
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json)
Hash identifier: 8Pg2O1Q/AD4oh1vnuNGfWmPpH6rqf3BVQthGQLjUDLw=
Subject key identifier: B9:5E:A6:82:0E:7E:8E:F4:47:3D:B0:0E:78:22:8A:34:76:85:14:1D
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0BAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
Manifest number: 0B4E
Signing time: Sat 28 Feb 2026 19:34:26 +0000
Manifest this update: Sat 28 Feb 2026 19:34:25 +0000
Manifest next update: Sat 07 Mar 2026 19:34:25 +0000
Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: V0BhFjUZz320fmMoRwiLY+n3xWlW/w8SjeBjCshlt+k=)
2: 58F54538023A11F1A52751391D3D8C67.roa (hash: sjToO6dGrUmEg8eKBvZlqtXFqc9NKn9hAWr+CQvIOHc=)
3: 121EADE62F7011EF82514126C4F9AE02.roa (hash: Ggk4L4L5OqKbvJnFw7W1rW5JJcN5Zt+SHJCIjJMSok0=)
4: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: +GeY+3nzfxfGGtkbBKDt2xX2WXjnwHUxE0t1JDRZXWg=)
5: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: R6+4ss6mJMA2fcEMrX15U2Fp8fbdxhbZt9mRr5DW3z8=)
6: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 6RbxNEp3aAcRY9ABgjcNbqmStmri8VA4rw2gNzJyQ34=)
7: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: day2QfsK2GhqNsQUlv32u5aYAMW/wnELuNVvZR1uSgU=)
8: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 5Zn/NXgpFmO6vwefOP5YQZGHnsLFk/qGC1rRCPIC8NI=)
9: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: 5eFto7Xbd6SIdBIgHT1gzsw1kP93cMF3mG+IAAtdNqA=)
10: 3061606C730211EE89A20645C4F9AE02.roa (hash: WeaTbMf7BP2O/+pSf493EUl2h+/ILCKWUynSWVLQ+8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2987 (0xbab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Feb 28 19:34:25 2026 GMT
Not After : Mar 7 19:34:25 2026 GMT
Subject: CN=69a34342-4a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:0a:1b:bb:f8:97:66:72:e7:29:30:c8:a6:
99:7e:36:1e:77:d2:84:f7:ce:f4:3c:5a:87:85:cb:
68:24:34:51:88:01:b4:00:ce:ce:1d:83:2e:ed:67:
1f:a0:39:89:b7:1e:13:e5:2d:59:d9:5a:87:d9:3d:
5e:aa:70:f0:cb:34:86:5b:e2:0d:0d:03:87:1d:de:
e6:16:e6:91:16:ef:c2:70:22:42:99:de:34:fa:f2:
fe:82:40:58:25:e6:d6:04:51:3e:bd:cd:db:ad:39:
85:0e:70:c3:12:7b:04:c6:3a:d3:f7:51:8d:97:0b:
da:92:e8:05:51:e7:e3:58:4f:30:63:44:73:e7:c0:
c1:14:00:2c:5e:22:5d:32:67:14:a3:1a:f5:78:24:
6d:ed:70:e2:a5:6b:dd:01:2f:b5:06:e2:e8:e7:8c:
42:72:76:da:25:a7:2f:80:1e:7d:68:e3:e2:32:f0:
3e:50:31:35:18:20:67:7c:76:a0:cc:a1:8a:ff:5c:
df:a1:80:a3:c7:a3:f3:a3:08:15:03:f8:1d:95:43:
57:37:0d:5c:78:8f:0d:e7:df:29:b1:c5:36:d6:88:
49:6d:a2:37:5d:47:b0:d3:de:5e:aa:fb:84:d5:4b:
45:14:39:a3:7e:2d:b5:77:e5:06:c2:07:36:b7:aa:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:A6:82:0E:7E:8E:F4:47:3D:B0:0E:78:22:8A:34:76:85:14:1D
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:59:0e:4e:29:a1:46:7e:8e:ab:b6:43:35:47:c6:d5:77:
89:6e:35:0c:da:9a:61:f4:19:50:c3:46:70:89:32:d8:f8:5b:
f8:30:7a:97:31:e0:24:12:45:24:bf:eb:fd:7b:ea:3c:2a:13:
74:58:cb:b3:26:c3:7a:8e:b5:30:41:10:1f:52:4a:0c:3a:97:
a4:2b:05:c3:2f:2b:e8:bf:0e:03:6a:93:b6:c9:2f:7d:06:96:
bc:f1:63:e8:f1:2f:be:ed:9e:86:3c:c1:ef:bf:98:ac:2c:3f:
4a:33:44:24:71:46:e0:d0:f7:3f:5b:cb:81:6c:ed:6e:dd:b7:
ae:91:e9:11:07:73:c8:4d:44:18:6d:f5:a2:14:dd:7e:6f:a0:
75:52:cd:7d:52:2b:3e:14:fc:13:86:3c:61:9b:0a:a7:b8:00:
42:9c:9a:ee:33:5e:6e:88:d2:f0:dc:18:81:64:33:c7:13:f0:
95:90:6b:16:1f:be:6a:a0:f0:ed:b4:5c:df:b9:57:95:1b:4b:
aa:da:f6:de:68:1f:bd:3b:b2:25:b1:0c:76:fe:e9:d3:ab:6d:
dc:8c:0b:82:3d:4d:92:16:ff:e2:4c:34:ec:2a:8f:cf:83:3e:
8c:fe:cb:fb:64:15:7e:f3:9d:ce:95:9f:1f:05:11:24:39:37:
bc:af:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:27 2026 by rpki-client