
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json)
Hash identifier: trWR6m5Evj3+BrtrhCZG3+CrTsp+qHp446f/eZp3a6c=
Subject key identifier: 2E:7B:16:8C:AE:BC:FB:AC:81:E7:81:9D:07:A1:92:CF:51:C9:A7:DF
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial: 245D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
Manifest number: 2415
Signing time: Mon 22 Jun 2026 15:46:45 +0000
Manifest this update: Mon 22 Jun 2026 15:46:45 +0000
Manifest next update: Mon 29 Jun 2026 15:46:45 +0000
Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: qE3JruzF9SafMQBZo/j4cnY8WYySZNNLv7+zYIBF2LA=)
2: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=)
3: 4800F752477911F19E56FD3F95833773.roa (hash: nKprgXFIoFtiYaag6EoueAF9e18RWxQbnixS8TTrznA=)
4: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: Vbmmu23AlBObytRTwt9j6G8iDN7Sx1IFw16gH03FE0E=)
5: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: JCPrD1uQLa6mO5UGYsREbdubhZ0qd7uDKpV9IJX0e5I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 14:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9309 (0x245d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Validity
Not Before: Jun 22 15:46:45 2026 GMT
Not After : Jun 29 15:46:45 2026 GMT
Subject: CN=6a3958e5-1a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:58:e3:b9:57:f8:65:32:c2:d1:24:34:57:
34:bf:51:3a:0f:b4:53:51:fa:62:28:c4:4e:dc:da:
41:b5:f7:1d:86:fd:95:c7:26:e5:f4:55:80:f6:b3:
cd:b8:df:27:51:17:78:1f:e2:24:1d:aa:56:86:20:
9a:4e:42:a3:be:78:cc:6b:77:98:e0:dd:42:d7:2e:
54:cb:85:39:c1:a8:59:a2:b5:90:77:06:4f:a0:52:
49:b6:f3:02:55:ef:5b:27:ca:2a:66:61:e1:91:e3:
89:1a:7c:b0:44:e2:be:b1:08:a7:26:69:e2:49:e1:
46:f8:32:a0:23:29:48:eb:9d:07:9f:7f:2e:a9:94:
72:df:3e:b4:8d:23:4b:e7:07:91:c2:75:c8:ef:66:
44:08:8c:6e:5a:24:7c:49:8c:51:63:94:a3:01:2f:
83:bd:71:f4:3b:a5:a2:b7:7e:ea:2b:24:be:96:33:
bc:4a:ec:fd:c1:de:2a:c0:68:cd:a2:74:03:7c:a2:
58:f3:fe:3d:9a:3e:28:89:79:a0:3d:1b:58:fc:1e:
f3:32:6c:22:86:bb:24:29:b1:f4:d5:c7:41:57:77:
5c:e7:60:31:28:a8:d1:90:2a:84:c6:ce:8e:34:ed:
ee:62:63:36:9a:02:53:0e:f5:3e:d6:85:a8:64:c7:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:16:8C:AE:BC:FB:AC:81:E7:81:9D:07:A1:92:CF:51:C9:A7:DF
X509v3 Authority Key Identifier:
keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:77:93:ef:25:e9:d4:fc:2a:0c:0d:16:6b:b7:1d:2d:04:36:
71:eb:58:38:0d:06:27:c9:2a:3c:bd:16:1f:de:9c:28:83:64:
89:02:b1:bd:cb:2a:e9:03:39:2c:03:9d:cb:47:8e:00:2a:2c:
f7:11:5b:a8:0e:20:8f:6a:72:2d:e5:52:a5:a9:ab:eb:b9:c8:
9b:eb:b2:25:9a:d4:62:8d:e1:64:7f:6d:f0:46:ce:9f:af:30:
fd:72:ef:38:dd:a5:17:e2:35:15:ee:39:f5:b7:a4:db:f1:09:
d4:99:a2:19:bf:f1:f5:9b:d9:9e:8e:7d:33:51:be:36:c9:f1:
41:4a:f8:f5:8e:d8:8d:d3:72:81:b7:1f:c2:86:a5:6b:13:49:
44:97:4a:ff:9f:2a:b8:4c:b3:b3:63:36:89:76:e5:03:cc:17:
67:f4:2b:53:64:33:a6:35:0d:3b:01:71:48:14:78:d6:77:cc:
98:7d:9f:96:a5:a0:45:81:79:7b:45:96:3d:24:4c:fd:a4:7b:
ac:ed:ca:1d:62:c3:c5:73:c2:19:64:1e:67:82:9a:b3:bd:cb:
71:3d:c2:9a:f3:5b:e7:f0:10:b1:79:10:36:86:c9:ce:30:f5:
65:9a:88:6a:44:f4:e5:35:e3:7e:26:cd:4b:d5:67:ec:29:8d:
e9:9a:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 19:08:34 2026 by rpki-client