
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
File: 1BrsTDljOaA55rAfaaPlmMW-Fzk.mft (raw, json)
Hash identifier: I0RM/ZcOCGqn2E6ngbas6+W7Cp2wVvaIOCZoDhdRZDQ=
Subject key identifier: E6:63:93:69:69:8E:31:B9:1F:8D:F3:D2:93:C1:F1:E4:95:7F:DF:EA
Authority key identifier: D4:1A:EC:4C:39:63:39:A0:39:E6:B0:1F:69:A3:E5:98:C5:BE:17:39
Certificate issuer: /CN=A9188064/serialNumber=D41AEC4C396339A039E6B01F69A3E598C5BE1739
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
Manifest number: 44
Signing time: Sat 13 Jun 2026 08:31:37 +0000
Manifest this update: Sat 13 Jun 2026 08:31:36 +0000
Manifest next update: Sat 20 Jun 2026 08:31:36 +0000
Files and hashes: 1: 1BrsTDljOaA55rAfaaPlmMW-Fzk.crl (hash: K4gkfIfkzkj0YH85CgJFhk/ZLK2HzBM9PrWxcIlITY4=)
2: 2BD520F6024811F1A5959A751F3D8C67.roa (hash: iNAir+qYPox5pKUat5UFI5N3Ccn70BI/XmtCfWuEJ9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.crl
rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188064, serialNumber=D41AEC4C396339A039E6B01F69A3E598C5BE1739
Validity
Not Before: Jun 13 08:31:36 2026 GMT
Not After : Jun 20 08:31:36 2026 GMT
Subject: CN=6a2d1568-35d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:d6:62:9a:e7:6a:4b:5d:6c:9c:91:4d:ad:
e3:35:46:3b:d7:8c:6b:e3:02:90:f8:da:e9:c9:d3:
69:97:63:ae:79:1f:14:8f:68:3c:63:57:c9:16:50:
a5:7b:fc:cc:c8:44:c2:e8:00:be:c7:f6:67:ef:7d:
7a:40:01:cb:dd:f7:20:e8:34:00:59:8f:26:87:5a:
3d:5e:db:d2:cd:61:be:b8:d4:be:de:93:94:15:62:
1c:e8:f8:c8:42:cd:d4:ce:84:04:44:6e:a1:ab:18:
f7:3b:1e:e1:67:da:bb:c3:88:d3:ae:68:57:46:e0:
4a:dd:ca:a6:7e:42:ba:09:dc:61:b3:e8:5f:2a:4e:
56:ff:d7:0e:9e:8f:a5:cd:9b:34:9e:83:d0:4f:b3:
7c:32:26:a8:bb:6e:7a:b8:33:28:a6:27:b5:5a:80:
f0:ed:dd:4b:b5:ce:ba:6f:75:94:c5:fb:02:00:ff:
ba:3b:88:92:9a:ac:c5:33:bd:b6:5c:e2:e9:f4:70:
f5:31:37:4e:c7:27:03:b2:25:ed:d5:d1:f9:13:25:
94:5b:5c:99:aa:f1:20:e2:95:ab:ad:62:21:b5:0d:
9f:11:af:ab:83:ff:cc:1b:cb:b8:f1:38:89:c3:88:
71:3a:8f:0e:48:72:15:32:80:6d:c1:ab:f6:1b:e0:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:63:93:69:69:8E:31:B9:1F:8D:F3:D2:93:C1:F1:E4:95:7F:DF:EA
X509v3 Authority Key Identifier:
keyid:D4:1A:EC:4C:39:63:39:A0:39:E6:B0:1F:69:A3:E5:98:C5:BE:17:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1BrsTDljOaA55rAfaaPlmMW-Fzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/E6A844A0024611F19251606D1F3D8C67/1BrsTDljOaA55rAfaaPlmMW-Fzk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:44:79:15:b2:27:a9:ff:62:38:38:bc:38:4c:46:6b:b0:d9:
39:6e:d5:71:e2:00:dc:d3:f0:10:67:ab:70:de:8b:06:f7:80:
37:87:dd:0e:c8:94:47:c3:40:e6:d0:86:eb:af:ca:52:61:9c:
d0:a6:9d:04:96:94:ed:31:d9:2a:c1:52:58:f0:af:30:9f:06:
11:e6:07:b4:14:60:61:ff:fa:23:05:34:d0:08:b5:85:d8:72:
87:89:6a:c5:6b:84:4b:48:61:59:2b:e3:09:29:6c:57:98:cc:
13:f9:8e:ba:46:4e:75:d8:3e:76:8d:a7:f0:61:c5:15:49:c1:
62:ce:d7:2c:1d:12:41:4b:d5:16:6d:c9:eb:31:26:d5:da:c4:
30:51:0f:fd:27:2e:3d:0f:aa:61:bf:61:6c:64:00:e5:a2:f5:
7a:02:39:24:7c:a9:53:33:f2:5f:f2:42:e0:99:71:25:04:2a:
b7:f0:2e:df:21:95:4b:54:35:a7:1f:67:cd:d3:cf:2f:1a:c4:
33:30:2f:33:7c:f2:f7:67:9f:aa:40:5b:d6:2f:69:19:8d:6f:
5b:8f:f9:6e:c0:a6:da:a0:8b:ab:82:69:74:e3:32:7d:04:2f:
d6:69:1b:aa:12:8c:ff:d3:e8:af:4b:b7:3a:ee:36:9d:9f:24:
96:f7:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:52:30 2026 by rpki-client