
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File: Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier: 5/1jRjsYTdgwoHlpXfO/ZO4zj1b4uq2SWsk6KXog3c4=
Subject key identifier: 75:B9:FC:E0:DD:B5:E3:2A:55:FF:23:3E:8C:A2:DD:FB:27:45:A1:55
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number: CF
Signing time: Sun 05 Apr 2026 06:18:03 +0000
Manifest this update: Sun 05 Apr 2026 06:18:03 +0000
Manifest next update: Sun 12 Apr 2026 06:18:03 +0000
Files and hashes: 1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: 76j+lgh46CwNMjtpleNeBthCYNWj3ojuwLK4bFwHXnk=)
2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: 9d80apncQwaKTAG06R4mIWLTbRCpdrLELAUO00snQkE=)
3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: aLK8sAzxMSPrhRCMqldgKmzdDH1pIToEHi3LcYvbeYk=)
4: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (hash: +YeqTwufzvgzhnkt/mIw5JG1iBbYnBY3vNzMAfLJODo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Validity
Not Before: Apr 5 06:18:03 2026 GMT
Not After : Apr 12 06:18:03 2026 GMT
Subject: CN=69d1fe9b-d061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:ca:66:33:0b:59:a5:23:b2:d5:c0:67:b7:
09:4b:d3:23:80:af:ad:b3:d5:9d:81:8a:32:1f:5f:
93:fc:bd:ae:2f:8f:3b:73:3a:06:96:db:4f:87:1b:
67:11:0f:25:36:7b:cf:f1:e4:91:8f:52:93:b3:ac:
9f:2d:41:4e:d3:94:73:56:97:39:68:23:03:6e:e0:
43:49:1a:c8:ca:88:cc:63:42:5b:db:b7:bd:f6:a1:
97:26:33:78:68:f0:eb:9f:4c:e7:a7:a2:c7:35:62:
ef:ea:a6:55:b9:6a:55:ad:a6:94:6f:00:3b:1f:e6:
0d:0b:01:25:d1:95:3d:c1:47:52:4e:f0:f9:02:98:
5e:c5:80:ba:6a:28:4d:67:e8:3a:66:de:9d:7f:c3:
cd:4e:14:dc:f5:92:aa:f4:d6:e9:92:39:04:6b:34:
73:97:61:55:97:24:a9:d0:7a:fb:f1:2e:36:22:62:
07:bf:24:e5:af:61:55:a2:fd:41:af:07:b7:43:a3:
4b:13:0d:28:3e:f3:7d:03:a6:0e:62:b7:e6:1e:b3:
cc:e1:df:71:59:00:fd:55:6e:68:1a:9d:d0:af:e4:
14:b1:8e:c3:4a:0c:64:c8:34:6d:3b:9c:f5:3d:4a:
f2:ac:e2:b0:08:a9:36:ad:79:a8:94:9d:61:6b:13:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:FC:E0:DD:B5:E3:2A:55:FF:23:3E:8C:A2:DD:FB:27:45:A1:55
X509v3 Authority Key Identifier:
keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5c:a7:0c:26:07:53:3a:d8:6f:96:39:c9:99:a9:11:06:e9:
61:52:9d:d1:5d:e7:b5:be:ba:be:c1:8c:bd:35:bd:b8:66:5b:
d5:c5:24:41:39:e0:10:be:d4:ed:37:f8:6c:97:dc:30:df:6b:
55:08:d8:7c:d8:37:76:54:63:4b:44:ca:ff:c3:0a:db:5b:2c:
35:53:f9:bc:ff:73:c7:48:b7:28:6b:f9:c2:4e:ba:16:79:13:
2e:9a:e5:02:25:e5:91:6d:70:e3:7d:68:ad:ad:0d:1a:8d:8c:
98:20:ce:5b:bf:5b:9a:da:43:b9:62:e1:c9:76:30:1c:6c:74:
7d:ba:fc:3f:a7:98:e4:ff:91:0b:0a:64:a0:21:56:e2:5c:81:
5d:65:80:1f:e4:84:4d:86:f6:48:2a:04:fd:2b:7b:ac:75:b2:
17:0e:93:82:37:88:fc:f4:95:af:73:4e:b7:8b:04:a3:c3:0f:
0c:4a:8b:c0:c4:97:f4:a6:0d:22:1f:eb:2c:15:a7:b4:58:66:
24:42:c8:4a:5c:fe:80:7e:61:81:24:24:0e:82:8f:4f:c5:5d:
04:d4:d2:91:d1:67:65:96:8f:30:06:64:e8:26:83:20:19:90:
f8:75:af:a0:70:1b:69:91:46:60:de:1e:7f:07:ae:98:b8:63:
d3:76:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:34 2026 by rpki-client