
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File: Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier: T/gVm8hyc2fsIm3kXrBXtwksa8EXxjrPR0GxDmgm5X0=
Subject key identifier: 9C:9D:36:33:89:30:9E:2A:E4:99:2F:FD:D8:80:0B:7A:DF:31:8F:CE
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number: B9
Signing time: Sun 01 Mar 2026 08:23:19 +0000
Manifest this update: Sun 01 Mar 2026 08:23:18 +0000
Manifest next update: Sun 08 Mar 2026 08:23:18 +0000
Files and hashes: 1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: cQlBk4QQ7tbDW085nNsrBngUGrNysAAPDFq3m0n8DMw=)
2: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (hash: Ct6M4zEvSutn2t1TU3UtjFfjy8ibtamuptXeuMlk8Jk=)
3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=)
4: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Validity
Not Before: Mar 1 08:23:18 2026 GMT
Not After : Mar 8 08:23:18 2026 GMT
Subject: CN=69a3f777-c24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:18:ca:14:ae:f2:e7:af:36:15:ac:aa:a7:
21:2b:27:dd:19:dd:e5:83:f2:dd:8c:29:0a:28:e8:
19:20:d9:c8:a5:95:07:38:ec:bd:08:c1:17:7a:bf:
03:7d:25:0c:78:92:ac:31:5f:29:70:b9:20:42:9a:
43:99:de:0b:15:55:b1:99:34:cb:71:7f:45:03:a8:
72:0a:b8:ef:e5:70:a9:c4:d1:0d:de:46:ac:95:f8:
25:88:08:ea:22:17:48:82:0a:7d:da:6d:62:77:f9:
38:f4:a8:5b:c7:6c:12:31:b8:c7:56:0e:78:73:14:
bc:8e:ae:01:0b:86:e8:ff:68:6a:65:46:04:aa:96:
ea:18:b6:4f:b0:03:35:34:76:4a:d2:0d:4b:49:75:
26:de:22:bf:08:2d:82:fe:0a:70:3b:e7:51:ee:eb:
80:e7:2a:a7:f8:9b:0e:0f:5d:c9:26:2e:5a:40:ef:
2c:f9:d1:d5:48:80:cb:85:95:e9:5b:c4:44:dc:2a:
71:e1:10:c5:e1:e3:e2:a0:1f:5e:6d:91:17:08:9d:
9a:09:29:99:e9:23:79:6e:58:e3:61:28:d6:09:71:
10:af:76:66:7f:0f:42:7b:2c:e5:55:46:10:18:aa:
0d:75:54:be:08:6e:8a:88:d6:81:e1:f0:23:5f:25:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:36:33:89:30:9E:2A:E4:99:2F:FD:D8:80:0B:7A:DF:31:8F:CE
X509v3 Authority Key Identifier:
keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:49:13:05:00:f0:dd:dd:2e:dc:ff:e9:9f:5a:03:24:32:aa:
9d:4a:73:6c:96:fc:78:ac:27:83:5c:6b:83:ab:ba:9e:1c:5a:
20:a2:5d:e8:b2:a8:b0:2a:42:d5:fe:07:cc:f7:5d:23:70:d6:
62:65:d8:5d:48:47:ac:4f:16:56:c3:90:4d:b4:b3:48:52:15:
4a:45:46:f4:f8:c4:3b:3e:8b:15:56:52:29:d6:d8:2b:6a:19:
1f:00:09:96:5b:c8:9b:13:9a:f7:b9:75:9d:8c:25:3b:8d:6a:
02:7e:14:cf:a1:a3:e7:2b:e5:c8:c4:8f:63:b8:30:60:85:82:
db:b0:12:32:54:58:9a:3f:5d:fd:f7:9c:ba:1f:0b:57:ba:02:
9c:e3:b0:77:08:22:f6:fe:b5:f9:ec:67:6b:b9:ed:4a:98:b5:
fb:0f:ff:30:18:f5:35:7c:e0:54:48:d5:3b:8c:ba:bf:59:d9:
31:04:72:f9:a8:98:5a:a7:fb:fe:72:52:6b:bf:de:79:7a:a0:
f8:a0:18:49:84:3e:e7:14:c0:c7:75:83:92:6b:26:01:c3:c7:
f9:fe:35:74:e7:93:6d:d0:a3:e5:85:69:1e:5e:bc:7c:15:d8:
36:f7:49:e0:8e:17:66:16:69:1b:58:4c:04:53:d2:a4:63:0f:
2a:e0:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:52 2026 by rpki-client