
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
File: 1BrsTDljOaA55rAfaaPlmMW-Fzk.mft (raw, json)
Hash identifier: K0aEdwiq+IRriy53qbGfU7b3GT+f6jDgRY+pgmE5Sk8=
Subject key identifier: 93:32:6C:7F:95:51:C8:AD:75:A1:82:EF:17:B9:15:D5:F4:0E:EF:EB
Authority key identifier: D4:1A:EC:4C:39:63:39:A0:39:E6:B0:1F:69:A3:E5:98:C5:BE:17:39
Certificate issuer: /CN=A9188064/serialNumber=D41AEC4C396339A039E6B01F69A3E598C5BE1739
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
Manifest number: 71
Signing time: Thu 03 Sep 2026 08:11:04 +0000
Manifest this update: Thu 03 Sep 2026 08:11:03 +0000
Manifest next update: Thu 10 Sep 2026 08:11:03 +0000
Files and hashes: 1: 1BrsTDljOaA55rAfaaPlmMW-Fzk.crl (hash: +g22/tgCn+k85+bjoFDXwHIJwAU6u6svCEJuYxxB3rU=)
2: 2BD520F6024811F1A5959A751F3D8C67.roa (hash: iNAir+qYPox5pKUat5UFI5N3Ccn70BI/XmtCfWuEJ9s=)
3: 5B0FE400A02C11F1B75015C23411F970.roa (hash: FwNqITlNWhBkfMKw8aC4LJJRVvzQXsyb+T26bsuJHGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.crl
rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188064, serialNumber=D41AEC4C396339A039E6B01F69A3E598C5BE1739
Validity
Not Before: Sep 3 08:11:03 2026 GMT
Not After : Sep 10 08:11:03 2026 GMT
Subject: CN=6a992b98-5947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:6e:97:cd:c7:b0:41:d2:9a:98:12:c1:2f:
e5:5a:e8:bf:fa:f0:68:a6:06:66:d4:b0:70:86:00:
d9:e5:03:2b:9f:20:e0:05:ef:79:92:e3:c6:77:b0:
87:a5:1c:cf:d6:8c:e6:40:18:11:49:1c:e2:36:15:
13:d0:67:7b:fc:40:4f:50:59:b8:e8:ba:2a:dc:4a:
bd:db:1f:39:20:38:4b:1c:02:ed:88:3d:1c:01:e1:
7b:f2:89:55:9d:e1:89:81:38:c3:84:a6:2e:3c:15:
9a:0f:a7:d8:3e:a0:0e:c3:e6:6c:c6:49:b1:45:4a:
34:cd:b9:a5:ee:56:3e:bb:95:cb:ab:f4:b4:ca:79:
a4:a5:00:a8:b7:40:1c:97:ac:61:9d:b1:bd:c7:d3:
06:c5:0e:4f:27:76:3e:74:93:41:1a:93:e6:73:b1:
d4:5b:8a:6e:b6:08:9d:06:1d:c0:7f:c1:9c:3b:2b:
89:18:3e:44:72:41:84:c1:e0:91:34:55:1b:90:45:
a9:cb:52:69:59:bb:cb:e7:32:0d:d6:42:7d:e0:74:
92:70:97:15:26:fb:70:7e:3b:7a:99:1b:34:d2:34:
9c:94:a6:e0:f4:6c:07:b1:f5:73:22:c9:44:e8:73:
07:ee:d1:0b:78:97:88:4b:5d:32:5b:87:72:67:50:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:32:6C:7F:95:51:C8:AD:75:A1:82:EF:17:B9:15:D5:F4:0E:EF:EB
X509v3 Authority Key Identifier:
keyid:D4:1A:EC:4C:39:63:39:A0:39:E6:B0:1F:69:A3:E5:98:C5:BE:17:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a2:8b:23:aa:f6:51:3e:f9:f2:14:68:19:20:ce:9f:d7:7b:
9b:ad:d2:90:b4:8f:77:b2:9d:99:74:31:ed:70:ff:0e:ad:23:
5b:5b:89:3d:8b:0f:9f:90:0d:e6:48:04:c6:7a:30:42:82:1f:
7e:8f:c3:b1:bc:f3:15:a2:b1:4f:ff:1d:d1:b2:65:f6:8e:05:
3b:4e:a9:7a:47:52:26:8d:f2:89:74:00:c9:7e:48:a9:ff:bd:
cc:9c:f2:c1:9a:17:cf:81:f5:52:cf:0f:f0:f7:5e:8a:08:1d:
51:7f:e3:99:8a:00:99:67:f8:b6:55:5b:d0:3f:15:83:21:07:
13:c5:8a:cc:51:90:da:70:50:e0:8d:f0:a3:eb:8b:ca:23:5d:
7a:08:7f:ed:15:b8:d5:bd:41:64:11:e8:7b:ca:ae:7d:99:1b:
70:87:00:97:f9:08:88:59:79:c0:cf:96:46:b4:14:62:fe:7a:
11:ca:48:18:f6:fa:9c:9c:b7:1c:c3:36:e6:a5:d5:72:f7:14:
dc:8b:b0:2a:6a:dd:45:42:03:e1:21:63:79:1c:c8:c2:84:a6:
d2:4a:e7:73:de:db:0f:13:3e:ac:f4:38:9f:d2:df:51:5e:3d:
05:17:25:47:86:c8:9d:b3:cb:38:b5:c8:35:fa:e0:d2:24:55:
1b:c9:bf:97
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
ODA2NDExMC8GA1UEBRMoRDQxQUVDNEMzOTYzMzlBMDM5RTZCMDFGNjlBM0U1OThD
NUJFMTczOTAeFw0yNjA5MDMwODExMDNaFw0yNjA5MTAwODExMDNaMBgxFjAUBgNV
BAMTDTZhOTkyYjk4LTU5NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwh26XzcewQdKamBLBL+Va6L/68GimBmbUsHCGANnlAyufIOAF73mS48Z3sIel
HM/WjOZAGBFJHOI2FRPQZ3v8QE9QWbjouircSr3bHzkgOEscAu2IPRwB4XvyiVWd
4YmBOMOEpi48FZoPp9g+oA7D5mzGSbFFSjTNuaXuVj67lcur9LTKeaSlAKi3QByX
rGGdsb3H0wbFDk8ndj50k0Eak+ZzsdRbim62CJ0GHcB/wZw7K4kYPkRyQYTB4JE0
VRuQRanLUmlZu8vnMg3WQn3gdJJwlxUm+3B+O3qZGzTSNJyUpuD0bAex9XMiyUTo
cwfu0Qt4l4hLXTJbh3JnUBbPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkzJsf5VR
yK11oYLvF7kV1fQO7+swHwYDVR0jBBgwFoAU1BrsTDljOaA55rAfaaPlmMW+Fzkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MDY0L0U2QTg0NEEwMDI0
NjExRjE5MjUxNjA2RDFGM0Q4QzY3LzFCcnNURGxqT2FBNTVyQWZhYVBsbU1XLUZ6
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMUJyc1REbGpPYUE1NXJBZmFhUGxtTVctRnprLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4
MDY0L0U2QTg0NEEwMDI0NjExRjE5MjUxNjA2RDFGM0Q4QzY3LzFCcnNURGxqT2FB
NTVyQWZhYVBsbU1XLUZ6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA6oosjqvZRPvnyFGgZIM6f13ubrdKQtI93sp2ZdDHtcP8OrSNbW4k9iw+fkA3m
SATGejBCgh9+j8OxvPMVorFP/x3RsmX2jgU7Tql6R1ImjfKJdADJfkip/73MnPLB
mhfPgfVSzw/w916KCB1Rf+OZigCZZ/i2VVvQPxWDIQcTxYrMUZDacFDgjfCj64vK
I116CH/tFbjVvUFkEeh7yq59mRtwhwCX+QiIWXnAz5ZGtBRi/noRykgY9vqcnLcc
wzbmpdVy9xTci7Aqat1FQgPhIWN5HMjChKbSSudz3tsPEz6s9Dif0t9RXj0FFyVH
hsids8s4tcg1+uDSJFUbyb+X
-----END CERTIFICATE-----
Generated at Thu Sep 3 13:02:37 2026 by rpki-client