:9e:61:56:0b:3d:8e:
07:c3:a2:ab:fc:b8:fd:f0:12:0b:d3:8d:ba:41:c4:
2e:2c:57:2f:03:f5:da:8b:b5:17:5a:b8:43:8d:89:
0d:da:2d:ce:50:0c:b6:9d:e5:31:9e:ba:b1:ff:d7:
44:1b:cb:63:e7:16:54:82:af:83:82:02:43:72:c8:
22:f9:12:f7:13:ce:7f:c0:c9:ba:88:b1:3e:db:6f:
c5:f0:7d:42:a9:f6:26:c6:78:46:03:1e:e9:8a:3e:
34:43:00:9d:57:25:11:71:79:b9:3c:7f:86:e1:cd:
a5:76:17:f6:d8:84:84:09:3f:89:a4:54:6f:27:e9:
3e:fe:87:14:76:2f:0f:c0:b1:04:05:92:40:ee:d9:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:95:B4:64:22:98:E5:CF:F0:29:2F:DA:2D:02:E3:BD:93:27:23
X509v3 Authority Key Identifier:
keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:7f:8a:57:bb:88:cf:10:f0:91:09:bf:b3:eb:a1:76:51:
b5:d9:b3:d3:37:91:55:e4:c3:de:d4:58:41:90:e3:98:c5:67:
7e:80:bf:18:a2:e3:af:28:11:35:f9:27:05:61:ea:c8:63:f8:
a5:02:4d:35:c8:ae:94:c3:a1:c2:5b:33:46:b8:41:6d:3e:ce:
8c:12:bb:73:2a:5f:2f:21:99:d0:cd:87:10:ae:04:9f:95:40:
aa:be:6d:f2:4f:bf:9e:47:7b:e6:92:65:79:3a:83:85:5b:dc:
e5:cd:e5:81:2f:c1:47:77:d2:7a:62:0e:be:0b:4f:5c:76:a2:
dc:39:9e:12:35:1f:5b:be:1f:67:87:2f:7b:46:b3:e6:ef:41:
a7:af:af:70:97:92:42:fc:f7:3d:47:cd:20:44:70:18:7c:65:
82:fe:38:fc:20:88:5d:6c:75:fe:96:2b:9c:47:6c:ad:5f:7f:
02:ce:84:62:89:e8:65:e6:ce:a9:48:2f:b9:5c:59:0b:b1:4e:
ee:6d:60:92:2b:2c:0f:45:c0:3d:60:2f:83:a9:6c:dd:46:e2:
13:a5:a1:ca:7d:78:dc:ff:fe:b0:d7:10:7f:83:be:80:a5:4c:
cb:b2:be:b8:35:11:f6:e7:25:c0:bf:84:c2:04:0d:9b:fa:ff:
08:6e:fc:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NBQkIxMTAvBgNVBAUTKDA2ODQyOUI0MUNBMEYxMjdBMEE3NUQyRkZDQjI2QzAz
QTk1RjYwNzEwHhcNMjYwOTIxMDczMTU2WhcNMjYwOTI4MDczMTU2WjAYMRYwFAYD
VQQDEw02YWIwZGQ2Yy1mZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mXsbvnXZ3VK2ApNJmxAzaSwV52cbeoikx0pw+K6CAqp4Wsphin4pSfBT0xD
y6FhoCaTs3gdFl2jsKmdJYR3pvvmeY83pKp/Xtwo7sxi1Tyhh960dwQ1LkS3H2Xh
cDVScMNCgcEKkXjv+4XpCUFZeP6eYVYLPY4Hw6Kr/Lj98BIL0426QcQuLFcvA/Xa
i7UXWrhDjYkN2i3OUAy2neUxnrqx/9dEG8tj5xZUgq+DggJDcsgi+RL3E85/wMm6
iLE+22/F8H1CqfYmxnhGAx7pij40QwCdVyURcXm5PH+G4c2ldhf22ISECT+JpFRv
J+k+/ocUdi8PwLEEBZJA7tlWcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvelbRk
Ipjlz/ApL9otAuO9kycjMB8GA1UdIwQYMBaAFAaEKbQcoPEnoKddL/yybAOpX2Bx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FCQi80MDNCMEQ4RURE
NzgxMUYwQTU4NkIxMjgzODZGNTZCQy9Cb1FwdEJ5ZzhTZWdwMTB2X0xKc0E2bGZZ
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JvUXB0QnlnOFNlZ3AxMHZfTEpzQTZsZllIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0FCQi80MDNCMEQ4RURENzgxMUYwQTU4NkIxMjgzODZGNTZCQy9Cb1FwdEJ5ZzhT
ZWdwMTB2X0xKc0E2bGZZSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVtd/ile7iM8Q8JEJv7ProXZRtdmz0zeRVeTD3tRYQZDjmMVnfoC/GKLjrygR
NfknBWHqyGP4pQJNNciulMOhwlszRrhBbT7OjBK7cypfLyGZ0M2HEK4En5VAqr5t
8k+/nkd75pJleTqDhVvc5c3lgS/BR3fSemIOvgtPXHai3DmeEjUfW74fZ4cve0az
5u9Bp6+vcJeSQvz3PUfNIERwGHxlgv44/CCIXWx1/pYrnEdsrV9/As6EYonoZebO
qUgvuVxZC7FO7m1gkissD0XAPWAvg6ls3UbiE6Whyn143P/+sNcQf4O+gKVMy7K+
uDUR9uclwL+EwgQNm/r/CG78sw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:31:28 2026 by rpki-client