
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
File: Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft (raw, json)
Hash identifier: UaxcMa7Vi1ZL3gmn4TvNdGGngvNhTO8OroGtMnGixkA=
Subject key identifier: AE:36:71:69:A7:11:CB:77:28:A2:1C:1D:E7:D6:7B:C5:2F:52:8A:7E
Authority key identifier: 0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
Certificate issuer: /CN=A9173204/serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
Manifest number: 5D
Signing time: Fri 25 Sep 2026 08:15:27 +0000
Manifest this update: Fri 25 Sep 2026 08:15:27 +0000
Manifest next update: Fri 02 Oct 2026 08:15:27 +0000
Files and hashes: 1: Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl (hash: RLZedMRmgdHpnBeZYD0ON7O5x59ajR85OW5lGPoqKko=)
2: 4E3439122B4111F19D37C4AC90833773.roa (hash: QQvgNRDiPl6A65a2LWGiXcir6fcA9w1PwW/VYZpOkXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173204, serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Validity
Not Before: Sep 25 08:15:27 2026 GMT
Not After : Oct 2 08:15:27 2026 GMT
Subject: CN=6ab62d9f-3f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:a2:99:2c:3e:53:4b:c2:a7:f2:14:d5:1c:
27:33:cb:d0:02:de:c6:52:a3:8d:07:ad:0b:ef:13:
11:7f:77:26:fa:d1:d0:bf:af:91:13:f9:bd:6d:78:
2a:ea:3c:b9:14:96:52:2e:6d:14:80:ed:7e:9f:29:
e5:be:3d:18:2d:57:be:28:ca:f6:63:7f:7e:b3:e6:
d0:8c:7e:10:b1:da:8d:09:fd:1f:05:ec:21:94:4c:
c6:e0:46:25:c3:e2:0b:9f:ac:1d:d1:3a:df:d2:72:
fd:64:53:d2:8c:23:24:4e:20:fe:e3:fe:ff:ae:61:
60:90:04:1d:00:b3:b6:cd:ee:dd:66:7c:ce:c8:31:
85:6c:d1:51:53:11:0a:f8:7d:e6:2d:38:f6:69:e4:
9f:ee:e0:0b:ec:36:91:38:b1:68:0e:ce:c4:0f:89:
b0:88:6c:1f:34:22:d0:f8:48:f9:c1:86:89:d6:ce:
38:17:be:0a:a3:6c:d1:8c:59:6d:cf:36:8e:76:61:
ac:c7:b9:3b:7d:a5:fb:3d:8b:b1:aa:aa:4e:25:c9:
52:bd:d8:83:db:3d:22:c1:22:e2:51:7d:9b:e1:c2:
17:6f:b2:03:a9:33:bd:d6:15:1e:d1:45:ba:5d:98:
06:28:d1:44:c2:39:a6:67:eb:e4:ff:5e:2f:0a:be:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:71:69:A7:11:CB:77:28:A2:1C:1D:E7:D6:7B:C5:2F:52:8A:7E
X509v3 Authority Key Identifier:
keyid:0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:90:f4:d3:ad:23:3b:cb:99:65:e1:89:4a:83:41:84:de:30:
43:cc:66:45:20:ac:00:3d:84:3e:a4:45:7d:01:66:3d:4b:0e:
f0:c3:89:5e:59:90:d0:20:21:98:c3:d7:79:79:f8:f2:0c:ea:
3a:fc:19:3a:e4:05:b1:5f:95:d1:e8:22:10:8b:57:c6:8f:52:
ea:2d:34:a5:02:1a:7d:f0:60:f8:7a:02:50:a5:29:4f:aa:db:
7d:24:e6:72:d5:39:55:5a:c5:0d:92:c6:8f:b8:8e:ec:14:bc:
31:79:1d:09:14:87:11:af:ec:7a:31:b7:7a:45:68:11:f4:59:
6a:da:6c:79:23:13:de:3f:3c:93:38:84:c9:fc:0b:96:ce:ad:
04:e0:22:38:a2:94:07:c0:e2:6a:06:52:8a:18:9f:fa:32:2d:
9c:04:ea:0e:d6:d2:b7:bf:3d:4d:ec:d7:f7:fe:86:f3:de:e1:
ba:9d:1a:60:7f:ea:1c:e8:8d:f6:4c:22:40:f8:35:4e:2c:fd:
b9:40:a6:d9:c0:9e:1c:e8:19:6b:b7:d7:d5:49:e1:96:b0:a8:
68:e7:7c:6a:7b:da:b8:70:de:02:c4:73:bd:10:5e:e9:d7:90:
08:56:fd:56:1b:97:12:ee:d8:91:34:b1:65:03:7c:ed:99:9d:
f8:d7:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:56:45 2026 by rpki-client