
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File: Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier: OEWEd9jCWRLzuoap8r4FesjaNVdEC15zs8BYcp5mzsk=
Subject key identifier: 32:00:36:7D:55:5F:2C:AA:46:02:55:51:79:75:61:38:EA:2A:45:BC
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number: 0105
Signing time: Thu 23 Jul 2026 07:59:10 +0000
Manifest this update: Thu 23 Jul 2026 07:59:10 +0000
Manifest next update: Thu 30 Jul 2026 07:59:10 +0000
Files and hashes: 1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: QSDn+8KJG+tNntO7hITbSeOm64co0398kLaGGEGOx5I=)
2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: 9d80apncQwaKTAG06R4mIWLTbRCpdrLELAUO00snQkE=)
3: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (hash: +YeqTwufzvgzhnkt/mIw5JG1iBbYnBY3vNzMAfLJODo=)
4: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: aLK8sAzxMSPrhRCMqldgKmzdDH1pIToEHi3LcYvbeYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Validity
Not Before: Jul 23 07:59:10 2026 GMT
Not After : Jul 30 07:59:10 2026 GMT
Subject: CN=6a61c9ce-35c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:21:79:23:19:31:c4:2f:8c:22:d1:f7:4f:fa:
0c:b3:88:2f:23:5e:99:07:0d:6f:ce:2b:29:57:1f:
56:2d:35:5d:a5:b2:0e:85:83:33:de:02:1c:da:54:
40:fa:fe:9d:f3:aa:6b:7d:45:56:c2:1c:ae:ba:e4:
c9:bc:56:37:b0:94:b6:1d:f6:39:16:ce:d2:3c:e7:
9f:7b:31:23:9e:d0:36:e0:d6:92:39:b4:db:8b:07:
27:4e:32:c2:f5:91:30:c0:6b:ad:a8:eb:fe:86:f2:
d4:01:d4:35:a0:85:27:17:a9:49:17:b3:3b:58:c1:
a3:2c:6b:ae:98:13:95:a8:93:43:1f:b9:1a:30:c6:
87:d1:09:70:89:de:a9:a6:e8:8b:8a:f1:24:ea:63:
52:75:72:97:0b:d2:81:4c:45:42:93:94:33:9b:3d:
ca:d4:b4:2c:ec:d6:b1:24:ea:e3:11:d8:b2:19:ed:
49:bf:2b:d4:ed:73:c5:c0:1c:8f:c4:dc:5c:a0:fe:
d9:50:84:7b:e4:10:c3:21:8b:6c:c5:95:c3:27:ec:
1e:c7:6e:0b:9c:11:dd:cf:ec:be:a0:06:b5:f4:cc:
e2:b8:f8:f9:b4:24:35:3e:c8:e6:87:c0:c2:1e:2f:
6d:64:85:42:d2:4f:dd:4a:48:28:97:14:98:b6:52:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:36:7D:55:5F:2C:AA:46:02:55:51:79:75:61:38:EA:2A:45:BC
X509v3 Authority Key Identifier:
keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:07:93:53:2c:e1:1c:93:95:35:86:d2:6d:1c:9c:ca:a6:26:
dd:20:77:a4:d7:93:53:e2:3f:a8:2c:ba:32:74:c1:73:61:5a:
8b:cf:14:f8:02:ce:c0:aa:d2:03:6c:9c:54:13:d6:9e:fd:a2:
bf:dc:43:e8:4a:9f:0a:be:fc:75:48:fa:48:b7:b6:1c:42:d5:
2e:c2:cd:86:e9:bc:b9:7d:2c:17:d5:26:af:a5:7d:c5:45:f5:
be:62:5c:75:b4:8e:f2:5b:e8:bd:89:20:7d:ff:c1:24:77:fa:
55:ec:a1:eb:a6:9a:cd:0b:0f:7b:53:b5:a6:d8:be:75:70:9e:
e3:ee:01:35:fa:1b:57:b8:d7:52:13:5d:e3:24:cd:ba:d0:0d:
60:58:25:b1:ae:68:ad:18:f2:f7:dd:f2:d1:d3:d1:eb:6d:c0:
6c:52:e5:64:9b:61:dc:57:2b:6d:ef:02:ee:8c:b2:63:9e:66:
79:3f:77:bf:db:db:f6:eb:9f:8c:dc:2a:e4:c5:c4:0f:ee:74:
69:25:c7:1a:45:af:c4:21:57:a6:05:38:dd:e5:c5:39:b3:68:
2f:2c:20:01:ec:2a:05:51:5b:cd:ba:41:b5:87:91:e3:09:b4:
10:a2:9d:08:6e:ae:21:d1:74:54:9c:c6:f0:dd:ac:83:37:1e:
7e:03:3d:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzdGQzkxMTAvBgNVBAUTKDA2QkQ0NDE1NDc5RDJDNzUwODM3QzVDOTQzMzYxM0JC
MjU4OEFFQjgwHhcNMjYwNzIzMDc1OTEwWhcNMjYwNzMwMDc1OTEwWjAYMRYwFAYD
VQQDEw02YTYxYzljZS0zNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6yF5IxkxxC+MItH3T/oMs4gvI16ZBw1vzispVx9WLTVdpbIOhYMz3gIc2lRA
+v6d86prfUVWwhyuuuTJvFY3sJS2HfY5Fs7SPOefezEjntA24NaSObTbiwcnTjLC
9ZEwwGutqOv+hvLUAdQ1oIUnF6lJF7M7WMGjLGuumBOVqJNDH7kaMMaH0Qlwid6p
puiLivEk6mNSdXKXC9KBTEVCk5Qzmz3K1LQs7NaxJOrjEdiyGe1JvyvU7XPFwByP
xNxcoP7ZUIR75BDDIYtsxZXDJ+wex24LnBHdz+y+oAa19MziuPj5tCQ1Psjmh8DC
Hi9tZIVC0k/dSkgolxSYtlKnnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIANn1V
XyyqRgJVUXl1YTjqKkW8MB8GA1UdIwQYMBaAFAa9RBVHnSx1CDfFyUM2E7sliK64
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0ZDOS9GM0NCRjU1MDA3
NTExMUYwODE4QTU0MzNDNEY5QUUwMi9CcjFFRlVlZExIVUlOOFhKUXpZVHV5V0ly
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JyMUVGVWVkTEhVSU44WEpRellUdXlXSXJyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0ZDOS9GM0NCRjU1MDA3NTExMUYwODE4QTU0MzNDNEY5QUUwMi9CcjFFRlVlZExI
VUlOOFhKUXpZVHV5V0lycmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjQeTUyzhHJOVNYbSbRycyqYm3SB3pNeTU+I/qCy6MnTBc2Fai88U+ALOwKrS
A2ycVBPWnv2iv9xD6EqfCr78dUj6SLe2HELVLsLNhum8uX0sF9Umr6V9xUX1vmJc
dbSO8lvovYkgff/BJHf6Veyh66aazQsPe1O1pti+dXCe4+4BNfobV7jXUhNd4yTN
utANYFglsa5orRjy993y0dPR623AbFLlZJth3Fcrbe8C7oyyY55meT93v9vb9uuf
jNwq5MXED+50aSXHGkWvxCFXpgU43eXFObNoLywgAewqBVFbzbpBtYeR4wm0EKKd
CG6uIdF0VJzG8N2sgzcefgM9Xw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:40 2026 by rpki-client