
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json)
Hash identifier: v4OCLLP3T8mqX/L3R0JJwupskpAfXXqiyRRRZqfFFOQ=
Subject key identifier: BF:F2:7D:82:25:07:01:41:12:CE:AB:03:2D:73:16:05:09:FC:6F:44
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0C0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
Manifest number: 0B9B
Signing time: Wed 22 Jul 2026 19:33:30 +0000
Manifest this update: Wed 22 Jul 2026 19:33:30 +0000
Manifest next update: Wed 29 Jul 2026 19:33:30 +0000
Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: UmQIgpckIyc3qv1Gvgi6w8FOgQtobrSQ6l+F64bhYrA=)
2: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: LqR/UZmLsp/hlnh1P02a45elMJow2MTJH9+YtGc5TI4=)
3: 58F54538023A11F1A52751391D3D8C67.roa (hash: z1uio79TPLowMm0kT18AE7ic1OAaktv6my41QeEIQto=)
4: 079C6D54703211F1A5EE34BC61A30FBC.roa (hash: oT+skzbgfh9rpO8i9roBNtS46eHc++RkuX0gdcEUlLY=)
5: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: HJaToLePFZB89VkW0fGyPEdHzI89CWSnjN5awLA7vSM=)
6: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: 7v6uelL8OrL55pjxxbIx0xi/kAw0shUB/buk6IIa7mg=)
7: 3061606C730211EE89A20645C4F9AE02.roa (hash: 4rsroTZmZtOVvq2pXVxJ9+vhXeo2GaYkFSNbtr0ft6c=)
8: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: 95Cvg2zwZcw/BgeOc0WgBXkq0e8152XDILO2/aK+H3M=)
9: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ppMV4z82z5NW891AK5M12LBj8EGTNLyucBG3JsaVDho=)
10: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 4abL4xIYGxaDwtZ2SH2+5ZKmO1Ys5r+LEPIwldIA334=)
11: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: 2L0qmPJWlSuztHyt83Ndq4Mfp9otdvrdJcHOMZF+P2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Jul 22 19:33:30 2026 GMT
Not After : Jul 29 19:33:30 2026 GMT
Subject: CN=6a611b0a-3309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:bf:21:01:fc:26:66:4d:57:83:5d:ba:da:
43:b5:ee:29:1d:1f:7e:23:ff:8a:d2:87:07:84:09:
3f:3a:00:93:a6:72:63:15:b2:1d:35:cd:4e:a8:aa:
69:3d:5f:a8:7a:43:92:3e:46:83:70:e9:72:19:a0:
db:ec:db:40:64:7e:97:c2:9b:ab:72:64:36:c9:18:
91:65:2e:46:61:d0:db:e0:c3:e0:a5:4c:f9:7d:bc:
b0:54:c6:62:93:e0:f7:c5:77:bb:a8:19:d0:ee:36:
12:7b:11:6d:ea:87:1e:74:27:e2:4f:1a:f9:61:e4:
a2:99:82:78:ae:5b:a2:5a:2d:f8:60:97:7a:b1:80:
52:55:26:14:1a:95:44:4f:a4:d7:db:9c:15:69:74:
70:39:54:60:86:3e:b7:73:b0:2a:4f:7e:f4:7a:af:
d4:27:3d:c1:26:4f:d6:6e:55:aa:a5:5f:c8:4a:06:
37:df:3a:60:d9:91:9b:41:90:37:7e:b0:6b:0a:00:
19:69:15:74:80:5c:8a:92:25:38:e0:12:71:8c:e6:
cc:2f:30:03:24:1b:c9:ac:9c:3c:14:65:c3:25:c6:
c1:c6:2f:33:07:fe:66:a5:bd:5e:0f:de:b2:52:45:
7e:67:d3:77:db:cf:f1:31:45:bf:ab:c9:3d:f7:18:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:7D:82:25:07:01:41:12:CE:AB:03:2D:73:16:05:09:FC:6F:44
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8e:0e:98:34:35:07:d2:04:df:0c:c6:2c:f5:9d:80:8c:84:
42:3d:4e:65:89:d5:43:43:ce:99:7e:fa:43:61:be:bd:38:20:
a9:6f:17:16:00:5e:cf:71:d7:45:9a:dd:de:a6:06:2e:4b:4e:
78:a8:16:8e:c4:7d:28:23:fc:bc:4c:ec:3c:11:10:39:a1:56:
29:54:33:35:59:20:68:a8:73:f5:8a:9c:83:c7:8e:f5:9a:cc:
9e:a1:66:e8:87:d4:b7:3b:c1:00:dc:5d:03:60:15:4b:bf:c5:
2b:e5:82:b7:c8:49:e4:16:81:10:88:67:15:8e:ed:4c:c6:f1:
3d:3b:30:db:45:b5:20:38:f3:07:d0:84:90:d7:a2:26:00:3f:
57:f3:d2:9e:be:b9:bb:26:0f:63:1a:f6:cc:a2:d1:e0:30:b6:
f0:f2:65:4d:27:f6:96:39:ae:f9:56:7a:10:76:53:58:cf:cd:
1c:92:3e:5c:51:c7:87:e2:ed:86:c4:da:11:40:29:d1:09:48:
87:25:09:fe:c4:5f:78:4c:c2:37:72:d4:06:60:e9:bf:36:5a:
58:af:78:ec:b4:38:c2:d3:03:1c:ff:3d:45:eb:f9:9f:14:a5:
81:6c:bc:ca:fa:3d:ae:ce:c5:8c:84:7f:64:40:70:54:ce:aa:
b0:62:bd:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx
MEYzMEQ2MTgwHhcNMjYwNzIyMTkzMzMwWhcNMjYwNzI5MTkzMzMwWjAYMRYwFAYD
VQQDEw02YTYxMWIwYS0zMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnc2/IQH8JmZNV4NdutpDte4pHR9+I/+K0ocHhAk/OgCTpnJjFbIdNc1OqKpp
PV+oekOSPkaDcOlyGaDb7NtAZH6XwpurcmQ2yRiRZS5GYdDb4MPgpUz5fbywVMZi
k+D3xXe7qBnQ7jYSexFt6ocedCfiTxr5YeSimYJ4rluiWi34YJd6sYBSVSYUGpVE
T6TX25wVaXRwOVRghj63c7AqT370eq/UJz3BJk/WblWqpV/ISgY33zpg2ZGbQZA3
frBrCgAZaRV0gFyKkiU44BJxjObMLzADJBvJrJw8FGXDJcbBxi8zB/5mpb1eD96y
UkV+Z9N328/xMUW/q8k99xhLxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/yfYIl
BwFBEs6rAy1zFgUJ/G9EMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF
QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq
cmNQMGxtT2E3ZnNROHcxaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASo4OmDQ1B9IE3wzGLPWdgIyEQj1OZYnVQ0POmX76Q2G+vTggqW8XFgBez3HX
RZrd3qYGLktOeKgWjsR9KCP8vEzsPBEQOaFWKVQzNVkgaKhz9Yqcg8eO9ZrMnqFm
6IfUtzvBANxdA2AVS7/FK+WCt8hJ5BaBEIhnFY7tTMbxPTsw20W1IDjzB9CEkNei
JgA/V/PSnr65uyYPYxr2zKLR4DC28PJlTSf2ljmu+VZ6EHZTWM/NHJI+XFHHh+Lt
hsTaEUAp0QlIhyUJ/sRfeEzCN3LUBmDpvzZaWK947LQ4wtMDHP89Rev5nxSlgWy8
yvo9rs7FjIR/ZEBwVM6qsGK9Rw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:06 2026 by rpki-client