
$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft
File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json)
Hash identifier: sTNNGFwgJ54vEBKmicb6ng1JUtAd7D1rV29zbYwz4yA=
Subject key identifier: 26:DA:70:DE:FE:F4:3C:8B:01:85:CD:5C:B2:F7:7A:E2:F0:75:85:74
Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94
Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494
Certificate serial: 0CF1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft
Manifest number: 0CE8
Signing time: Tue 28 Jul 2026 16:41:20 +0000
Manifest this update: Tue 28 Jul 2026 16:41:20 +0000
Manifest next update: Tue 04 Aug 2026 16:41:20 +0000
Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: IhTW8An12/eLUeDpJxagaNyjouVRErJPYTThhHLRR8E=)
2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: nphD5/zhxc+3ixvM+cDUfdvKIznpmzB6/A0Gs9H1cg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl
rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3313 (0xcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494
Validity
Not Before: Jul 28 16:41:20 2026 GMT
Not After : Aug 4 16:41:20 2026 GMT
Subject: CN=6a68dbb0-0756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:53:d2:9d:60:7f:1b:f7:f6:15:69:98:b1:
86:6b:6d:3a:c8:29:12:07:93:44:bc:7a:a9:3a:10:
35:c9:ed:80:9e:56:4d:a5:5a:6d:b5:25:d3:96:6c:
ca:22:5e:81:71:84:b4:52:38:ef:16:c3:9f:5e:b7:
e8:76:0e:e0:a8:7a:90:a5:d5:2a:6c:97:1d:e6:4c:
20:f1:62:fa:ec:27:7d:63:ae:cd:22:56:2e:5c:2b:
e5:6f:39:32:8f:67:e8:83:95:6d:8f:28:56:ec:b0:
e2:5c:3f:45:57:da:3c:86:b7:53:54:3b:86:16:41:
66:4f:97:66:3b:07:c2:64:fd:6d:3e:cf:7f:6b:3f:
4f:f3:f5:b3:10:7f:88:f1:a1:e9:0f:ed:22:a3:65:
65:a5:8d:46:b7:56:92:6d:7e:87:1f:8e:dc:e3:e7:
64:25:b7:f3:3a:21:31:90:4f:c3:78:cb:e7:f8:38:
83:b7:d4:86:d2:0a:40:bd:ca:b3:6b:d9:b1:4d:39:
25:97:40:6c:74:e1:9d:26:4d:fa:1b:5f:f0:da:fd:
e7:85:6a:0f:fe:94:4d:5c:99:17:04:5b:5c:f9:6b:
bb:5b:eb:b0:3c:d8:8e:d4:9a:38:ae:15:50:4c:a8:
4e:8e:35:15:78:0b:62:99:fe:8b:6f:dd:b7:de:56:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:70:DE:FE:F4:3C:8B:01:85:CD:5C:B2:F7:7A:E2:F0:75:85:74
X509v3 Authority Key Identifier:
keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e7:73:95:3d:48:b4:c1:e9:03:02:a3:16:34:05:20:b5:ec:
73:4b:bb:54:56:e7:13:f4:0c:8b:47:36:38:cf:99:5d:b3:ca:
6f:2a:be:6b:6f:49:44:23:95:db:d7:e1:d7:08:0e:6b:fd:9d:
35:31:23:f8:9c:74:25:d8:4b:ac:79:80:f2:cd:d6:f0:28:fd:
8e:b7:46:3f:f9:a2:3c:d6:1c:3d:12:6d:c9:91:1b:b2:e2:f6:
93:8c:9a:44:09:ed:9e:7b:c6:c3:14:f4:c8:89:a9:4f:23:8b:
66:30:e1:72:79:82:9b:62:6d:b6:52:f3:98:27:46:a0:56:b3:
43:f3:6f:0c:fe:56:aa:f5:e8:de:bc:64:21:87:43:f0:bd:fe:
8a:52:a5:f4:6c:3b:9b:29:18:d2:2e:8a:0f:29:c3:65:a3:93:
92:e5:63:9e:e5:ed:55:6c:0e:40:23:33:1f:ae:e1:1d:a2:6a:
c1:c9:14:6d:d4:41:04:a6:84:de:14:2e:a5:d0:43:84:3f:ff:
ca:b4:ca:9a:89:d8:07:0d:4b:3c:58:9a:01:8a:84:35:0a:d9:
24:1c:bf:3f:ee:35:f5:fa:00:61:de:5d:4d:68:29:42:c4:6a:
57:03:9a:0c:7a:a3:26:d3:32:fc:a9:6a:2b:fd:c0:7a:e0:4a:
b6:90:4e:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG
REYyREI0OTQwHhcNMjYwNzI4MTY0MTIwWhcNMjYwODA0MTY0MTIwWjAYMRYwFAYD
VQQDEw02YTY4ZGJiMC0wNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4NT0p1gfxv39hVpmLGGa206yCkSB5NEvHqpOhA1ye2AnlZNpVpttSXTlmzK
Il6BcYS0UjjvFsOfXrfodg7gqHqQpdUqbJcd5kwg8WL67Cd9Y67NIlYuXCvlbzky
j2fog5VtjyhW7LDiXD9FV9o8hrdTVDuGFkFmT5dmOwfCZP1tPs9/az9P8/WzEH+I
8aHpD+0io2VlpY1Gt1aSbX6HH47c4+dkJbfzOiExkE/DeMvn+DiDt9SG0gpAvcqz
a9mxTTkll0BsdOGdJk36G1/w2v3nhWoP/pRNXJkXBFtc+Wu7W+uwPNiO1Jo4rhVQ
TKhOjjUVeAtimf6Lb9233lbt2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbacN7+
9DyLAYXNXLL3euLwdYV0MB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw
RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3
ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATudzlT1ItMHpAwKjFjQFILXsc0u7VFbnE/QMi0c2OM+ZXbPKbyq+a29JRCOV
29fh1wgOa/2dNTEj+Jx0JdhLrHmA8s3W8Cj9jrdGP/miPNYcPRJtyZEbsuL2k4ya
RAntnnvGwxT0yImpTyOLZjDhcnmCm2JttlLzmCdGoFazQ/NvDP5WqvXo3rxkIYdD
8L3+ilKl9Gw7mykY0i6KDynDZaOTkuVjnuXtVWwOQCMzH67hHaJqwckUbdRBBKaE
3hQupdBDhD//yrTKmonYBw1LPFiaAYqENQrZJBy/P+419foAYd5dTWgpQsRqVwOa
DHqjJtMy/KlqK/3AeuBKtpBOPg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:15 2026 by rpki-client