
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json)
Hash identifier: wFepRLYF+c/lQks7SEEMiyJt7IVtwHFjOxIxMyn8X58=
Subject key identifier: D6:86:85:C2:F5:AD:83:CB:5F:2C:23:6E:D5:78:24:A3:B2:2A:33:1D
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial: 046F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
Manifest number: 0460
Signing time: Sun 11 Oct 2026 00:11:42 +0000
Manifest this update: Sun 11 Oct 2026 00:11:42 +0000
Manifest next update: Sun 18 Oct 2026 00:11:42 +0000
Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: YXhsdeLBqvW9ZVNI1b38ipDkTqD7teWPXT589RF1uG0=)
2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=)
3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135 (0x46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Validity
Not Before: Oct 11 00:11:42 2026 GMT
Not After : Oct 18 00:11:42 2026 GMT
Subject: CN=6acad43e-8567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:f5:b4:98:7c:33:b5:5c:2c:da:73:ec:76:
ea:35:68:b8:e2:3f:1b:66:16:f6:f6:9a:a2:69:45:
e2:e7:87:41:23:14:7b:7d:1b:6b:c5:0f:38:d0:6e:
e7:24:02:03:d2:a8:ec:de:18:16:2e:22:22:b6:21:
d9:d3:cb:76:1b:6e:a5:0e:bd:d2:cb:88:8b:63:a4:
0b:b5:b3:ed:d8:10:61:4f:74:9e:62:d8:31:c1:39:
f3:69:72:65:3e:ed:63:dd:6d:c8:bc:37:f6:ad:e6:
84:aa:b8:8a:fc:63:ed:95:d7:6c:31:ca:4b:7a:51:
db:a0:2d:5a:49:09:19:bc:9b:0b:a7:89:7b:fa:6e:
3a:d3:c4:cf:57:bd:ee:f3:e2:ee:10:be:91:04:75:
ac:26:cd:9d:19:fa:8b:35:7c:f2:04:ac:c1:39:1a:
79:17:58:69:0f:56:aa:4f:6a:03:1c:c7:07:b3:43:
2a:53:07:01:15:20:30:df:82:0c:de:34:72:f0:bf:
8a:c6:42:c7:62:56:90:8a:74:d3:48:bf:40:2a:84:
b0:ef:a4:7b:7e:29:c3:54:2a:e2:1a:57:5a:2e:38:
1c:25:05:03:ba:b3:4b:a5:d1:ab:f5:06:bf:d4:e8:
40:84:a3:a1:d3:e2:fe:7d:b1:73:87:bd:95:1b:c0:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:85:C2:F5:AD:83:CB:5F:2C:23:6E:D5:78:24:A3:B2:2A:33:1D
X509v3 Authority Key Identifier:
keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ef:57:2e:a1:cc:2d:1a:ce:a5:da:66:40:87:e3:26:65:95:
94:e8:aa:08:c0:56:0e:37:6d:b1:39:84:ba:82:c8:eb:84:db:
5b:1f:78:4c:68:58:6f:29:7c:64:1e:4b:f0:61:44:56:7c:95:
06:c0:a6:0c:dc:20:01:b1:5c:e8:5f:91:d0:ca:5f:18:c6:61:
e9:e7:67:f9:e6:73:c3:52:1b:a1:ba:bc:ae:4d:b7:12:99:98:
ce:98:c1:ae:23:a6:83:5c:a3:c9:9e:be:49:21:e1:36:9b:8a:
cf:04:55:b1:17:4e:37:9a:dc:d6:bb:f9:f7:a6:6a:e1:75:d5:
2d:b4:ba:e0:14:a5:ec:6b:68:47:17:c8:0b:4b:e6:a7:35:68:
de:b9:a1:6a:c7:eb:b7:11:a2:0c:c0:8f:3c:62:a8:b0:18:68:
49:29:74:d5:eb:d9:b5:a6:c4:53:74:26:d8:d8:aa:65:06:a1:
f5:76:ad:38:9f:3a:7a:f8:29:3f:33:7f:14:93:80:38:06:5d:
17:f9:00:4f:7f:a6:bb:88:cf:36:fd:9d:00:dc:17:88:b7:da:
4e:87:02:8f:4b:b3:da:70:31:e4:7f:70:64:b8:38:87:a2:78:
37:8c:08:7b:9a:a6:39:c6:30:47:4a:40:47:a1:1e:fb:8a:95:
ea:32:ff:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0
Q0FCMkI4MjMwHhcNMjYxMDExMDAxMTQyWhcNMjYxMDE4MDAxMTQyWjAYMRYwFAYD
VQQDEw02YWNhZDQzZS04NTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzv1tJh8M7VcLNpz7HbqNWi44j8bZhb29pqiaUXi54dBIxR7fRtrxQ840G7n
JAID0qjs3hgWLiIitiHZ08t2G26lDr3Sy4iLY6QLtbPt2BBhT3SeYtgxwTnzaXJl
Pu1j3W3IvDf2reaEqriK/GPtlddsMcpLelHboC1aSQkZvJsLp4l7+m4608TPV73u
8+LuEL6RBHWsJs2dGfqLNXzyBKzBORp5F1hpD1aqT2oDHMcHs0MqUwcBFSAw34IM
3jRy8L+KxkLHYlaQinTTSL9AKoSw76R7finDVCriGldaLjgcJQUDurNLpdGr9Qa/
1OhAhKOh0+L+fbFzh72VG8C/PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaGhcL1
rYPLXywjbtV4JKOyKjMdMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0
MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx
bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn+9XLqHMLRrOpdpmQIfjJmWVlOiqCMBWDjdtsTmEuoLI64TbWx94TGhYbyl8
ZB5L8GFEVnyVBsCmDNwgAbFc6F+R0MpfGMZh6edn+eZzw1Ibobq8rk23EpmYzpjB
riOmg1yjyZ6+SSHhNpuKzwRVsRdON5rc1rv596Zq4XXVLbS64BSl7GtoRxfIC0vm
pzVo3rmhasfrtxGiDMCPPGKosBhoSSl01evZtabEU3Qm2NiqZQah9XatOJ86evgp
PzN/FJOAOAZdF/kAT3+mu4jPNv2dANwXiLfaTocCj0uz2nAx5H9wZLg4h6J4N4wI
e5qmOcYwR0pAR6Ee+4qV6jL/sg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:54:07 2026 by rpki-client