
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json)
Hash identifier: BqBpdSSlBAermKIjSfRFKYVyq45DgmKVE7fNZMEmjeg=
Subject key identifier: 8C:FA:7C:71:31:F4:4D:83:25:35:59:3D:00:1B:ED:F9:06:DE:B7:72
Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Certificate serial: 361B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
Manifest number: 35C2
Signing time: Fri 02 Oct 2026 15:14:49 +0000
Manifest this update: Fri 02 Oct 2026 15:14:49 +0000
Manifest next update: Fri 09 Oct 2026 15:14:49 +0000
Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: Qitv/0IIkUpsByP/vuBOmnLCXCBm7NUGYWCZMgilsvQ=)
2: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: UJCq0SmFw9sWHh+96DNpsldPwu6Exl7/eRSPuxIMu8s=)
3: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: 3ziif94TVOuFGgAnIdAdmSRlr4qbjJdcHwPBQ/YLZfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13851 (0x361b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Validity
Not Before: Oct 2 15:14:49 2026 GMT
Not After : Oct 9 15:14:49 2026 GMT
Subject: CN=6abfca69-e653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:17:49:fd:ee:36:b7:17:b5:b9:6c:e3:34:
f2:3d:bb:49:58:99:7d:51:f7:22:f9:80:bf:26:29:
62:49:f0:3d:f2:06:1b:ed:3a:8b:ac:62:ce:27:08:
40:c4:bf:61:7e:54:6d:b2:f8:a0:c3:c2:36:3a:6d:
a3:77:78:03:61:1a:30:82:ba:e5:1f:10:bc:33:a2:
ff:03:cd:11:b0:47:d4:6e:a4:55:cd:21:f5:ba:c2:
8a:5b:8a:42:57:c5:80:1c:d7:58:25:67:9c:e9:04:
56:10:2c:2d:2c:a1:e8:fd:f4:70:ee:c2:fb:a2:b2:
bc:25:90:8c:a9:91:47:91:77:30:c3:b4:f1:7d:42:
cb:93:20:85:c0:39:c3:63:26:cf:b6:7e:f0:d3:17:
74:96:ab:5e:33:54:ef:3d:1f:11:da:b3:ad:68:79:
07:05:23:ea:6c:b2:a0:34:e0:17:95:9c:fa:83:17:
d3:fb:77:b7:a3:45:c1:89:87:aa:bf:32:1c:74:39:
02:68:d6:1d:1f:b8:ad:0a:18:13:23:26:49:f2:d1:
11:63:c9:31:96:5a:54:af:2e:c5:e4:f1:2c:05:be:
05:a0:88:9d:16:25:b9:2f:9d:e5:a5:3d:e2:f9:cf:
39:45:c8:4b:13:f9:06:33:56:7b:7c:22:93:ef:51:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:7C:71:31:F4:4D:83:25:35:59:3D:00:1B:ED:F9:06:DE:B7:72
X509v3 Authority Key Identifier:
keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:3d:43:28:ec:a4:99:9d:55:b0:3b:56:eb:7f:49:8f:4b:84:
69:e9:ff:47:af:84:e2:a3:a7:99:3f:28:b3:33:96:be:32:5d:
bc:42:44:ae:9f:86:63:3b:9c:b2:c1:42:8d:8c:a7:0d:6c:8f:
e6:3e:31:0e:4c:2e:cd:2f:84:88:79:71:eb:0e:0f:23:35:ee:
33:17:f0:55:10:04:63:3c:54:30:c8:d6:ad:fd:2f:a5:47:fe:
7c:ff:b3:1a:e0:d8:27:f3:18:69:cb:0f:e6:91:3a:fa:a1:68:
e9:0b:4b:5d:c8:02:1a:e9:6a:83:ba:2a:3f:74:3a:62:ec:de:
5b:c1:d8:05:14:fd:35:d4:08:e6:57:25:f7:25:ff:5e:ba:fc:
72:16:a6:53:e7:ee:b4:3a:52:51:0c:7e:d2:b9:65:5d:95:41:
8e:28:76:35:1b:b4:c6:7f:bb:7e:0c:a0:ef:4c:aa:d2:73:07:
5d:fd:e6:d8:7c:02:02:86:a2:4d:c2:db:24:e7:2d:ae:88:34:
ec:b5:61:0c:f3:56:ab:cd:23:9a:ec:0c:c9:2d:d1:b2:21:b9:
67:13:48:46:fd:11:f3:79:a9:62:6e:27:25:2f:d6:8d:21:cf:
64:9e:89:4c:68:ea:bf:d7:db:4d:0d:7d:56:70:f4:7d:c9:66:
96:18:26:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5
QzMzOTlDQjIwHhcNMjYxMDAyMTUxNDQ5WhcNMjYxMDA5MTUxNDQ5WjAYMRYwFAYD
VQQDEw02YWJmY2E2OS1lNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKAXSf3uNrcXtbls4zTyPbtJWJl9Ufci+YC/JiliSfA98gYb7TqLrGLOJwhA
xL9hflRtsvigw8I2Om2jd3gDYRowgrrlHxC8M6L/A80RsEfUbqRVzSH1usKKW4pC
V8WAHNdYJWec6QRWECwtLKHo/fRw7sL7orK8JZCMqZFHkXcww7TxfULLkyCFwDnD
YybPtn7w0xd0lqteM1TvPR8R2rOtaHkHBSPqbLKgNOAXlZz6gxfT+3e3o0XBiYeq
vzIcdDkCaNYdH7itChgTIyZJ8tERY8kxllpUry7F5PEsBb4FoIidFiW5L53lpT3i
+c85RchLE/kGM1Z7fCKT71Ea5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIz6fHEx
9E2DJTVZPQAb7fkG3rdyMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE
OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH
TEZVSF94Z01OdDZjTTVuTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWT1DKOykmZ1VsDtW639Jj0uEaen/R6+E4qOnmT8oszOWvjJdvEJErp+GYzuc
ssFCjYynDWyP5j4xDkwuzS+EiHlx6w4PIzXuMxfwVRAEYzxUMMjWrf0vpUf+fP+z
GuDYJ/MYacsP5pE6+qFo6QtLXcgCGulqg7oqP3Q6YuzeW8HYBRT9NdQI5lcl9yX/
Xrr8chamU+futDpSUQx+0rllXZVBjih2NRu0xn+7fgyg70yq0nMHXf3m2HwCAoai
TcLbJOctrog07LVhDPNWq80jmuwMyS3RsiG5ZxNIRv0R83mpYm4nJS/WjSHPZJ6J
TGjqv9fbTQ19VnD0fclmlhgm1g==
-----END CERTIFICATE-----
Generated at Sun Oct 4 03:01:39 2026 by rpki-client