
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
File: 8D39OxYGRUyhuoaQPnmtpwULoWo.mft (raw, json)
Hash identifier: HmOHf3AdSEvCLc7glRg4uxNeS5sdIdS9njEzANbTw9A=
Subject key identifier: FF:15:FB:19:BC:5B:6F:69:51:B0:97:DD:F4:45:D8:19:2D:51:F8:D7
Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
Certificate issuer: /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
Manifest number: AB
Signing time: Sat 13 Jun 2026 07:22:55 +0000
Manifest this update: Sat 13 Jun 2026 07:22:55 +0000
Manifest next update: Sat 20 Jun 2026 07:22:55 +0000
Files and hashes: 1: 8D39OxYGRUyhuoaQPnmtpwULoWo.crl (hash: gd/Bum/s+fISgXca5g2bBRPiR08u2SRcXGOgl01u4bo=)
2: 2E834C9C719311F08B21BD17C4F9AE02.roa (hash: t5TqNGBR7Q7nzuoPtLG9kWrP42CIUOt4JnTNGKKXObQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Validity
Not Before: Jun 13 07:22:55 2026 GMT
Not After : Jun 20 07:22:55 2026 GMT
Subject: CN=6a2d054f-7f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:3d:59:6e:43:18:a3:f3:b0:f0:91:6e:6d:
72:1c:21:24:50:25:4e:06:3d:13:cd:2e:76:4f:a8:
e6:11:32:7d:f7:a2:83:ec:5a:7f:af:1e:15:b4:5f:
2e:f1:37:28:21:7f:20:15:bc:b4:17:c2:bb:7f:f7:
d6:ba:1d:07:0f:3f:10:ad:bf:4a:a4:24:f6:1f:78:
c5:07:b4:26:0e:c1:b4:4c:a2:b4:18:8d:fb:20:05:
08:f7:66:d6:3f:e4:db:ea:5f:00:21:2e:5d:f4:ab:
7e:ee:e3:80:e3:0e:eb:94:ee:22:2e:df:e2:84:91:
de:01:d5:91:4f:f7:e7:f8:07:78:8e:03:4b:e0:7a:
a4:e3:da:78:c8:85:38:ac:78:19:1f:df:b9:b1:5c:
fc:df:30:24:a8:8d:82:39:34:c0:ad:15:05:e2:cc:
49:05:c9:c3:91:c1:e6:8f:54:d7:3a:fd:3f:17:de:
e7:90:08:2f:cc:8c:33:f9:ed:b3:bd:7d:3c:1f:09:
25:76:03:05:79:88:bc:b7:e6:ba:0b:48:5b:04:a8:
21:9e:b0:f2:89:d5:d5:33:40:23:79:36:14:de:0e:
d1:cb:5e:6a:e1:b7:ba:f9:34:c1:93:f9:35:e6:83:
fa:83:34:50:a5:9d:ba:4b:2f:73:0d:47:3f:d6:f4:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:15:FB:19:BC:5B:6F:69:51:B0:97:DD:F4:45:D8:19:2D:51:F8:D7
X509v3 Authority Key Identifier:
keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:de:02:cd:b6:89:50:c6:6c:8d:ac:24:5a:9a:d4:a3:6e:43:
53:41:ef:fc:86:56:d2:e6:42:7c:96:33:c1:80:51:bf:0b:0f:
38:c4:fa:3f:dd:dd:dd:11:35:c2:45:9f:8b:a6:5e:71:c5:cb:
bf:ad:4c:37:6c:ae:49:6e:d2:db:6e:e7:03:2f:6f:ed:37:1c:
47:a5:09:bb:5a:24:8e:a1:b4:dd:50:e8:94:92:24:ff:65:0d:
d3:ca:ae:6d:4b:a1:37:00:b8:f3:3c:19:7a:03:77:6e:a6:80:
26:c2:67:b9:14:d5:d3:ae:c5:e4:5b:f0:be:ba:53:95:79:44:
44:ec:c9:4a:8e:41:52:e7:85:9b:c3:98:a1:01:6a:b1:e0:ab:
e9:1a:24:a5:ee:9f:aa:d5:2a:2d:e2:25:74:7c:58:32:59:5d:
f0:f9:a5:3e:14:92:40:88:70:93:58:d5:6e:cc:9e:7d:3d:bb:
dc:8c:d4:76:34:c6:e8:5b:ee:0b:b9:93:7b:ff:31:2a:ed:a6:
2b:59:1e:78:86:dc:39:db:84:c2:fa:30:06:8e:bb:7a:1c:a0:
79:1c:38:ef:a4:c4:fa:b6:8f:63:aa:dd:68:f4:b7:03:30:e5:
f2:df:9a:bb:b2:8c:af:fe:a0:03:02:f6:28:f9:54:d5:af:f8:
63:75:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:46 2026 by rpki-client