
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
File: 8D39OxYGRUyhuoaQPnmtpwULoWo.mft (raw, json)
Hash identifier: fHDwbFIE/kAtMCX+qEeTy9VzM858V0obR4Nzhx+6WkI=
Subject key identifier: 1C:40:6F:C5:92:22:99:4F:83:37:4A:C1:C3:E2:88:5F:6D:FC:B4:FC
Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
Certificate issuer: /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
Manifest number: 73
Signing time: Sun 01 Mar 2026 09:15:57 +0000
Manifest this update: Sun 01 Mar 2026 09:15:56 +0000
Manifest next update: Sun 08 Mar 2026 09:15:56 +0000
Files and hashes: 1: 8D39OxYGRUyhuoaQPnmtpwULoWo.crl (hash: ownuBEFCvkusqk59NVnErAijUse0pImyC+uadRmZmX4=)
2: 2E834C9C719311F08B21BD17C4F9AE02.roa (hash: xEZaltAHs6xaDqIw8s6QyjFcPbvBRTphdFeEPXv0CYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Validity
Not Before: Mar 1 09:15:56 2026 GMT
Not After : Mar 8 09:15:56 2026 GMT
Subject: CN=69a403cd-e324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:bc:1a:26:4f:ef:1b:05:2c:87:f1:d9:94:
e5:34:ef:58:d0:c1:32:ae:bc:c0:7b:22:62:3d:da:
23:31:50:ff:cf:91:e5:8d:60:c7:9c:80:4f:4f:98:
eb:59:2e:e5:79:a3:3a:12:ba:95:e6:77:94:27:86:
2a:ad:90:31:44:cd:13:ac:82:bc:0f:e7:ca:7b:4d:
bc:7d:77:3c:ca:40:e2:6f:18:bd:4e:e9:3e:b9:29:
49:9b:97:e4:c4:d7:f1:6a:59:bc:d5:15:ec:77:ea:
ac:71:ab:1c:59:56:02:85:f5:ea:81:80:0b:c0:5b:
b7:b2:7c:e1:21:b1:11:3a:46:66:36:5d:76:02:5d:
50:c1:2a:90:44:ae:f7:d8:ab:a0:d3:f9:84:4a:9f:
69:d5:1c:eb:9c:6e:4b:3e:3a:8e:0d:45:95:99:89:
1d:09:4d:c1:b5:36:42:9b:49:af:6b:af:ae:a3:ee:
f3:a4:81:c5:45:f6:b8:3b:c6:7a:ab:70:f1:58:a3:
de:c0:3b:95:de:38:e9:a9:db:8a:63:d1:11:05:77:
18:3b:6d:b4:08:8e:2d:76:29:96:18:15:16:da:8b:
b3:74:3b:c6:93:59:7f:b0:0f:82:62:1a:ad:d0:0c:
b9:7a:43:01:74:3f:cf:af:6e:57:3a:48:58:d4:9e:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:40:6F:C5:92:22:99:4F:83:37:4A:C1:C3:E2:88:5F:6D:FC:B4:FC
X509v3 Authority Key Identifier:
keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:de:aa:74:d9:10:80:77:14:58:72:ce:bc:01:e4:2d:29:bb:
d7:5c:85:86:fb:1d:80:8a:32:69:5e:20:48:4f:bc:16:b8:5a:
5e:b7:ef:22:1a:2b:5a:1a:ab:6c:52:50:bd:30:29:88:4a:17:
f2:b9:d1:45:cc:d0:74:16:5b:2e:dd:11:b7:0c:12:57:3f:da:
36:f2:49:b0:25:a8:26:d8:ec:c1:d0:9b:ed:6b:e5:3f:c0:68:
3b:f0:d6:99:9e:07:ba:21:09:9f:92:a5:bc:5b:c3:0a:64:5b:
b3:33:51:d8:71:28:06:01:a1:d2:9b:39:61:2b:d4:cf:f3:da:
e6:1a:e4:22:58:3b:c5:6a:67:77:28:d4:90:8e:5d:64:b8:28:
7e:13:84:06:c4:22:84:5c:69:73:ee:fc:63:48:ce:9b:29:ea:
53:1d:c0:bf:74:6b:03:a2:7a:eb:20:85:c9:b9:1a:2d:a3:80:
8e:cb:33:b9:56:54:8a:3c:86:04:21:71:d8:17:aa:28:c8:93:
fa:61:66:69:a3:89:27:55:e8:c5:e3:e3:0e:f4:4b:5e:14:02:
9c:9e:ab:29:d1:c2:05:17:ac:31:d2:33:fc:da:0d:40:7f:3c:
13:23:1a:b9:19:df:39:1f:97:db:92:73:f5:32:33:47:e0:f7:
39:b0:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:47 2026 by rpki-client