
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json)
Hash identifier: VEPQ0e5IZSCo5nTxoBqsK//FZch4UFdHHgUC4b99t4c=
Subject key identifier: C8:9E:4C:D3:8C:4F:B0:68:DA:74:E3:A8:5F:50:CE:74:95:20:E3:9B
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0C0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
Manifest number: 0B9C
Signing time: Fri 24 Jul 2026 19:36:45 +0000
Manifest this update: Fri 24 Jul 2026 19:36:44 +0000
Manifest next update: Fri 31 Jul 2026 19:36:44 +0000
Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: TspL5w2slcWNwiZoaisOfl1qevhnCExIywP2kA/l+6g=)
2: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: 95Cvg2zwZcw/BgeOc0WgBXkq0e8152XDILO2/aK+H3M=)
3: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ppMV4z82z5NW891AK5M12LBj8EGTNLyucBG3JsaVDho=)
4: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: 2L0qmPJWlSuztHyt83Ndq4Mfp9otdvrdJcHOMZF+P2E=)
5: 58F54538023A11F1A52751391D3D8C67.roa (hash: z1uio79TPLowMm0kT18AE7ic1OAaktv6my41QeEIQto=)
6: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: 7v6uelL8OrL55pjxxbIx0xi/kAw0shUB/buk6IIa7mg=)
7: 3061606C730211EE89A20645C4F9AE02.roa (hash: 4rsroTZmZtOVvq2pXVxJ9+vhXeo2GaYkFSNbtr0ft6c=)
8: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 4abL4xIYGxaDwtZ2SH2+5ZKmO1Ys5r+LEPIwldIA334=)
9: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: HJaToLePFZB89VkW0fGyPEdHzI89CWSnjN5awLA7vSM=)
10: 079C6D54703211F1A5EE34BC61A30FBC.roa (hash: oT+skzbgfh9rpO8i9roBNtS46eHc++RkuX0gdcEUlLY=)
11: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: LqR/UZmLsp/hlnh1P02a45elMJow2MTJH9+YtGc5TI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 19:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Jul 24 19:36:44 2026 GMT
Not After : Jul 31 19:36:44 2026 GMT
Subject: CN=6a63becd-9dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:18:b7:a6:05:ff:ae:4a:f2:69:15:9c:72:
00:a3:84:92:ad:16:b0:4d:8c:28:87:0e:ce:a3:0d:
83:d7:ea:be:30:62:19:a5:54:cf:94:8c:85:17:8c:
d9:2a:e4:fe:ea:12:68:4f:c1:11:87:81:ef:ff:5a:
13:c7:1f:34:4f:cf:4a:58:34:9d:c2:71:42:78:25:
ca:b0:d3:c8:43:90:80:cf:83:85:53:73:ad:c7:5e:
35:b6:41:50:6f:fb:d1:f2:a5:a5:f2:c2:68:97:80:
8b:96:17:d4:5c:b4:6b:38:22:23:df:c8:50:b0:38:
32:a2:76:d4:d6:9b:6d:8e:f3:26:0a:7a:db:98:a0:
f0:26:2e:c9:3e:de:2a:a2:38:c8:2e:8d:59:15:01:
a2:1e:e3:1d:13:d1:c5:2d:07:14:ad:b5:45:ca:de:
31:f2:52:8c:e7:e3:b1:c8:5c:78:77:39:82:74:37:
e9:32:20:53:2f:04:d0:3c:80:94:b6:e1:d0:82:7c:
46:46:d4:5c:ff:bd:7a:e8:f9:db:ea:3f:d2:cb:63:
f3:06:0a:01:02:d1:69:ed:7e:9f:c3:8c:61:c9:a6:
ed:b6:6a:c5:06:52:4e:c1:6e:ca:7d:b8:37:1f:10:
4a:a4:bc:a3:34:9e:f2:56:23:e7:5b:9a:a4:d5:a6:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9E:4C:D3:8C:4F:B0:68:DA:74:E3:A8:5F:50:CE:74:95:20:E3:9B
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:22:62:b8:e7:6f:10:cd:e3:0a:36:c7:28:b1:c5:59:17:e7:
5a:9a:24:f1:f8:83:d4:bb:71:93:53:90:d7:e8:1f:d7:8b:67:
6a:b9:29:cf:08:03:bb:3d:3e:31:e4:75:1b:25:ed:5e:d3:11:
e3:1c:f4:4e:f8:ec:a7:bf:9f:8c:0c:70:05:56:8a:e9:e9:99:
c2:36:03:bb:a7:37:1b:aa:9f:46:a4:81:ff:d1:56:45:91:7b:
aa:7e:32:cc:bd:f2:f0:ee:17:1c:65:2f:45:05:44:8e:20:41:
10:13:d2:7d:dc:53:96:d2:b8:3a:9a:24:1c:b5:eb:e2:40:09:
88:35:09:ea:c8:99:7f:a6:ec:3a:56:e7:54:23:d9:3e:30:47:
9e:13:23:cb:c5:02:40:b8:b7:cb:90:7e:f0:dd:aa:5d:14:96:
b6:30:ee:cb:c8:af:55:d1:9e:92:20:6a:9c:c6:1d:17:b8:4b:
b5:46:63:8a:8c:81:e7:59:fd:87:66:d8:e9:7d:55:35:77:a4:
d3:ca:71:87:39:03:35:3d:36:03:4b:f0:ef:95:e8:39:05:c4:
a2:cd:cc:21:32:f6:d9:39:f4:86:26:77:d6:8e:2f:05:b1:60:
07:b9:d0:8d:89:50:23:a9:c4:3b:f5:bd:7b:dc:ea:7b:6d:cf:
64:0c:ba:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx
MEYzMEQ2MTgwHhcNMjYwNzI0MTkzNjQ0WhcNMjYwNzMxMTkzNjQ0WjAYMRYwFAYD
VQQDEw02YTYzYmVjZC05ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTsYt6YF/65K8mkVnHIAo4SSrRawTYwohw7Oow2D1+q+MGIZpVTPlIyFF4zZ
KuT+6hJoT8ERh4Hv/1oTxx80T89KWDSdwnFCeCXKsNPIQ5CAz4OFU3Otx141tkFQ
b/vR8qWl8sJol4CLlhfUXLRrOCIj38hQsDgyonbU1pttjvMmCnrbmKDwJi7JPt4q
ojjILo1ZFQGiHuMdE9HFLQcUrbVFyt4x8lKM5+OxyFx4dzmCdDfpMiBTLwTQPICU
tuHQgnxGRtRc/7166Pnb6j/Sy2PzBgoBAtFp7X6fw4xhyabttmrFBlJOwW7Kfbg3
HxBKpLyjNJ7yViPnW5qk1aZDLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMieTNOM
T7Bo2nTjqF9QznSVIOObMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF
QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq
cmNQMGxtT2E3ZnNROHcxaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATCJiuOdvEM3jCjbHKLHFWRfnWpok8fiD1Ltxk1OQ1+gf14tnarkpzwgDuz0+
MeR1GyXtXtMR4xz0Tvjsp7+fjAxwBVaK6emZwjYDu6c3G6qfRqSB/9FWRZF7qn4y
zL3y8O4XHGUvRQVEjiBBEBPSfdxTltK4OpokHLXr4kAJiDUJ6siZf6bsOlbnVCPZ
PjBHnhMjy8UCQLi3y5B+8N2qXRSWtjDuy8ivVdGekiBqnMYdF7hLtUZjioyB51n9
h2bY6X1VNXek08pxhzkDNT02A0vw75XoOQXEos3MITL22Tn0hiZ31o4vBbFgB7nQ
jYlQI6nEO/W9e9zqe23PZAy6iQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 05:14:18 2026 by rpki-client