
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json)
Hash identifier: GdwYiN6LquF4qekukJJODmBW9WcAxt/qmGONJzsqAck=
Subject key identifier: 83:10:4C:5A:3E:AA:BA:B9:10:38:61:C3:D6:EB:0F:19:36:EB:11:BC
Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Certificate serial: 0BE7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
Manifest number: 0BD6
Signing time: Fri 12 Jun 2026 19:01:08 +0000
Manifest this update: Fri 12 Jun 2026 19:01:08 +0000
Manifest next update: Fri 19 Jun 2026 19:01:08 +0000
Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: y9/tmL2+22yIJzkTq/taIldLiTOnAeSnrqS2Ya5sprc=)
2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: EP70FT9vYILp9XYrmWiAL3jLqbW9+S8BdvaaLqMxnTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl
rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3047 (0xbe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
Validity
Not Before: Jun 12 19:01:08 2026 GMT
Not After : Jun 19 19:01:08 2026 GMT
Subject: CN=6a2c5774-b4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:e5:1e:82:d3:22:39:03:84:1d:05:3c:17:
e5:12:9c:5b:8b:2c:91:0f:2c:03:d4:cb:8e:36:93:
92:e4:1b:00:9f:92:b8:e7:6b:1f:ee:83:03:1c:8b:
92:c9:83:30:33:97:12:e2:87:28:6a:d6:a7:08:68:
a5:f6:63:33:77:81:18:d7:27:2b:c5:e5:0e:fe:62:
65:10:59:5c:67:8b:94:ee:f3:4a:1e:96:d2:81:ac:
43:55:1d:cc:cb:8e:08:ec:5b:92:cb:5f:c1:77:d7:
1b:aa:18:94:7f:37:b9:10:06:40:a0:35:2c:ca:68:
c3:de:3b:ca:85:66:66:2c:a0:f7:17:85:f6:3d:a6:
77:54:dc:4a:43:3f:0f:af:d0:ec:88:c4:76:85:1d:
28:c7:07:75:95:2e:06:8e:ae:01:32:a9:e2:db:7f:
51:ee:de:69:a1:97:de:e1:55:e4:7c:ec:66:e9:d2:
9f:e6:23:66:42:17:3e:91:e3:b7:d3:2b:7f:ae:47:
62:91:54:0c:10:c3:7e:ba:d0:ff:0e:9c:94:98:5d:
dc:22:f8:e4:02:f1:92:94:4d:d5:44:be:0e:2b:21:
76:1e:d0:39:70:e3:6a:65:f0:fa:6f:e7:c8:be:33:
1a:0a:97:92:a2:de:8b:c6:20:7a:28:fa:25:d0:d7:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:10:4C:5A:3E:AA:BA:B9:10:38:61:C3:D6:EB:0F:19:36:EB:11:BC
X509v3 Authority Key Identifier:
keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:14:b0:38:cb:a5:99:50:f6:2f:5a:3e:a1:84:65:44:f4:da:
c0:06:c5:56:88:69:51:32:71:99:be:38:91:bb:8c:c1:f9:a9:
92:c8:ef:cf:20:9d:b1:22:ad:78:7f:af:1d:54:05:3a:9e:23:
ab:1e:d7:b9:89:11:4d:c3:11:58:a0:da:61:e3:ee:e1:57:bb:
77:eb:18:f1:a5:bf:43:e9:54:88:b0:e8:fd:27:7d:f8:a7:bd:
61:5e:9e:83:96:bd:b9:01:0a:37:ef:9e:dc:19:33:b0:0b:49:
c8:c4:fc:e6:45:d7:60:61:28:de:70:2b:4c:56:40:46:43:fd:
60:d2:0d:5f:32:83:86:fa:01:32:36:8a:b7:a5:dc:7e:f6:5e:
2e:87:d7:87:f0:f8:2c:a6:86:0f:38:ed:a5:d8:e9:6d:75:60:
23:ab:9f:6d:89:9c:07:d8:8d:3e:7c:1a:71:e7:fb:12:60:b5:
3a:1e:38:b9:bc:bc:36:fc:df:79:c6:96:a0:bd:23:29:59:ba:
00:bb:cb:79:59:b2:b6:77:d6:30:ee:e2:07:9a:cd:d3:bb:4e:
ce:ca:46:6c:fb:4c:69:ce:94:e0:05:43:00:2c:33:ba:02:e2:
a5:22:0a:7b:9b:66:e5:28:50:e1:1d:7a:52:00:4a:69:94:bc:
2a:bf:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:39 2026 by rpki-client