
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
File: 4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json)
Hash identifier: tSK6Tb/XYn7RTjX8jR7nUCLoWazr66Wx1FWJLK6AP8g=
Subject key identifier: 30:20:9B:E6:18:A7:2A:F6:01:4A:EF:7A:9B:D6:FE:9E:36:81:45:A4
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial: 178E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
Manifest number: 173F
Signing time: Sat 10 Oct 2026 16:40:08 +0000
Manifest this update: Sat 10 Oct 2026 16:40:08 +0000
Manifest next update: Sat 17 Oct 2026 16:40:08 +0000
Files and hashes: 1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: dRdcaYoGSvtDbAruE6vtTfwH0WCuHX93Tns+FzPwuGw=)
2: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: CAlcqJi6d37i/TxCFyf2svSkqxoKtgQLsLZWuq3dcoE=)
3: 56C8FCACE38011EFBF195482C4F9AE02.roa (hash: 21/YXXRPLk5L/rQp1wiKIAMpRY2JLU1KFkt47LtF7pk=)
4: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: aVhexx8H4O1ah6UPgLMQpAuILA0ylRRun3N3rQAJ9MU=)
5: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: Ab5UYVud2bNs5oNT54NbMqTkTRHIRZLylz4Z+NqHgPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6030 (0x178e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Validity
Not Before: Oct 10 16:40:08 2026 GMT
Not After : Oct 17 16:40:08 2026 GMT
Subject: CN=6aca6a68-ef58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:c0:c6:32:2c:f3:a0:f9:bf:d8:15:a1:4e:
6a:8a:b9:8a:ea:e4:0e:a4:a9:eb:2f:d6:5f:2a:9b:
69:0d:18:6c:d6:f6:6d:7e:04:97:f8:93:ec:6a:dd:
f5:98:3c:05:68:51:a8:d1:4a:57:ee:36:84:c6:72:
e5:1e:70:3d:c3:c7:c0:74:8c:66:f3:c5:4f:c6:63:
6a:e7:cd:af:4d:ad:e9:7b:f7:93:20:ff:c5:7d:a8:
49:6a:50:76:33:ba:f8:65:c7:67:81:3a:9f:e9:97:
d5:ec:f2:31:de:d1:b6:e0:e1:94:bb:a1:82:d4:de:
59:02:90:93:86:c7:e1:e3:a9:53:b3:3f:a4:79:fa:
dc:74:6d:ca:48:16:38:1a:d0:d4:2b:18:a6:f9:2f:
69:8c:43:2f:2d:ca:9e:a4:f8:e0:72:11:16:a3:b9:
2f:2c:85:7c:ed:c6:a2:13:6c:65:04:97:f9:e2:bc:
26:96:85:58:19:82:31:85:33:41:14:08:d2:d5:7a:
27:bc:65:18:83:04:b3:3e:48:ea:95:5f:1e:cc:07:
c9:fa:86:27:43:fa:e0:e0:a9:5b:ed:25:ee:b0:8c:
06:11:0a:f6:11:1d:29:92:fc:19:15:d3:ea:4d:c7:
3d:c1:27:70:56:58:2c:94:b3:ce:05:14:ba:2c:f8:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:20:9B:E6:18:A7:2A:F6:01:4A:EF:7A:9B:D6:FE:9E:36:81:45:A4
X509v3 Authority Key Identifier:
keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:41:60:d6:53:01:4d:30:29:1e:e1:2c:f0:62:3d:13:e7:
7c:08:8f:b6:78:76:19:11:0a:8e:f6:78:6c:96:69:e6:d7:2c:
7b:04:d9:dc:73:52:7b:b4:68:8b:4f:8b:58:95:16:5d:84:2e:
a8:13:9f:3e:ae:ea:51:54:22:99:de:7a:a7:cb:9a:fe:f6:1b:
c6:a2:0d:b5:39:cd:2b:05:59:5d:05:be:5d:90:61:9a:9a:66:
0f:6e:b9:ac:c4:b4:7b:44:21:80:10:81:ae:a9:7a:27:32:53:
ab:32:1c:74:9d:44:b5:a1:9d:96:df:4d:14:13:d5:f8:f6:46:
3b:8a:ff:d7:e0:a0:51:b0:37:29:d7:21:eb:91:d7:0b:6a:32:
a6:69:81:b0:95:a5:9b:7e:7e:d4:d2:ac:dd:eb:df:19:29:64:
50:03:33:e4:0c:20:57:e8:d7:95:e6:67:de:c4:f1:9a:0f:b1:
03:e9:ea:ff:47:67:05:55:23:e1:1a:42:33:36:46:ba:bd:5d:
9f:f5:4b:8f:0f:07:99:5e:32:06:b0:99:01:0a:a8:2a:60:c3:
2e:5c:87:ee:5a:a6:1f:f8:48:02:9c:79:3e:41:ae:30:9e:c2:
a6:97:49:e6:9f:91:c9:4b:1e:c4:17:c4:47:94:09:90:40:8a:
92:35:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:59:06 2026 by rpki-client