
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier: tG0E3GGVS4X5nVjHf5CEHicdVQT5uLGGEE1ixpyK0bg=
Subject key identifier: 97:E6:C5:3A:2F:1B:39:F6:DD:01:D5:3E:AB:F2:B5:1A:23:17:FA:29
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 0776
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number: 074A
Signing time: Fri 22 May 2026 21:52:28 +0000
Manifest this update: Fri 22 May 2026 21:52:28 +0000
Manifest next update: Fri 29 May 2026 21:52:28 +0000
Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: ZyOL2bdfS/J6SxyQVhKKLlhQUE4IywxnfMDqOABYqtU=)
2: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: 9+koo+o8YSITLzDjLjlRedZWFobhlLEtIbZbiHuM8vw=)
3: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: hSZFrlrZ/Tvb28EVqAu95ygulwgb3Xyk1zuj+IQ/6mE=)
4: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: 9v7YhYmTKW+GfazyAtPlR755/aowhr5KrrwWREJkD1A=)
5: E99C5D78999011F09D326581C4F9AE02.roa (hash: 1cz0Gx6xNn3eft1Tu+kHnL/yvs5aiRq8FiVpKp392Ng=)
6: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: cOb4Hj5wDMMg0QT8c/7i7PT+f+u1UkrU+2xOyTjo/5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 21:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910 (0x776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: May 22 21:52:28 2026 GMT
Not After : May 29 21:52:28 2026 GMT
Subject: CN=6a10d01c-2ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:4a:3e:24:93:64:4f:f2:6b:89:ef:83:bc:
b0:81:9c:3c:e0:8f:01:50:dc:a9:7c:a5:b1:a2:3e:
ab:a2:c6:62:17:2c:cc:f2:71:24:62:43:c0:2b:c1:
9e:5e:2b:f1:95:8f:70:40:c2:76:c3:e0:f1:b2:a8:
6f:8c:57:99:79:15:d4:1a:57:ae:49:8a:21:74:9b:
34:e6:6c:6a:9c:13:39:38:56:cd:e9:a7:9e:e2:86:
cb:e0:a3:75:16:61:2c:60:be:10:68:2e:15:da:ac:
b0:57:30:9d:f1:18:3e:c9:36:25:d1:c7:fb:78:ef:
a0:f5:2b:89:d2:f2:16:36:25:da:ca:ca:20:a3:b2:
d8:b2:bf:ad:a2:1d:f1:59:16:b6:8a:11:0f:65:4c:
63:d3:6d:99:ee:9f:66:c7:b3:8a:c2:d9:12:96:73:
1e:da:cd:3d:14:d6:09:5c:c9:8b:5f:f1:97:d1:ce:
6d:41:d9:22:53:9a:41:fc:45:5a:10:15:f7:71:a1:
59:b3:32:b1:be:04:10:7f:54:b2:00:21:f5:ba:18:
70:bf:b0:3a:87:4e:a7:d1:23:3c:45:26:f6:a4:1c:
1a:d1:6a:c5:52:66:ac:3a:a9:61:0e:06:30:1a:16:
e9:73:c8:97:86:0d:66:d4:bb:04:1f:b4:4c:9c:1c:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:C5:3A:2F:1B:39:F6:DD:01:D5:3E:AB:F2:B5:1A:23:17:FA:29
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:83:d3:8f:ec:19:8e:5f:13:06:c6:fd:7c:24:01:c2:4d:bb:
c1:d2:f6:63:f7:6e:8d:52:83:7f:4d:24:b2:53:fd:e8:70:f4:
a8:61:5d:46:dc:64:3d:73:0d:b8:dc:0b:72:76:29:89:07:8f:
f3:09:75:79:e2:84:70:83:e9:00:8a:87:d9:6e:ac:0f:77:b6:
70:49:61:1a:d8:7f:16:e1:96:af:b2:c0:e7:eb:a9:83:4a:f0:
a5:82:94:ce:15:c7:11:3c:68:ff:e3:eb:15:23:6a:c4:10:45:
16:97:63:8b:8e:9a:1b:76:af:62:9b:0a:6b:59:85:47:96:b0:
ee:e5:ee:52:fd:1b:c8:19:c2:e5:42:fd:ed:25:61:2d:de:58:
98:cd:1a:77:1b:15:17:0d:a7:cd:fe:c8:bd:65:f4:fa:32:67:
9e:5c:1b:35:89:92:04:97:e7:db:c2:c4:dc:8c:a9:7e:c1:22:
c6:cc:fd:28:7a:ce:39:3e:2f:2a:02:66:e8:ce:74:29:19:05:
a5:3e:82:a6:98:7f:a8:db:5f:6e:cc:38:a5:0e:b3:d5:da:57:
a8:0e:d8:04:80:22:da:33:11:6d:9a:b4:43:d2:bd:ab:c8:89:
69:78:2e:ea:5e:86:98:e5:01:02:40:60:a1:ce:40:d0:ad:aa:
e6:db:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:57:12 2026 by rpki-client