
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File: BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier: v5xsgVKlWXmg8iqpUJbIR2XO5yHgYIaKQC47XWk/RWE=
Subject key identifier: 2A:85:20:0B:6B:56:DC:B6:63:1D:20:B8:31:5D:A7:E8:7C:AB:7D:55
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer: /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial: 3586
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number: 3585
Signing time: Sat 10 Oct 2026 15:12:36 +0000
Manifest this update: Sat 10 Oct 2026 15:12:36 +0000
Manifest next update: Sat 17 Oct 2026 15:12:36 +0000
Files and hashes: 1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: pG2BkFH1Br/9Vu8JvEeQAHZKzozR7YPNmY0PFa8GJ20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13702 (0x3586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Validity
Not Before: Oct 10 15:12:36 2026 GMT
Not After : Oct 17 15:12:36 2026 GMT
Subject: CN=6aca55e4-b17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:4a:c6:88:b0:cb:07:a3:56:bb:e4:5b:a5:
e8:72:c3:70:13:3e:c8:c9:32:7f:ee:42:4b:7e:7d:
7a:32:48:eb:7f:20:96:7e:c5:01:3e:7a:07:84:a1:
ad:e9:5f:cb:2c:4d:42:56:2f:1d:75:d2:fa:27:ed:
c2:45:67:33:8a:27:66:84:e2:b3:c9:10:c5:fe:0a:
1c:8d:0e:4a:e9:4d:36:ee:49:38:0c:20:24:8d:ec:
29:0c:78:ec:9c:e4:2f:35:5e:ba:61:90:be:c0:dc:
69:09:3e:48:c0:07:50:82:16:de:33:06:92:75:8d:
0a:1d:c8:db:aa:ad:3d:23:e9:59:24:89:d5:0d:bd:
b8:cf:f5:e6:db:51:7b:0a:df:b7:79:57:2c:33:7d:
5d:46:3a:91:07:13:fb:5e:72:ed:16:ca:41:04:72:
17:c9:3b:3b:81:73:8d:a5:dc:f4:fe:34:02:7d:4a:
56:92:05:bd:df:da:ee:0f:9e:1b:7f:87:0c:36:42:
0c:af:dc:98:19:ae:a3:d5:8e:5b:3e:c4:33:e3:f2:
a5:fa:e0:68:63:4d:05:b2:d0:c9:58:68:18:4f:4b:
a1:ed:75:99:73:fe:1d:49:2c:dd:91:16:09:90:29:
51:c8:1e:90:4c:22:39:91:f6:35:44:5a:b5:29:bc:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:20:0B:6B:56:DC:B6:63:1D:20:B8:31:5D:A7:E8:7C:AB:7D:55
X509v3 Authority Key Identifier:
keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:5a:09:17:2e:ab:77:56:ed:6d:8a:68:72:97:46:78:c1:cf:
a1:80:53:ff:69:5c:db:f8:d5:4b:5c:bc:28:0e:80:d1:f2:c7:
dd:49:aa:01:07:c4:d1:f4:61:ad:d6:75:e3:85:ce:5f:f4:16:
75:78:38:4e:b0:40:b3:d8:45:9d:c2:eb:5d:31:d6:9e:42:9e:
56:19:48:de:36:86:d7:7e:4f:37:cb:80:95:72:9c:68:68:f7:
08:91:1e:3f:76:40:1f:26:6c:30:97:c3:8a:38:26:1b:b0:a4:
6a:99:54:9d:b7:39:87:a2:dd:01:d2:cc:68:91:bd:33:d3:3d:
15:0d:0f:f7:78:ac:76:e6:bb:78:a0:4b:7f:ed:74:52:fd:b7:
3b:a0:29:01:38:20:68:0e:10:c4:39:fa:f9:48:d9:9a:29:77:
31:66:d4:d9:5a:28:ea:2f:3e:ba:1f:2a:81:e3:b5:2e:d5:ca:
ff:d5:3e:a3:39:a9:da:b8:ff:db:0d:2a:7c:d4:d6:0c:92:9f:
58:26:69:0a:36:72:e2:96:b6:a0:02:3f:5e:5a:30:ce:73:2e:
3b:e6:29:41:90:5a:22:12:ca:e4:40:4f:2f:4d:ac:c8:03:ac:
53:81:74:ed:fd:78:d1:37:d5:c4:30:3f:97:fa:62:29:6e:29:
49:b2:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:40:31 2026 by rpki-client