
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File: Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier: 4iKN0pzuBiKYZz9TNoJOe6vEZZM1uAtL/JwoexHXzv4=
Subject key identifier: 8F:FF:6F:8D:13:7F:98:FC:F2:08:A8:98:E7:BA:A4:E7:98:AB:46:08
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number: 0125
Signing time: Wed 23 Sep 2026 05:41:42 +0000
Manifest this update: Wed 23 Sep 2026 05:41:41 +0000
Manifest next update: Wed 30 Sep 2026 05:41:41 +0000
Files and hashes: 1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: d5FtvZwzziKfiZC5XFaLUyzLjL6BkwCW6eow5YvTSno=)
2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: 9d80apncQwaKTAG06R4mIWLTbRCpdrLELAUO00snQkE=)
3: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (hash: +YeqTwufzvgzhnkt/mIw5JG1iBbYnBY3vNzMAfLJODo=)
4: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: aLK8sAzxMSPrhRCMqldgKmzdDH1pIToEHi3LcYvbeYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Validity
Not Before: Sep 23 05:41:41 2026 GMT
Not After : Sep 30 05:41:41 2026 GMT
Subject: CN=6ab36696-804e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:fe:0f:02:a8:5b:b8:c2:b7:8e:ae:d0:2c:
46:cd:7d:a9:0c:ef:0d:9a:06:4d:94:9e:70:fd:cc:
d2:e7:4f:b9:07:85:84:c0:d9:a6:43:de:67:ea:1b:
2b:e5:0d:b7:93:74:17:c6:73:70:33:e2:80:8b:83:
ab:5a:ae:d3:25:dd:d3:81:3d:9b:60:63:1b:57:68:
33:8e:8e:89:0e:25:62:5e:77:21:8a:d3:92:80:a0:
f2:44:e2:b5:85:41:c5:df:97:13:59:ad:91:64:ab:
51:57:0e:3a:3a:38:94:63:1c:a6:c5:26:73:ca:11:
c4:f9:2b:64:82:e1:26:28:be:81:73:55:a7:66:ae:
ab:9b:8f:15:7c:03:8b:e9:f0:42:59:ac:a1:72:df:
37:48:6b:25:22:7e:8c:39:50:93:f0:08:33:be:75:
41:26:2a:ce:24:9b:59:17:c9:3c:99:ef:ca:d4:ea:
45:6f:30:a8:05:15:d4:4a:0a:ae:47:c9:41:89:1e:
9f:3b:1e:33:6d:8b:b8:e6:97:70:f9:8b:c6:f7:3d:
bd:ef:72:56:4c:65:74:53:62:46:32:0a:cf:db:0b:
b6:92:d0:cb:e7:46:a9:89:fe:66:2e:19:9d:9d:3f:
60:0c:f9:76:8f:c7:2a:60:fe:14:08:0e:f4:9d:74:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FF:6F:8D:13:7F:98:FC:F2:08:A8:98:E7:BA:A4:E7:98:AB:46:08
X509v3 Authority Key Identifier:
keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5f:ef:3b:39:1e:9e:d4:9d:af:81:db:22:5f:06:a7:47:22:
92:13:ab:80:dc:33:27:9c:71:d2:8e:56:80:dc:3f:f7:38:76:
2b:07:78:67:9e:e5:1a:89:ec:56:65:0a:5b:58:9b:e2:af:7d:
16:08:79:6e:77:a4:b0:08:e4:06:03:7e:43:0e:76:da:2f:c6:
10:3d:31:a0:6e:5c:71:40:5a:fa:e0:96:0f:02:10:13:92:83:
b4:16:c0:b5:f8:1d:88:9c:79:20:39:a4:89:b4:f1:ad:41:40:
8f:f0:8c:b9:59:94:f4:4a:4c:22:49:a1:b8:d6:7c:2d:54:bd:
fb:28:c6:63:ea:55:91:a5:7e:d8:4c:f3:ea:4c:6f:e3:66:6e:
1f:fd:1a:78:cb:57:46:dc:c2:0b:11:47:41:6d:32:b4:e6:f0:
c4:02:e4:99:85:4e:30:15:05:47:41:77:04:2b:c3:e2:27:8b:
96:14:46:b9:f6:98:3d:bf:7f:6e:a4:e4:e7:37:b2:f0:93:7b:
f3:5d:63:a1:c5:31:0c:47:68:d1:9e:64:50:d8:f1:5c:18:ee:
5d:c8:e6:f7:ac:16:9c:28:2d:66:e5:d7:23:12:fa:ee:09:12:
26:9d:7f:86:e0:27:72:c8:c9:ad:f1:a9:7c:c9:5d:89:ac:3d:
a6:c8:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:11:58 2026 by rpki-client