
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File: tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier: uUHCpww1Vu/eqZAQ7rJSCARi8XbU6At8WKsL7OVtMzk=
Subject key identifier: DF:C5:3B:3C:65:18:69:B5:57:33:6D:28:A0:2E:7E:79:25:BB:F8:F7
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number: 010B
Signing time: Thu 27 Aug 2026 23:19:18 +0000
Manifest this update: Thu 27 Aug 2026 23:19:17 +0000
Manifest next update: Thu 03 Sep 2026 23:19:17 +0000
Files and hashes: 1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: EDVpbcOTx9zMbL6L5CFirElSkex+Mjq5rFUHIOwqPlY=)
2: 1A44C40648FF11F1AE16E45D93833773.roa (hash: q7YWA5SPxz9lm686m7SUsJ/DXFlxCYiGkRbWYzw7qBs=)
3: CFF23F5457FA11F1947AF89298833773.roa (hash: 70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=)
4: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: 4HZ72AqLXMi7Oo7fFl4c7MxtfYI6Hr7/6V24G0+ZxdI=)
5: A5C7652899C811F19653C7033B11F970.roa (hash: VH6+CPwDbSz/ISDti0F/lzMzff0Xd0BlKucLWf6GuRY=)
6: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=)
7: 0E6E84F47A6011F1976E05638BA30FBC.roa (hash: HtUuAkol0mHQrD42lO6MoPJ+Ejb03iZZDhqfCwpcfTY=)
8: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
9: 8FFB3BA07E4A11F1907D372082A30FBC.roa (hash: 2pEoKCofwg8TjGaQHu2CywBBegMX4ui6vfX3Ybywow4=)
10: 0F05CF767A6011F1976E05638BA30FBC.roa (hash: 7B1bqD+6h9jyiiQRYsB8Q16/B9nLv79GenM8klf3G4g=)
11: DF3E21307BFE11F198B5A8F78EA30FBC.roa (hash: NT30pur8xhY9PcKqmg6IwjPQmddy3T3G46Qh5vdQmt8=)
12: 0A4D26588F9811F187E520485C11F970.roa (hash: 3DRYyDNZn0xnswRBJSAxhjSfQjHsJA8mc7gZgee0QnE=)
13: 04910FD2A1A311F1B09ED42E6611F970.roa (hash: YhlkiTpSvf0X1OyOQCbOLY2s/yzWRi7pqB/JUq+tVwg=)
14: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: Rqu5d6Iyt5RvWg05t+Bs6MR1vP48lOt2FAst15Iu7bg=)
15: AFDB99509F4811F1BDC2004A6C11F970.roa (hash: iry4Gok9MWg5wkZ4t6nuYojldeVBIyHpbLvY2yW+ApU=)
16: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
17: A4BC6B5699C811F19653C7033B11F970.roa (hash: DqYOnXpwLmKKYMjJJokS/b8klmENEW8C0tDont5K9Pw=)
18: 2AFD25C0A10311F1ABE0DDFE3411F970.roa (hash: hiQnkW/a3aw4sFHOLrSxIlaGj0c/SkbWMstmNg55aU4=)
19: E798D1FC8C7C11F1935F28C96511F970.roa (hash: MmfMKjzryKAERgtdM3KI0fHay6JKngE1MhsrksxyP6M=)
20: D2D5E3A2429111F1A9B50A47B2833773.roa (hash: JNJnwJdlLDhaD1G/+iNzHqjRU67B9dzGcdSz2okho74=)
21: 3A70BFEC8C6F11F185F85D156111F970.roa (hash: XCQ95gaGyvxA7SNwZiogDe3J8T2Hjl5LHuJIkuOVpsw=)
22: ABCCE66C445C11F1AD9768EE92833773.roa (hash: 9iBZLQ9uktWZ65mu8nlRlZWV5ecR8Ndx/Ji4IWLuSGw=)
23: F0D3F4848BCA11F1B6094B9D6E11F970.roa (hash: ygG+s9/VdeRozgbqJQdp43lmOaEQSlvtB3/O60bIzqc=)
24: AFBA3B6099CC11F1A36A837B3B11F970.roa (hash: H/OHVH3gHMbF1VZocaHnojjYPp+zCG+XnnmhJV9htu8=)
25: 0D0B98CA4E7A11F19ABC63EAAE833773.roa (hash: MYyEucLCCxrI3FOhoLhSAqiBaqtBwcoKacKk+luCAfA=)
26: A2517D166EAD11F18743D71861A30FBC.roa (hash: EXYW07HU+PDuF2Sjxw7qGLvDdb4Ds1WxfwmESxYCYx4=)
27: 300E55D2645B11F19DFE990E7247A888.roa (hash: B8rZI43b2LUCXU8rE+xRAPdthQYs+K3MurmJh+dDXVg=)
28: 88221330A26D11F19D29C37F6511F970.roa (hash: z551IATQrx2AVRTObISYemc3UykqMiktmWx2mC6/YLM=)
29: 80CB68A68EC811F1946CF5105A11F970.roa (hash: Ow3UmxXOic3HNzm9LDvmvAwHX174ghnh0IzFZYxiFW0=)
30: A7349B8A499E11F19CE2905A97833773.roa (hash: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=)
31: 23967BF24A7711F1A7BED77BA6833773.roa (hash: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=)
32: 5B9CF7B8541011F193006E3293833773.roa (hash: UEPdDUTRui+ayW3AbcnrWggT880Cdd6becbTRiUrqEI=)
33: 1CC46568909611F1890912DC6B11F970.roa (hash: drMWeGvjuSnOVZHdmtOrR3brc+g+P+WWXAUVPnC2HuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 23:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Aug 27 23:19:17 2026 GMT
Not After : Sep 3 23:19:17 2026 GMT
Subject: CN=6a90c5f6-3ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:2e:f2:17:5e:6c:f4:f0:93:8a:52:22:3e:
78:75:37:88:3d:fa:46:00:44:3f:f9:2f:39:57:be:
2b:0f:b4:fb:17:91:34:5e:47:f8:c8:cf:2b:29:b9:
12:cd:a0:fd:b6:db:10:2f:3d:cf:ea:e9:86:e7:db:
05:66:e1:0f:62:b4:ec:66:77:6b:4e:d2:b7:6f:de:
ec:67:2e:e7:d9:8f:2f:65:e4:ac:3a:33:5e:00:11:
98:2f:b6:3e:f4:73:b9:94:18:1a:bc:c7:e2:f4:87:
2c:ee:ff:c3:7b:63:9f:fe:09:76:4d:bf:d9:86:7e:
11:74:62:f7:36:41:6c:31:01:c4:7e:78:bb:2e:7d:
61:a6:d9:4e:68:eb:21:3f:49:54:1f:9f:fc:b3:b0:
ba:7c:13:7f:95:31:c1:99:1f:50:bb:61:a4:77:e1:
d3:60:20:5e:6c:a6:0a:24:2f:1b:aa:4c:67:3c:73:
7e:c4:7f:14:33:f8:26:21:84:9c:41:e1:74:4c:f2:
b8:cb:c9:66:21:69:9d:ab:5c:49:a3:e3:77:ea:13:
65:eb:55:36:de:70:9f:8f:06:68:ed:05:56:11:7d:
3c:67:4f:a6:37:98:b0:1b:85:76:d0:42:2c:f8:2d:
13:d0:68:99:d3:7a:fe:60:02:d2:43:38:85:ac:b4:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:3B:3C:65:18:69:B5:57:33:6D:28:A0:2E:7E:79:25:BB:F8:F7
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:df:8f:96:96:dd:43:27:10:21:c3:41:bf:c6:81:08:b2:de:
95:90:00:52:a0:b0:42:ec:d8:8f:de:e6:5f:4e:65:25:b4:46:
b3:2c:ac:e2:d1:f4:1d:7d:76:31:ef:06:3b:94:af:6d:5d:bf:
4f:1b:4f:0c:42:3e:00:cb:25:d7:f2:ab:0a:ae:56:52:8b:c4:
13:1a:ca:2c:5f:dc:8f:a9:08:e8:0c:c6:a1:23:28:fc:3d:9f:
89:6b:2e:22:a1:9e:eb:1e:18:f3:c5:bb:82:75:d2:fd:c0:bc:
43:1a:4b:20:bf:42:c1:93:b7:61:fc:d9:34:69:af:f1:59:ae:
4b:29:92:4c:f3:fe:38:87:1f:ee:2e:86:07:11:6b:84:fe:c5:
6c:2b:c7:09:9a:3c:14:82:ce:30:62:1a:bb:c6:62:a2:3f:2f:
8e:40:32:bf:21:e3:d6:67:1e:fc:38:b0:44:ea:38:97:c4:67:
68:68:26:a3:67:9d:36:42:3d:94:ae:17:78:38:e2:8e:dd:e1:
e1:1b:20:ba:26:24:a6:2b:c4:0a:d4:da:07:1c:13:30:10:87:
89:69:df:2e:cc:02:dd:97:43:3d:9c:39:da:56:01:da:a1:ca:
d8:35:66:8a:c2:8d:45:68:54:d5:a2:7c:4c:62:89:8e:f8:f4:
be:bf:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:12:16 2026 by rpki-client