
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
File: 4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json)
Hash identifier: qQ8Im6EoC0PVQv9LzUoL8q5owvMO76CTlTihmX6aFcg=
Subject key identifier: 07:27:AD:74:49:DB:53:D9:4A:10:F6:BF:6A:0F:2A:99:58:9B:4C:53
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial: 179A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
Manifest number: 174B
Signing time: Mon 02 Nov 2026 16:43:43 +0000
Manifest this update: Mon 02 Nov 2026 16:43:42 +0000
Manifest next update: Mon 09 Nov 2026 16:43:42 +0000
Files and hashes: 1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: sFXGOlTWisILEVFVNZ5ymJcxo149mEyjd1acI+cMjcw=)
2: 56C8FCACE38011EFBF195482C4F9AE02.roa (hash: 21/YXXRPLk5L/rQp1wiKIAMpRY2JLU1KFkt47LtF7pk=)
3: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: CAlcqJi6d37i/TxCFyf2svSkqxoKtgQLsLZWuq3dcoE=)
4: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: Ab5UYVud2bNs5oNT54NbMqTkTRHIRZLylz4Z+NqHgPA=)
5: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: aVhexx8H4O1ah6UPgLMQpAuILA0ylRRun3N3rQAJ9MU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 16:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6042 (0x179a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Validity
Not Before: Nov 2 16:43:42 2026 GMT
Not After : Nov 9 16:43:42 2026 GMT
Subject: CN=6ae8bdbe-bd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:78:f2:73:93:73:0a:be:6f:cc:99:3d:d9:
d2:55:7b:f9:72:67:c7:43:00:99:d5:d9:2f:99:2d:
71:2c:92:78:af:a2:2a:ae:6c:53:52:e8:b5:2b:a0:
88:8e:27:0b:b9:bd:ca:a3:f7:e4:f1:f3:79:8c:0f:
54:24:e8:ab:c2:c2:53:aa:a0:a5:bd:de:75:c1:f8:
b6:77:74:df:ca:64:4d:99:2e:05:c1:3e:d5:1d:da:
fb:e5:96:46:09:34:67:a9:e9:c3:da:cb:70:da:40:
d9:9b:38:6a:e5:bd:f3:3f:fa:53:75:0f:0c:1b:46:
ef:f4:e0:d7:e8:7b:b5:e4:56:1a:16:27:25:17:4b:
f2:72:93:f7:c5:b7:60:e6:21:d5:01:f6:41:09:41:
08:ab:b8:c3:86:21:cf:c2:4c:ac:08:0d:9d:95:2a:
6a:e0:73:61:26:9c:ee:9c:5d:8c:bb:f8:e2:07:f9:
fe:3d:22:64:a6:51:a7:8d:2e:cf:ff:b7:92:3e:35:
7f:e0:13:f7:9e:98:e9:4b:dd:9d:2e:d2:d1:1b:7e:
df:ce:ef:00:97:e5:19:3e:22:2b:4b:f9:1b:76:7c:
80:9d:47:66:12:ff:01:21:a8:1b:6e:fb:10:1a:23:
4c:d1:ca:65:ea:a4:20:c2:63:80:21:fc:12:3b:5b:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:AD:74:49:DB:53:D9:4A:10:F6:BF:6A:0F:2A:99:58:9B:4C:53
X509v3 Authority Key Identifier:
keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:72:d2:18:b6:ff:0c:0e:fd:1a:1a:88:f4:b2:ea:e8:ca:94:
65:31:7d:d6:70:5a:9e:19:df:aa:63:16:54:08:fb:12:e5:1e:
49:dc:0b:df:d2:f0:ef:e1:7e:e9:b1:32:44:20:80:b9:cf:2c:
9e:a4:17:54:41:34:f9:eb:ad:24:31:c7:a5:11:ee:85:48:be:
e5:0e:22:b9:af:9b:43:1a:d8:54:75:e1:3b:37:ce:1c:1e:8c:
0f:e5:6e:da:25:77:04:c1:61:4c:ab:b6:9c:cf:8d:1e:2b:40:
84:fa:23:e1:ce:ad:6a:2d:76:44:91:00:6b:0d:ab:2d:40:ca:
28:d5:73:d9:e1:ef:4b:fa:12:30:a9:b3:f1:d7:31:26:da:7d:
94:05:5c:58:78:94:5a:7d:a9:d6:26:42:c4:03:44:f0:5c:c7:
35:9f:b8:93:f4:a4:58:23:73:25:e6:7b:ea:f0:d6:be:15:4b:
0b:c9:ad:e5:d8:49:38:99:a3:bb:31:bc:94:75:fb:76:f0:b5:
fd:15:df:ba:d4:72:70:15:0a:f5:17:f8:a9:a0:2f:8a:61:20:
2a:d9:6c:29:ce:82:a2:b1:36:51:46:a9:d7:49:f4:a2:69:8c:
9b:a5:b9:61:0e:12:eb:c8:5b:3d:e4:d0:ee:86:d7:71:6e:e3:
06:72:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 06:40:08 2026 by rpki-client