
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier: 8TD2aJM5+zwSYPVy6EipwxFDnOY6TFuLkYn8ZVT4T0U=
Subject key identifier: 87:46:D7:FB:51:1B:DD:3F:0F:65:65:B2:21:EC:93:A3:CA:4F:7E:33
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 0771
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number: 0745
Signing time: Tue 12 May 2026 21:54:47 +0000
Manifest this update: Tue 12 May 2026 21:54:46 +0000
Manifest next update: Tue 19 May 2026 21:54:46 +0000
Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: iNj0qa6JNtuCdCQSQnEuKyph3Hgyc0E1D9TmZr3Mjg0=)
2: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: 9v7YhYmTKW+GfazyAtPlR755/aowhr5KrrwWREJkD1A=)
3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: 9+koo+o8YSITLzDjLjlRedZWFobhlLEtIbZbiHuM8vw=)
4: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: hSZFrlrZ/Tvb28EVqAu95ygulwgb3Xyk1zuj+IQ/6mE=)
5: E99C5D78999011F09D326581C4F9AE02.roa (hash: 1cz0Gx6xNn3eft1Tu+kHnL/yvs5aiRq8FiVpKp392Ng=)
6: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: cOb4Hj5wDMMg0QT8c/7i7PT+f+u1UkrU+2xOyTjo/5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: May 12 21:54:46 2026 GMT
Not After : May 19 21:54:46 2026 GMT
Subject: CN=6a03a1a6-707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:33:a0:4f:49:a1:bf:ad:06:4f:20:a4:d0:
28:22:ec:f6:56:b2:8c:7a:65:b8:57:40:c9:f5:3a:
c5:4d:03:cf:90:fd:35:84:c8:b4:48:99:f0:15:e5:
8b:72:cd:dd:da:97:52:fb:68:52:23:14:d8:a8:3d:
57:23:65:10:25:10:63:5a:5d:6e:83:fb:6e:a2:dd:
61:0c:5a:ab:d9:49:a5:b0:7e:79:8b:a2:43:68:73:
f0:e4:12:66:bd:b9:f9:16:99:ae:e9:19:11:41:a2:
bf:4a:1f:40:29:f6:2f:c9:20:df:0a:7d:71:c8:35:
68:74:d8:6e:1a:4e:2d:a6:e1:8f:b4:95:5f:13:1f:
d0:58:46:9d:2e:39:53:3d:a8:f7:9c:23:33:24:b5:
40:42:26:77:af:c9:e2:74:44:08:59:01:84:08:c4:
d4:69:43:7a:e3:88:96:2f:4d:35:c8:bd:8d:96:f0:
25:10:48:e9:30:f4:db:c6:91:83:0b:5b:5c:53:4f:
10:09:a9:29:67:0b:b8:6e:9d:ca:20:da:38:db:cd:
6a:a6:2c:76:66:59:80:cf:46:b3:a1:63:ab:71:93:
08:05:dc:74:44:26:be:05:99:b2:d2:f1:83:96:0b:
40:6d:b5:b5:16:a6:7c:9a:51:d4:9b:a9:5e:80:32:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:D7:FB:51:1B:DD:3F:0F:65:65:B2:21:EC:93:A3:CA:4F:7E:33
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:98:c8:4e:b0:f0:b4:05:72:c6:17:f7:c8:5c:29:cc:3f:bf:
30:a0:ed:be:c3:8c:de:2e:05:8c:4b:ea:14:12:c5:94:50:96:
3a:cc:af:78:28:e1:16:69:95:88:24:a7:5f:f3:14:71:9f:b8:
50:21:90:d3:6e:56:b6:9e:3c:ae:ef:fb:e7:11:21:9c:64:74:
80:d4:93:ad:ac:b6:d2:bd:26:5b:70:03:e5:87:6b:cc:77:37:
a8:87:ed:2e:f7:94:ac:cf:80:a1:75:b0:4a:c3:a3:9b:d2:24:
20:cb:1e:2e:a1:66:ad:d0:8f:0f:4f:38:e1:51:cf:7c:f3:4b:
2d:cc:ea:7b:45:90:73:ea:94:0b:0a:bd:a6:6b:3d:3d:16:80:
ce:3f:09:a8:2b:a1:66:75:d4:d6:e7:d6:0e:72:0c:0a:01:c3:
01:d6:89:64:96:8f:ca:b0:24:5d:67:26:79:8e:65:12:2b:72:
f8:09:b3:7c:ac:c2:9c:f5:a3:c3:4b:ba:25:4b:96:81:f5:0a:
ee:6e:b3:8f:ed:4a:e1:35:b0:3c:11:6c:a1:c5:a1:b1:14:10:
32:9f:e7:91:c0:93:48:4e:ae:3e:69:9b:b3:46:62:94:33:36:
1b:96:ac:9a:b4:71:63:b0:15:6b:ef:d8:c2:79:e7:9f:b4:9f:
9c:fb:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:35 2026 by rpki-client