
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
File: 8D39OxYGRUyhuoaQPnmtpwULoWo.mft (raw, json)
Hash identifier: gh39whz3bnSmUXIoqvmCznlBx4EiXE2mz6LkIE/rKPA=
Subject key identifier: AB:AD:1E:CC:8D:E4:E8:4E:23:21:95:14:71:12:2B:18:74:35:C0:68
Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
Certificate issuer: /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
Manifest number: C1
Signing time: Thu 23 Jul 2026 08:54:49 +0000
Manifest this update: Thu 23 Jul 2026 08:54:49 +0000
Manifest next update: Thu 30 Jul 2026 08:54:49 +0000
Files and hashes: 1: 8D39OxYGRUyhuoaQPnmtpwULoWo.crl (hash: k2waYljxo6SmOolM2IOL1itim9c2CHcUMHxL5UQ4sX8=)
2: 2E834C9C719311F08B21BD17C4F9AE02.roa (hash: i0ejSX4cEEF+ZTTkhJgsNORA6kV2rL9107sDWeoRPts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Validity
Not Before: Jul 23 08:54:49 2026 GMT
Not After : Jul 30 08:54:49 2026 GMT
Subject: CN=6a61d6d9-33cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:8a:09:e7:3a:56:cb:47:bc:eb:99:cd:46:
28:a2:f7:1f:6a:b4:d7:7a:77:ab:86:16:5f:da:db:
0b:67:4f:06:9c:bb:e5:18:27:ff:ce:4a:0d:ac:22:
22:16:4b:0a:59:5a:66:4f:fa:d1:53:0a:65:1f:9a:
c7:23:28:c1:3a:90:d1:08:b0:71:d3:d0:a9:b7:7b:
d6:9d:87:a6:8c:7a:44:dc:a4:c3:d2:db:25:ef:30:
28:12:07:13:f3:d6:3a:fc:4d:ed:b5:1d:ad:77:54:
1a:04:b2:d1:21:01:84:cc:8a:0a:ec:9b:56:b8:f7:
9a:d3:5e:f6:54:85:dc:d3:ca:17:5f:5b:de:3e:2c:
ff:dd:f9:2f:78:10:80:bc:3c:31:84:26:bd:52:82:
0f:1c:77:8f:40:7b:b6:31:96:f0:d8:96:b0:b2:dd:
8c:e9:af:50:a3:ff:8e:6d:92:33:f1:e6:de:39:74:
8e:02:6e:da:88:bc:08:ce:17:12:53:ba:eb:52:c4:
8b:b7:cb:0b:06:9c:fc:ac:3d:98:f6:05:72:90:cb:
83:f3:d0:a0:fd:08:eb:68:35:1a:12:8e:14:56:ea:
0f:f8:a2:67:85:81:c1:24:7c:01:a6:4c:c1:b1:41:
36:a7:9b:c0:1a:63:3b:2d:d1:8c:28:90:48:39:5f:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AD:1E:CC:8D:E4:E8:4E:23:21:95:14:71:12:2B:18:74:35:C0:68
X509v3 Authority Key Identifier:
keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:92:7f:df:54:58:ab:ec:8e:6c:16:da:45:d0:85:f4:d4:46:
51:07:31:0b:fe:53:bb:c3:68:4b:a2:e7:8c:2b:a0:6b:53:04:
1e:0b:37:4e:93:b2:1a:4e:df:11:b7:fd:c8:f2:e6:0b:dd:e0:
d8:5d:89:26:69:12:b1:f9:63:ce:b5:1d:17:d5:ed:2f:08:dd:
17:53:7c:62:b0:97:53:17:52:e9:7e:57:17:c8:e3:cd:39:51:
00:cf:09:d8:f1:f2:75:59:5b:c8:38:b4:d0:8e:00:c4:1a:65:
68:fc:49:9b:b3:76:ca:a7:03:b7:c0:be:7b:65:5d:98:8b:cc:
c9:e1:52:67:38:c5:93:c5:ca:58:03:9b:a5:69:9b:d3:fe:71:
38:46:af:d1:21:c4:25:70:cb:64:20:48:05:38:e1:da:81:a8:
3f:6c:3b:b9:78:3c:2f:47:55:22:0f:7c:96:a6:cf:f1:26:05:
da:3f:27:53:ce:34:c9:f8:8c:7f:c2:2c:5b:d1:58:10:eb:1c:
e8:74:63:88:fa:4a:cb:1a:07:06:09:d6:4c:9b:c2:5f:22:bd:
be:df:4d:f7:b9:9d:8e:ea:f3:62:60:8a:fd:31:c9:69:bf:19:
7d:01:ec:71:25:7f:7f:68:8e:40:d8:b6:ea:8d:27:60:cd:5e:
7b:cc:49:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJDNDYxMTAvBgNVBAUTKEYwM0RGRDNCMTYwNjQ1NENBMUJBODY5MDNFNzlBREE3
MDUwQkExNkEwHhcNMjYwNzIzMDg1NDQ5WhcNMjYwNzMwMDg1NDQ5WjAYMRYwFAYD
VQQDEw02YTYxZDZkOS0zM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPaKCec6VstHvOuZzUYoovcfarTXenerhhZf2tsLZ08GnLvlGCf/zkoNrCIi
FksKWVpmT/rRUwplH5rHIyjBOpDRCLBx09Cpt3vWnYemjHpE3KTD0tsl7zAoEgcT
89Y6/E3ttR2td1QaBLLRIQGEzIoK7JtWuPea0172VIXc08oXX1vePiz/3fkveBCA
vDwxhCa9UoIPHHePQHu2MZbw2Jawst2M6a9Qo/+ObZIz8ebeOXSOAm7aiLwIzhcS
U7rrUsSLt8sLBpz8rD2Y9gVykMuD89Cg/QjraDUaEo4UVuoP+KJnhYHBJHwBpkzB
sUE2p5vAGmM7LdGMKJBIOV8HTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKutHsyN
5OhOIyGVFHESKxh0NcBoMB8GA1UdIwQYMBaAFPA9/TsWBkVMobqGkD55racFC6Fq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM0Ni85MDAzODlGRTcx
MEQxMUYwODA4MzQ1MkZDNEY5QUUwMi84RDM5T3hZR1JVeWh1b2FRUG5tdHB3VUxv
V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhEMzlPeFlHUlV5aHVvYVFQbm10cHdVTG9Xby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkM0Ni85MDAzODlGRTcxMEQxMUYwODA4MzQ1MkZDNEY5QUUwMi84RDM5T3hZR1JV
eWh1b2FRUG5tdHB3VUxvV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAppJ/31RYq+yObBbaRdCF9NRGUQcxC/5Tu8NoS6LnjCuga1MEHgs3TpOyGk7f
Ebf9yPLmC93g2F2JJmkSsfljzrUdF9XtLwjdF1N8YrCXUxdS6X5XF8jjzTlRAM8J
2PHydVlbyDi00I4AxBplaPxJm7N2yqcDt8C+e2VdmIvMyeFSZzjFk8XKWAObpWmb
0/5xOEav0SHEJXDLZCBIBTjh2oGoP2w7uXg8L0dVIg98lqbP8SYF2j8nU840yfiM
f8IsW9FYEOsc6HRjiPpKyxoHBgnWTJvCXyK9vt9N97mdjurzYmCK/THJab8ZfQHs
cSV/f2iOQNi26o0nYM1ee8xJ0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:54 2026 by rpki-client