
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
File: 8D39OxYGRUyhuoaQPnmtpwULoWo.mft (raw, json)
Hash identifier: R3JeuJJQiKaVcToYvPrRfWScI8n3o5aMGJX/gewBut8=
Subject key identifier: 37:37:A9:52:A1:8F:A6:26:53:FF:7F:DA:2C:39:C0:25:56:C9:F6:15
Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
Certificate issuer: /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
Manifest number: EB
Signing time: Sun 11 Oct 2026 07:10:21 +0000
Manifest this update: Sun 11 Oct 2026 07:10:20 +0000
Manifest next update: Sun 18 Oct 2026 07:10:20 +0000
Files and hashes: 1: 8D39OxYGRUyhuoaQPnmtpwULoWo.crl (hash: MhjtaZQSK452APRKrc9wneOq1NTdqrdwdP6bIqYKulg=)
2: 2E834C9C719311F08B21BD17C4F9AE02.roa (hash: hwLwpZ+vQeoj4DNhd3FXkI8NzzeWy3sKRVcJ7YZLrN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Validity
Not Before: Oct 11 07:10:20 2026 GMT
Not After : Oct 18 07:10:20 2026 GMT
Subject: CN=6acb365d-425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:77:fe:96:f5:a7:ea:6d:ea:b4:18:c0:e6:
f7:18:ec:0e:3f:55:1a:31:20:b6:d3:11:94:e7:78:
28:63:6b:15:44:95:55:5c:4e:0a:1f:6a:66:86:33:
69:47:3e:0b:7c:73:d0:df:74:ea:e0:20:f0:e3:42:
5e:d8:9b:07:40:22:d6:39:93:aa:76:f4:0a:b0:d9:
ce:68:df:f4:1e:e7:ba:ba:d2:24:4b:57:93:22:ad:
ba:a7:33:54:18:69:92:88:ec:a2:a5:b3:cd:83:38:
50:82:b5:53:d9:3d:95:31:fe:3e:0b:b3:27:fd:98:
a0:16:59:65:23:7d:46:64:a3:ab:b1:ad:f3:12:51:
d2:fd:fe:51:57:f2:b5:d8:e1:ba:a1:92:80:91:fb:
4f:52:ed:bc:cb:2b:b9:b7:af:fb:ca:c5:6d:d3:cc:
51:3a:52:27:8b:86:21:86:20:b2:84:ca:93:8e:d2:
82:fc:33:78:63:f8:29:4b:91:95:c6:ba:97:18:58:
ff:4a:c0:eb:17:60:73:12:0f:a0:73:47:97:0a:82:
18:1c:1d:f5:74:13:e5:3f:3c:90:ec:81:15:72:83:
02:2b:d2:24:4f:7c:1a:6e:8b:cd:39:89:c8:a5:b1:
e9:25:dd:4f:f5:b3:90:8b:bf:bc:0c:0d:f3:e5:4e:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:37:A9:52:A1:8F:A6:26:53:FF:7F:DA:2C:39:C0:25:56:C9:F6:15
X509v3 Authority Key Identifier:
keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:f3:31:01:e8:2d:fe:03:45:33:5e:aa:a6:03:8e:0d:55:8f:
66:cd:5e:12:ea:35:4a:2f:35:f5:e2:9d:71:e7:9e:da:2d:2b:
2a:43:06:f2:d3:f5:34:9e:6a:8c:fb:a6:62:99:69:af:f6:94:
5c:de:c9:4f:e6:2b:2c:a8:2a:dc:fe:a7:85:3a:b3:ef:7c:22:
9e:f0:c9:8f:8e:1c:e7:8f:ce:be:61:58:2c:b5:e1:69:02:3f:
fb:e1:16:97:64:db:10:2e:97:9b:f4:24:40:df:fb:ac:59:af:
30:59:be:92:6a:34:50:2e:94:a2:46:f3:cf:56:f1:93:8a:43:
ed:2b:c7:74:2e:98:09:dc:89:36:d2:d4:21:1b:60:43:b7:6e:
4e:7e:90:94:12:14:ef:ae:d1:18:ad:44:fa:78:5a:4d:97:8d:
94:c5:2f:51:59:9a:f1:65:52:73:b9:2a:61:55:59:b1:8a:75:
24:50:9e:31:84:c4:f3:64:b9:94:4d:7f:cb:70:57:b0:9c:d5:
59:75:ea:8f:45:f1:1a:9a:16:d6:62:ac:4b:78:c7:4e:41:b6:
eb:82:d5:46:70:18:8c:15:fb:96:d8:ef:4c:54:97:36:d1:38:
6d:35:05:54:59:1a:08:f3:74:a5:d0:2c:ee:e5:e9:d5:cf:c9:
62:48:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:59:28 2026 by rpki-client