
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File: tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier: au6iK4xUR65aRArE3kI4ARUKiTVWuIplx2ZwNP+Ck58=
Subject key identifier: 91:14:E4:39:16:7D:C1:C0:E8:40:D9:60:5C:8D:0C:F0:F2:71:29:91
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number: 6F
Signing time: Fri 17 Apr 2026 07:43:26 +0000
Manifest this update: Fri 17 Apr 2026 07:43:26 +0000
Manifest next update: Fri 24 Apr 2026 07:43:26 +0000
Files and hashes: 1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: Pvzg+jdIDVTIMA17WX+Fk3Es90a4VdPJgWuhYlof+Og=)
2: 66803488347111F192C9DB19A5833773.roa (hash: O0FWH1yqNTuHYXQLYg672i/t/I5VJq45gLlkZ6HLoGI=)
3: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: OMcpNf88AE2cPyG8acihz1Bkk8xz4Ahg+L34+LyVpoE=)
4: 048707902E3E11F18FB4E28692833773.roa (hash: K3CKFq9dj9GC5sZcbxnP9CeuT3Ddzdh/+xr7StrmVGQ=)
5: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=)
6: 03E9601C2E3E11F18FB4E28692833773.roa (hash: KBDF+qCnvbkS3zAFCAW3rveKS8qVa82y4wo236YyG7M=)
7: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
8: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: hNDoKvtTaJr3/l4SpLoIbXrusm7ipL9CQHs8BHkoeEc=)
9: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Validity
Not Before: Apr 17 07:43:26 2026 GMT
Not After : Apr 24 07:43:26 2026 GMT
Subject: CN=69e1e49e-4bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:b5:d2:ba:38:ac:f8:e7:ef:a3:34:54:8b:
e5:f1:5f:fa:83:9f:18:30:69:c9:96:13:2a:d9:fc:
e4:14:03:1a:e6:42:3b:20:08:74:6b:fd:dc:da:f0:
32:86:77:45:7f:06:24:98:af:d6:26:bd:c6:42:a1:
50:92:1f:47:ce:da:0b:cd:f4:86:ed:5f:6f:78:36:
8d:fb:4f:2d:e9:55:67:50:86:49:c1:73:83:03:e4:
19:a2:37:1d:e7:b8:7e:8b:b8:0a:e5:4d:a2:3e:fb:
f2:a2:46:4c:dc:c1:f8:48:9f:17:8e:2c:65:2e:d9:
ca:b5:6d:78:9e:e4:8f:d1:f8:18:be:43:46:05:44:
30:7a:8a:c6:6c:8d:cc:d3:17:49:d9:10:9b:72:d0:
7c:31:d9:8c:fd:ca:14:1d:32:c3:16:31:50:08:6c:
5c:42:4c:95:02:cc:d6:ae:a0:2a:ad:a6:07:8f:c6:
a9:f9:92:28:de:56:29:3e:89:c7:b1:80:a2:d2:e2:
1f:03:23:82:aa:13:44:5b:63:71:31:b6:03:90:c4:
fa:95:c6:26:9b:99:8e:f3:f4:8d:ac:b5:4b:6e:90:
ef:97:64:22:98:ea:7a:09:32:21:95:eb:64:12:46:
d9:4e:b9:1e:25:88:a4:d2:4f:f7:2c:82:41:7b:2b:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:E4:39:16:7D:C1:C0:E8:40:D9:60:5C:8D:0C:F0:F2:71:29:91
X509v3 Authority Key Identifier:
keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:05:71:01:63:5f:81:88:3a:72:55:aa:1d:a2:dc:67:c6:a0:
c5:13:e5:a2:f9:e4:c4:e1:32:49:a6:e2:fb:e6:7a:24:43:a6:
ed:4c:78:63:79:2b:c2:e1:f2:2a:77:5e:ec:8c:5a:81:3a:b0:
1e:53:ad:07:9a:49:02:ed:76:22:69:45:a7:49:f8:a9:e3:40:
f8:0e:e3:3f:37:25:0a:ce:74:9e:3a:ab:25:2a:3a:ff:0b:46:
54:fc:5f:49:17:78:f1:9d:65:48:01:97:bd:ad:d8:18:27:2d:
21:15:77:68:3b:4e:8b:8f:9d:52:fe:55:ed:c2:97:4f:7c:8e:
46:e7:c1:91:89:ad:7b:a6:31:26:9e:54:03:58:84:31:76:c9:
ff:fb:e7:15:7e:e8:83:cf:4b:09:ef:88:dc:e3:d4:e2:e6:9f:
de:c2:5d:16:7c:a2:c0:64:e3:0c:c2:3e:76:5a:8e:bf:0b:fa:
4a:33:23:b1:86:99:98:a4:70:bf:b0:af:0e:fe:4a:eb:d5:29:
98:d3:1c:94:1c:4b:69:95:fe:53:3f:d2:55:6b:c6:c9:28:c0:
63:bc:95:8d:30:3a:4c:d2:cc:50:d9:a1:c5:09:36:39:65:df:
73:2a:71:b0:b4:13:93:4a:f9:a7:10:47:96:a3:64:f0:32:0e:
40:1a:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:50 2026 by rpki-client