
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier: SVsuO3Qy3CpZUo0UFyc2hOGdhlslxw9w4G6Q4Y2kt/w=
Subject key identifier: F2:5A:9D:75:BE:D6:41:FC:81:5E:D4:A9:71:89:F4:02:62:8C:29:8B
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number: 045C
Signing time: Fri 17 Apr 2026 00:06:42 +0000
Manifest this update: Fri 17 Apr 2026 00:06:41 +0000
Manifest next update: Fri 24 Apr 2026 00:06:41 +0000
Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: HHcvpMvGBv1OGFXBSBOvuK3cTS0rMzssABslylcktcs=)
2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: eYryKgNZm2qZqdFNNTLzTj59Jc409yodEwjuUOxXoJY=)
3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: glYctxlo8gx3BenqS2wSFdBXN3gLXFdiT5hyE/Vu8Ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Validity
Not Before: Apr 17 00:06:41 2026 GMT
Not After : Apr 24 00:06:41 2026 GMT
Subject: CN=69e17992-a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:11:ba:10:e9:1d:39:eb:71:a6:d3:c5:6e:
de:53:a9:08:3e:b9:80:ce:1b:d9:64:53:0b:7c:34:
2d:24:00:0f:00:af:40:da:42:9e:64:bb:e2:0f:59:
3d:3d:34:5f:5a:00:d4:f9:5a:1f:89:53:ed:11:29:
a3:c1:6d:68:bb:69:8f:c5:f2:59:fa:64:f8:39:71:
4a:21:a1:71:7d:73:dc:35:83:5f:5b:0d:8c:41:d7:
9b:57:28:d1:80:78:16:37:d2:37:c9:c0:e0:2c:e1:
3f:6a:ea:4a:17:37:f7:3e:1f:16:3e:29:42:7b:c2:
90:57:2e:5a:40:3b:8c:f6:8f:f8:44:ff:8b:cd:3e:
c0:8e:5e:a7:36:dd:6a:c4:cd:6d:19:49:cd:bf:a3:
f5:82:ad:1f:38:ac:88:e6:a3:85:4f:4b:46:15:3b:
8f:d0:f4:a9:fe:8a:65:1a:77:fb:c1:b6:ce:6a:a5:
6d:b6:ea:09:1f:44:4e:fc:46:af:e3:98:00:45:aa:
eb:ca:c2:4f:59:da:56:7e:61:d8:61:c7:07:09:6a:
d4:29:38:d6:0e:12:e7:27:0f:6b:2e:3f:e3:a4:9d:
1f:b3:63:f5:26:3a:41:9f:b8:1b:49:f9:23:10:90:
0e:1a:29:bf:10:32:bb:d4:e2:09:fe:7e:c3:49:04:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:9D:75:BE:D6:41:FC:81:5E:D4:A9:71:89:F4:02:62:8C:29:8B
X509v3 Authority Key Identifier:
keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:cb:45:e5:a7:68:0b:15:e9:f0:d1:e9:ee:c8:95:1b:a8:c6:
f9:98:99:01:d1:17:ab:c5:ba:0c:c9:88:bd:f7:21:99:e0:58:
7c:60:4a:3f:71:10:79:1d:1f:39:f9:2d:a2:b9:ac:3b:6c:e9:
9f:30:7a:3f:56:43:9d:12:08:b8:d4:db:af:c1:c5:a9:77:34:
f8:d7:b4:cc:0a:3e:7f:c5:f7:f2:4d:11:d5:0d:04:b5:33:83:
3a:00:f8:c8:2e:c6:ee:20:c9:d1:8f:fb:15:22:2d:6c:9e:ac:
ec:9b:2a:4f:9c:4d:ed:e0:33:ce:17:3b:57:a0:50:91:40:31:
3a:9d:a0:a2:e8:23:6e:01:de:0c:29:2a:49:1f:2a:ce:26:14:
b1:dd:80:60:a6:b4:49:c7:96:b2:d8:2a:f7:8c:6e:65:a9:c1:
1b:17:fc:0c:a6:2e:91:73:5f:17:1c:0a:ff:89:9e:6a:42:bc:
ec:97:c0:98:06:95:12:10:0b:8c:08:ec:3a:e7:76:d6:37:8b:
e4:68:28:5f:18:01:8d:56:4a:c3:f7:9a:e8:d9:75:c9:93:e5:
df:c1:86:72:26:b8:d3:2f:9c:b4:04:ed:76:ca:82:a0:fc:19:
9d:f0:c3:95:41:b9:ec:ed:c9:19:60:62:61:df:58:17:25:e5:
d7:48:a8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:29 2026 by rpki-client