
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
File: 1BrsTDljOaA55rAfaaPlmMW-Fzk.mft (raw, json)
Hash identifier: XWPPGA6KV5UWVMH9gyyV1M1lpMMoWUjeqR7/dzk+gFQ=
Subject key identifier: B6:A0:CF:6B:6C:C7:4D:B1:55:78:CA:93:5A:56:B3:18:DA:E6:6F:92
Authority key identifier: D4:1A:EC:4C:39:63:39:A0:39:E6:B0:1F:69:A3:E5:98:C5:BE:17:39
Certificate issuer: /CN=A9188064/serialNumber=D41AEC4C396339A039E6B01F69A3E598C5BE1739
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
Manifest number: 57
Signing time: Fri 17 Jul 2026 09:32:18 +0000
Manifest this update: Fri 17 Jul 2026 09:32:17 +0000
Manifest next update: Fri 24 Jul 2026 09:32:17 +0000
Files and hashes: 1: 1BrsTDljOaA55rAfaaPlmMW-Fzk.crl (hash: yQZftJQFzqlRr6G5Cpyz1gLXJwZrKIh0j9S9m3DVldM=)
2: 2BD520F6024811F1A5959A751F3D8C67.roa (hash: iNAir+qYPox5pKUat5UFI5N3Ccn70BI/XmtCfWuEJ9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.crl
rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188064, serialNumber=D41AEC4C396339A039E6B01F69A3E598C5BE1739
Validity
Not Before: Jul 17 09:32:17 2026 GMT
Not After : Jul 24 09:32:17 2026 GMT
Subject: CN=6a59f6a2-7c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:55:43:ce:23:3f:d2:53:ef:cb:52:cc:56:
9e:2b:d9:77:b7:f3:ba:91:23:13:1f:21:95:45:81:
d8:f8:ad:2e:6b:08:40:f0:0a:55:3d:18:12:00:ae:
3e:95:73:e8:d7:02:2f:db:db:3b:43:23:b3:e2:d7:
18:d3:d3:ca:1c:5d:c9:c7:a5:c6:e3:f2:9c:5e:73:
24:87:bd:a3:fc:d3:d6:52:69:f9:2a:98:88:88:1f:
a5:17:fb:99:52:32:9e:c1:9a:43:99:38:38:8a:14:
87:cd:b2:f7:8f:58:f4:9b:e1:d5:8a:98:9f:d4:51:
c7:b9:0c:a5:bc:09:83:cc:57:c9:08:dd:46:ad:10:
7d:9e:9d:54:d0:14:88:c4:19:86:e6:37:28:df:c3:
85:e3:e7:3e:7b:f6:a8:f6:07:b4:b6:c5:d9:ed:7a:
0a:19:3d:a9:8c:fe:10:ea:00:4e:e4:16:a7:bd:0a:
ee:6b:8e:bc:bc:46:19:71:de:dd:45:80:06:2f:b5:
9f:83:db:e7:b4:00:35:cf:ed:ca:a0:13:c3:3d:95:
7b:b1:fe:b1:10:c3:90:fb:ba:6e:74:d5:76:0c:65:
ae:c9:d2:a0:b6:54:3c:9b:63:d8:91:ec:ba:b1:f7:
cb:d6:bb:11:b4:2e:91:58:1d:66:02:95:c3:99:67:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:CF:6B:6C:C7:4D:B1:55:78:CA:93:5A:56:B3:18:DA:E6:6F:92
X509v3 Authority Key Identifier:
keyid:D4:1A:EC:4C:39:63:39:A0:39:E6:B0:1F:69:A3:E5:98:C5:BE:17:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:df:37:3f:bf:d4:cf:f3:98:3a:8d:66:1d:3b:ee:30:c4:f8:
f6:7a:f0:af:6c:e4:b0:91:48:42:14:09:93:62:a4:78:e7:c1:
1f:63:9a:c1:f3:a9:76:ba:33:8e:24:ab:03:30:47:35:29:e4:
20:04:17:9a:e8:f4:a7:34:39:4c:23:96:8d:0a:d5:8d:cf:b5:
c0:94:5d:20:b5:f5:54:a0:c1:15:21:75:d7:06:e3:f6:50:ac:
ff:a6:0e:cd:04:8e:fc:10:81:f5:54:92:4c:4f:8c:c3:71:6e:
45:39:06:a7:c7:c2:95:7f:b2:0e:06:93:0d:1e:0f:db:99:21:
ab:14:e7:21:d9:87:24:01:5b:28:05:24:cf:3d:b0:e9:2a:99:
0e:11:2f:c3:24:94:61:84:68:b1:5b:20:8b:6c:27:a9:4d:19:
53:3d:78:73:bf:2d:68:27:4c:d0:6d:35:79:a5:ea:b7:43:70:
b9:38:02:13:d3:d0:19:9a:96:47:57:6f:07:43:5d:18:0b:23:
b4:6f:2a:77:8b:4e:6d:3d:f9:15:7e:ca:9e:7c:f4:29:3a:81:
c4:ec:21:c7:b1:c4:8b:89:15:67:98:33:38:b2:3e:55:3d:7b:
9b:d6:26:28:b6:7f:03:55:68:f7:46:b6:3c:db:85:7c:f7:15:
7f:bf:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:35 2026 by rpki-client