
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json)
Hash identifier: JDrlxxXskVMCMTL5u11YevHcrs6PCeNDs6THpSVryzE=
Subject key identifier: BC:D8:90:F4:4D:07:84:23:04:C8:8F:01:2A:C9:22:FA:94:4A:78:A9
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial: 2445
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
Manifest number: 23FD
Signing time: Wed 06 May 2026 15:46:53 +0000
Manifest this update: Wed 06 May 2026 15:46:53 +0000
Manifest next update: Wed 13 May 2026 15:46:53 +0000
Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: KDaDM5Xy9+/f2MdL/8nip1Y/cE/7GVlYhy0uc3DZnNI=)
2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: JCPrD1uQLa6mO5UGYsREbdubhZ0qd7uDKpV9IJX0e5I=)
3: 4800F752477911F19E56FD3F95833773.roa (hash: nKprgXFIoFtiYaag6EoueAF9e18RWxQbnixS8TTrznA=)
4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=)
5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: Vbmmu23AlBObytRTwt9j6G8iDN7Sx1IFw16gH03FE0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9285 (0x2445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Validity
Not Before: May 6 15:46:53 2026 GMT
Not After : May 13 15:46:53 2026 GMT
Subject: CN=69fb626d-6fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:4c:15:eb:35:77:db:d0:35:b2:15:8c:1f:
ba:a9:a9:4a:0f:5f:a9:0b:d8:32:92:1e:08:ae:67:
1f:3d:e2:1d:b6:fc:65:05:aa:6d:31:d9:8e:8e:01:
bf:c1:b7:f4:70:f2:26:8d:70:6b:ec:ae:5e:46:26:
0e:e7:1d:b4:7e:b3:37:43:58:f3:c2:c5:ce:6a:48:
f4:06:38:a2:da:b8:70:4d:3d:85:32:95:a4:73:64:
e2:3a:7b:9d:96:95:4e:b0:91:d6:56:80:fc:61:ce:
0e:ad:04:a8:a8:4b:fe:0a:21:86:2e:b0:26:4d:71:
8a:99:fb:3d:e5:a8:5b:68:ae:01:49:a8:e4:cc:93:
d2:a7:14:38:ef:b9:45:0a:b8:f2:cb:a1:17:02:9f:
86:a7:01:85:22:77:40:5d:84:ac:18:d0:d4:c2:96:
c5:a5:73:9b:d7:04:e2:c0:ce:7d:29:41:e5:d6:96:
7e:94:0b:a2:97:d3:4f:8e:4d:9b:38:46:bb:74:da:
7a:e6:4b:3c:56:7c:16:60:c9:95:49:ad:ce:e4:f1:
96:a5:54:26:58:e7:c2:2b:81:c2:8b:29:7f:6a:94:
90:b5:2a:6f:cf:28:75:89:8c:58:96:cb:25:1d:34:
70:bf:1a:83:4e:d5:a9:5c:ba:a0:37:97:f1:cb:09:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:90:F4:4D:07:84:23:04:C8:8F:01:2A:C9:22:FA:94:4A:78:A9
X509v3 Authority Key Identifier:
keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:35:a9:20:63:1b:fa:fd:4b:5b:e8:f2:eb:68:fb:66:8d:e1:
12:15:c3:29:21:32:61:85:4f:7a:75:08:78:b1:83:fe:bb:8d:
9b:24:bf:11:70:fd:08:74:30:ca:6c:14:23:9d:c6:29:d2:5e:
bd:e1:81:d7:20:cc:70:a0:93:14:ea:5d:56:b3:f6:77:b1:63:
f7:7b:55:aa:5b:34:c5:bc:51:d2:79:b9:d2:e7:c7:36:aa:ab:
e3:bd:30:d3:a8:55:cb:32:5c:ef:74:27:d6:79:39:bd:6f:05:
d3:51:01:2b:64:24:2e:a9:dc:40:77:87:ef:28:8f:f3:a6:a6:
4a:0a:ff:06:c8:fe:3b:a3:58:11:87:09:17:55:be:ee:3e:fd:
28:42:98:5e:e0:ef:eb:f5:a1:d2:4d:c3:c2:79:61:79:3d:33:
f5:fc:93:7a:21:e7:0c:97:13:d4:5f:8d:1c:08:55:16:8b:65:
45:c6:da:8e:7e:2f:17:a2:a8:bd:44:06:b7:f5:ed:ab:45:0b:
1f:11:85:30:88:6f:a8:d8:84:a7:0f:16:3a:c0:9d:c8:07:98:
6c:ba:ee:74:af:89:67:c0:ce:9a:96:d3:8c:76:68:20:e1:64:
88:26:18:ef:eb:e4:9b:8e:93:c4:f9:ef:f9:08:0d:42:7d:9e:
f7:8a:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:52:51 2026 by rpki-client