
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier: m/ixCiY0LbL0lgomTrtyngsjDrLZ/MwfD5uOUl/S6fU=
Subject key identifier: AA:61:33:58:64:EA:35:A3:9A:75:52:97:E1:9D:D8:CA:AE:AA:10:E1
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 0794
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number: 0763
Signing time: Mon 06 Jul 2026 22:18:41 +0000
Manifest this update: Mon 06 Jul 2026 22:18:41 +0000
Manifest next update: Mon 13 Jul 2026 22:18:41 +0000
Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: 3lVgZRBuj68jF+6puivNOprqVr1EItJTUMkR9z14Orw=)
2: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: y0+JvtMZneyLAkeZYh9VrzkklhQ0hdBbhaIghcfRRoY=)
3: E99C5D78999011F09D326581C4F9AE02.roa (hash: EDqH2s3Y6d4ANcs5gpeBF0bpJwlhgUPDq1qQiNVrKbk=)
4: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: yOtiPIymSWpxM64MUOZfNcIlCPN62Eex18db57t7CG8=)
5: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: 5sks7401iF6XRicrl8vnu/qqHYhqGytZkOAF+7ZwKW0=)
6: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: WBzcS8WqNOR7OFCXitElttUvhLJweHM8ye22np6XMV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 22:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Jul 6 22:18:41 2026 GMT
Not After : Jul 13 22:18:41 2026 GMT
Subject: CN=6a4c29c1-4f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:86:bd:ff:d1:3f:92:31:70:ad:08:3b:a4:
d3:c4:13:26:f6:7c:c5:39:fa:6a:37:5a:46:f0:27:
88:8b:94:20:c0:d9:dd:b2:76:fa:5d:fa:f7:45:6c:
79:e5:c2:61:56:fe:8f:08:f1:ef:1c:2e:56:56:a8:
7c:b7:99:83:cb:99:ae:aa:e5:75:cf:8d:04:e3:b7:
8d:e5:44:5b:46:cc:a8:91:08:bf:44:30:e0:53:d2:
6f:c4:b2:07:f5:66:c7:91:2f:77:02:2b:01:bd:2f:
c3:6c:2f:f8:d2:8e:c3:ab:e1:9e:19:26:be:09:87:
7f:9b:61:98:84:53:2f:39:ab:11:30:7f:3e:6d:e5:
f9:3f:2b:8d:85:c6:07:92:ed:13:9c:79:c7:ea:23:
c6:3e:9c:be:43:e9:51:3e:94:43:91:7d:d4:dc:14:
cf:c2:16:16:1b:44:11:73:eb:16:24:8d:d0:b9:12:
0e:35:d5:b1:24:4a:bd:7b:9e:42:0a:fb:29:bb:66:
66:7e:4a:60:bf:59:89:ef:66:9b:3f:c0:9b:db:a2:
70:71:7b:e4:a5:fd:1c:3f:f6:c9:c5:bc:8e:12:1f:
d7:da:dc:fb:0f:17:78:9f:c8:4a:c8:52:86:09:d7:
9e:4d:6a:d5:99:c8:cb:cd:b7:53:36:a3:90:ec:a1:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:61:33:58:64:EA:35:A3:9A:75:52:97:E1:9D:D8:CA:AE:AA:10:E1
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:1d:31:0e:6e:a3:e7:79:35:92:05:58:e1:50:cb:c5:1f:a4:
3c:70:16:9f:14:0f:9d:7b:15:d3:df:ae:07:48:db:1e:84:a6:
54:13:aa:e8:b6:77:b1:2f:98:12:f8:c3:da:3b:4c:a9:5a:71:
1e:fa:d3:8f:3d:81:2d:21:c2:06:82:c2:06:b1:10:15:b8:c6:
27:22:69:5f:85:e9:af:d1:ae:a6:94:ae:96:84:c1:3d:9e:44:
54:03:60:c5:c2:8b:e7:16:f8:f0:04:8e:6f:84:15:41:f8:7c:
47:1b:a7:97:74:f4:0e:1f:95:1a:8b:f0:8f:4f:c7:97:3a:52:
07:4c:51:0e:fd:3a:34:b2:39:35:18:96:cf:23:f8:5c:45:f9:
56:02:65:c4:7f:72:46:b3:0e:06:96:1d:c8:31:87:0f:31:2a:
f9:94:0d:6a:33:63:74:3c:26:e5:0d:7f:06:00:79:0f:fc:b7:
30:28:39:0c:6d:97:a9:da:c7:5a:77:5f:7f:59:02:b8:df:aa:
fb:a4:92:57:a6:a6:8b:a7:87:f7:ae:88:5b:d5:05:f0:7e:37:
88:fc:b7:2f:cf:83:97:63:c0:c8:0f:4e:ea:cf:47:e3:c3:f1:
62:62:b1:26:69:ed:eb:7e:e7:63:54:2f:db:e5:87:4a:df:00:
14:a4:fc:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4
MzE0RThGQ0IwHhcNMjYwNzA2MjIxODQxWhcNMjYwNzEzMjIxODQxWjAYMRYwFAYD
VQQDEw02YTRjMjljMS00ZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp++Gvf/RP5IxcK0IO6TTxBMm9nzFOfpqN1pG8CeIi5QgwNndsnb6Xfr3RWx5
5cJhVv6PCPHvHC5WVqh8t5mDy5muquV1z40E47eN5URbRsyokQi/RDDgU9JvxLIH
9WbHkS93AisBvS/DbC/40o7Dq+GeGSa+CYd/m2GYhFMvOasRMH8+beX5PyuNhcYH
ku0TnHnH6iPGPpy+Q+lRPpRDkX3U3BTPwhYWG0QRc+sWJI3QuRIONdWxJEq9e55C
Cvspu2Zmfkpgv1mJ72abP8Cb26JwcXvkpf0cP/bJxbyOEh/X2tz7Dxd4n8hKyFKG
CdeeTWrVmcjLzbdTNqOQ7KFtmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKphM1hk
6jWjmnVSl+Gd2MquqhDhMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC
RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT
aGRXOTVMQ3dNT09ERk9qOHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmR0xDm6j53k1kgVY4VDLxR+kPHAWnxQPnXsV09+uB0jbHoSmVBOq6LZ3sS+Y
EvjD2jtMqVpxHvrTjz2BLSHCBoLCBrEQFbjGJyJpX4Xpr9GuppSuloTBPZ5EVANg
xcKL5xb48ASOb4QVQfh8Rxunl3T0Dh+VGovwj0/HlzpSB0xRDv06NLI5NRiWzyP4
XEX5VgJlxH9yRrMOBpYdyDGHDzEq+ZQNajNjdDwm5Q1/BgB5D/y3MCg5DG2XqdrH
Wndff1kCuN+q+6SSV6ami6eH966IW9UF8H43iPy3L8+Dl2PAyA9O6s9H48PxYmKx
Jmnt637nY1Qv2+WHSt8AFKT8zg==
-----END CERTIFICATE-----
Generated at Tue Jul 7 14:45:12 2026 by rpki-client