
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
File: 8D39OxYGRUyhuoaQPnmtpwULoWo.mft (raw, json)
Hash identifier: 0aB3slKrNiJqpiZU2P/wSEuYqgEVEbZz1scFIpc2THM=
Subject key identifier: 6D:A2:6F:98:AB:46:31:BD:CE:52:BC:41:27:B5:20:56:D5:E0:84:9B
Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
Certificate issuer: /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
Manifest number: DB
Signing time: Fri 11 Sep 2026 06:48:27 +0000
Manifest this update: Fri 11 Sep 2026 06:48:26 +0000
Manifest next update: Fri 18 Sep 2026 06:48:26 +0000
Files and hashes: 1: 8D39OxYGRUyhuoaQPnmtpwULoWo.crl (hash: pd/frHBrWZl64xgoD+bQwxkmwCoOMSB1PHq50SzfnZQ=)
2: 2E834C9C719311F08B21BD17C4F9AE02.roa (hash: i0ejSX4cEEF+ZTTkhJgsNORA6kV2rL9107sDWeoRPts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Validity
Not Before: Sep 11 06:48:26 2026 GMT
Not After : Sep 18 06:48:26 2026 GMT
Subject: CN=6aa3a43b-10d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:d2:16:3e:ea:f1:9e:14:14:26:68:97:4e:
f7:16:47:f7:1a:eb:f1:a9:20:d2:82:71:aa:b2:8c:
05:2f:b8:1e:6a:53:16:c9:9e:fc:9b:0e:99:d0:5e:
65:64:3c:52:2c:9a:96:0c:64:bf:59:bd:0c:99:50:
fd:cc:df:26:c5:86:78:b9:13:24:4e:f3:70:c0:ba:
cd:2e:1d:ff:5b:09:8c:92:a5:4b:1a:2c:62:38:80:
b8:3c:fa:72:3c:63:ef:57:17:db:c8:16:ba:50:a5:
55:ea:1a:19:5c:b4:a1:fd:93:66:b4:d6:4b:0f:f3:
c8:d2:d3:b7:c0:e5:5a:a3:06:d3:40:d1:06:9a:e8:
23:33:88:09:ba:60:e9:65:6a:6f:47:44:e3:f2:e1:
7b:1f:0e:2d:c8:aa:97:d0:3a:11:ac:e8:77:ad:a9:
ee:1d:a6:37:27:2d:29:ca:0d:76:a0:d5:2f:86:88:
8c:2e:3c:93:4f:a9:32:3d:00:c3:99:fc:c9:2f:f1:
f8:13:91:52:df:f7:c3:38:93:8f:6e:76:9a:39:39:
a9:ad:f5:26:4d:27:19:c9:06:c2:10:32:d5:dd:58:
5a:48:81:64:7a:b1:80:a7:95:88:23:d0:ba:ef:03:
1e:5c:b2:01:91:a2:2f:04:67:ad:e6:96:6e:f0:60:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:6F:98:AB:46:31:BD:CE:52:BC:41:27:B5:20:56:D5:E0:84:9B
X509v3 Authority Key Identifier:
keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:0e:3d:c8:05:ec:e8:d6:8a:55:21:4c:65:eb:41:54:64:22:
24:46:b6:5a:25:1a:7f:44:ba:6b:0f:10:de:99:87:32:a1:5e:
ae:0c:02:4c:dd:ce:21:48:9a:92:da:61:cc:72:28:61:ff:88:
1e:45:a5:62:ce:14:49:56:c4:ed:ee:fc:03:f6:17:04:63:8e:
b1:ca:f2:a6:a2:ae:01:15:43:20:cb:56:64:97:ae:d5:c2:bd:
28:08:08:f9:ca:f7:04:9c:54:d2:9f:b8:1c:d1:e9:65:e0:76:
c9:47:cb:bb:17:33:73:1b:a5:e9:6e:6d:1e:7d:90:a2:8f:1b:
59:4d:00:c5:16:04:56:8a:22:f9:28:0d:6c:bd:f1:bd:2f:aa:
94:4f:7b:be:23:08:8c:88:37:4c:14:79:d6:19:db:00:d6:fb:
8c:7e:28:e7:ce:ae:8b:16:d0:4c:74:0a:0b:26:36:4c:88:06:
ba:57:64:d0:6b:93:c4:99:36:bf:58:de:63:77:01:72:a8:37:
a6:1e:a1:8b:e7:69:3c:c4:96:2d:81:bd:7c:fd:ce:f7:cc:23:
f9:0d:36:1c:fc:dc:db:4d:f2:38:cc:3d:36:2a:c2:31:57:4c:
92:da:91:7e:d2:06:ea:e6:33:cf:4a:86:69:83:be:83:fd:bb:
d1:e5:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:35 2026 by rpki-client