
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json)
Hash identifier: bztCIelQ6IQJyTp1jvb4qPVoF04vfQ2oean2gFFd9I8=
Subject key identifier: 09:50:FB:2E:C5:54:C0:48:7E:6A:45:7F:68:0C:EE:E7:85:61:1C:7A
Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Certificate serial: 066A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
Manifest number: 065C
Signing time: Sun 26 Jul 2026 23:29:25 +0000
Manifest this update: Sun 26 Jul 2026 23:29:24 +0000
Manifest next update: Sun 02 Aug 2026 23:29:24 +0000
Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: 28/RfpvYk4vYaCiTGYNHKlF6sxC78NzdR7MsYvcq/ls=)
2: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: wpTOnbFzHuZykJ8pDXVXmzxxqZkD4nI9a0iplVk0s2M=)
3: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: cye1hIVFGwa2LCmeYD2ib4pZaHJ8xh8Jr5cItjYasmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Validity
Not Before: Jul 26 23:29:24 2026 GMT
Not After : Aug 2 23:29:24 2026 GMT
Subject: CN=6a669854-47d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:9e:77:e3:9a:56:2f:d9:85:89:94:4a:9e:
d2:1d:91:0e:db:ba:a6:d7:d9:f2:9f:5e:fc:ae:8c:
c4:c0:71:ad:2d:60:70:43:92:0a:b3:eb:e5:fc:a5:
ca:75:5c:32:48:67:42:0f:a2:b6:8c:f4:1b:4d:9b:
0b:0b:d2:43:6f:be:dd:72:01:d5:72:24:c7:ea:94:
23:6c:55:59:5e:08:9f:eb:34:42:2a:01:77:85:06:
a3:3f:cf:08:f6:82:99:aa:96:b0:17:e3:69:73:a7:
9a:1b:a5:09:ea:e2:e0:c3:dc:9a:fa:f1:5e:a5:3c:
8c:e9:e4:ee:55:55:bf:e8:bd:56:ad:a4:12:a9:59:
29:c9:54:01:fb:eb:b7:e8:f0:b6:ce:30:ca:06:6e:
dd:2c:e2:02:67:b5:d7:03:96:40:73:18:87:02:9a:
8a:7a:86:25:15:ce:f0:94:cb:a4:f1:16:5a:09:5c:
6f:b5:2a:bc:1b:e1:c0:7a:ab:cb:16:5f:61:36:11:
37:a3:88:8b:05:d7:ba:a2:e2:b8:fd:11:97:93:a5:
07:de:b0:dc:6f:95:57:7b:26:5e:3f:d3:76:a9:de:
13:4f:1e:41:30:a1:6e:d9:32:39:2a:3a:d6:31:89:
f0:58:28:ce:c8:a3:a1:4b:0d:c8:28:0b:2f:fb:ce:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:50:FB:2E:C5:54:C0:48:7E:6A:45:7F:68:0C:EE:E7:85:61:1C:7A
X509v3 Authority Key Identifier:
keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:ed:3d:cb:84:54:65:52:ca:e6:3b:eb:41:bc:58:2e:14:42:
28:ab:29:27:14:b4:4f:22:75:40:59:a6:d7:bc:97:7e:2c:39:
d6:8b:5f:fd:b9:ad:98:02:21:3a:f3:ef:75:a8:d1:e0:0b:5e:
24:a9:72:ac:64:e2:ec:a7:a5:7f:aa:01:97:a6:bb:da:5f:22:
aa:10:26:77:d2:a3:e1:36:75:03:8c:1f:2c:a6:eb:7a:7c:29:
4d:a9:76:68:47:7a:8c:e6:00:b2:31:87:c1:59:f3:bb:88:c1:
05:74:84:86:7c:fb:41:8b:35:d8:8a:14:d6:ee:6f:4f:71:a7:
a5:c9:7d:58:c5:bf:8f:90:31:a9:6f:b5:3f:4c:c1:1f:76:12:
2b:20:79:21:39:e7:f8:cb:de:33:ca:60:2e:7a:23:fd:93:9e:
e3:4b:06:eb:48:55:31:80:15:c8:29:b6:8f:66:00:10:19:92:
ab:df:5e:39:1e:ae:a6:1c:fd:76:c7:dc:a6:73:50:19:43:a8:
b2:6a:d4:a2:56:e2:3b:5a:6c:69:65:32:37:c8:cf:d2:4b:ba:
23:17:cb:aa:92:36:12:f3:2b:e1:df:e8:a2:36:30:72:31:04:
61:bf:83:3b:57:1d:88:cd:60:f0:04:db:45:ab:cb:5b:69:d7:
46:2b:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:43 2026 by rpki-client