
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier: hxhCSZI9nXHN+daYlzwEwhFil3FbHsr6Lhk/IH3ZIsU=
Subject key identifier: C9:EE:EB:25:3E:78:15:8D:58:7A:3A:D0:E4:CE:A6:2E:D1:07:DB:C6
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 0741
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number: 071E
Signing time: Sat 28 Feb 2026 22:26:02 +0000
Manifest this update: Sat 28 Feb 2026 22:26:02 +0000
Manifest next update: Sat 07 Mar 2026 22:26:02 +0000
Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: 7Kx0/R0XlwBWKVVkq1KpHVJS/jqCFHjOW3aU+9mE9wc=)
2: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=)
3: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: 4B3XONtyer/LI/a650TjjRxsYwxE3yzyQKK0hCYJdog=)
4: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=)
5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=)
6: E99C5D78999011F09D326581C4F9AE02.roa (hash: KRc5l8wxQAY0kmCFWdslvfP8E+810yOkcCnLCwPkREQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Feb 28 22:26:02 2026 GMT
Not After : Mar 7 22:26:02 2026 GMT
Subject: CN=69a36b7a-5033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:62:6f:eb:d8:8a:c7:a7:f7:37:01:64:97:
64:74:0a:9d:98:8f:52:29:f4:bf:e9:79:55:eb:8a:
fc:36:7e:ac:77:40:ab:a4:5d:70:82:f1:25:d8:5d:
a3:84:0e:cf:0f:75:0f:75:da:e2:f0:0d:08:45:b6:
95:78:57:74:6f:44:62:37:f4:43:53:cc:2a:56:16:
cd:07:00:19:07:a7:b8:87:cd:76:ca:05:27:5a:19:
f5:c1:69:a0:23:bb:c5:49:3b:e3:0a:98:33:b9:ec:
58:2f:01:83:4d:6e:c4:fc:2e:c5:fc:e1:7f:92:e0:
d8:ab:32:73:d9:98:08:8b:2a:07:cb:7e:bb:be:a9:
b8:44:e6:09:23:c6:b6:f4:2e:ef:29:43:c4:8c:42:
d2:2d:63:99:12:e3:6a:68:a4:fe:aa:3f:a3:82:bb:
3f:78:89:38:cf:33:80:75:d0:6c:15:c0:ec:d7:b0:
7e:4d:c4:47:57:d6:f3:85:32:cb:20:fd:1b:47:d1:
8e:68:46:9d:bd:5d:03:56:93:2a:92:e4:4c:53:0f:
1c:89:8c:aa:e7:ed:aa:24:75:cf:8e:af:31:bd:ae:
a0:f2:b9:1b:b0:a5:34:75:3a:44:bf:ba:3d:2c:b9:
22:2f:20:0e:0a:10:20:70:44:cc:c8:80:fc:48:be:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:EB:25:3E:78:15:8D:58:7A:3A:D0:E4:CE:A6:2E:D1:07:DB:C6
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:46:79:1f:14:5a:97:d4:ae:d2:5f:6f:b4:8f:13:4f:5d:59:
56:26:20:2b:46:2c:0f:45:e6:c3:e9:a2:ea:f0:f6:65:b7:1c:
a1:07:ec:e3:5d:84:d2:56:ee:4e:c4:d5:45:e2:8e:48:de:25:
d4:13:55:ca:ab:5b:4e:ec:b4:ff:78:5d:f8:58:ea:ce:2c:1b:
77:79:c6:91:65:26:d1:e1:56:7b:d5:4c:21:7d:f3:a2:4d:de:
6a:b5:9d:68:11:36:64:05:d5:3e:67:75:71:6c:86:6e:56:fb:
ad:6d:5a:3f:2d:e5:4c:55:b9:85:e7:d8:89:a4:ec:27:2d:34:
68:40:3a:fd:a6:c0:b8:53:f8:ef:26:a1:8f:1a:17:15:c7:a2:
95:55:2d:85:74:68:43:65:3c:01:d9:ac:b0:e4:00:fe:51:55:
a7:af:cb:e3:24:ce:4b:6c:db:8e:96:2b:2b:12:07:70:cc:d1:
4b:11:b1:95:19:f2:ed:53:ce:58:db:26:06:a9:06:31:3f:c9:
ba:c2:58:39:b1:3b:70:42:eb:28:df:d0:68:06:f7:e1:2d:20:
c3:55:59:41:5e:64:23:4c:60:3d:8f:92:df:7d:9a:af:fd:8e:
f0:f9:0b:3a:e2:fc:01:78:39:f4:81:d8:c7:5e:47:71:54:3a:
29:d6:6e:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4
MzE0RThGQ0IwHhcNMjYwMjI4MjIyNjAyWhcNMjYwMzA3MjIyNjAyWjAYMRYwFAYD
VQQDDA02OWEzNmI3YS01MDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu3hib+vYisen9zcBZJdkdAqdmI9SKfS/6XlV64r8Nn6sd0CrpF1wgvEl2F2j
hA7PD3UPddri8A0IRbaVeFd0b0RiN/RDU8wqVhbNBwAZB6e4h812ygUnWhn1wWmg
I7vFSTvjCpgzuexYLwGDTW7E/C7F/OF/kuDYqzJz2ZgIiyoHy367vqm4ROYJI8a2
9C7vKUPEjELSLWOZEuNqaKT+qj+jgrs/eIk4zzOAddBsFcDs17B+TcRHV9bzhTLL
IP0bR9GOaEadvV0DVpMqkuRMUw8ciYyq5+2qJHXPjq8xva6g8rkbsKU0dTpEv7o9
LLkiLyAOChAgcETMyID8SL7JGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnu6yU+
eBWNWHo60OTOpi7RB9vGMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC
RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT
aGRXOTVMQ3dNT09ERk9qOHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbEZ5HxRal9Su0l9vtI8TT11ZViYgK0YsD0Xmw+mi6vD2ZbccoQfs412E0lbu
TsTVReKOSN4l1BNVyqtbTuy0/3hd+Fjqziwbd3nGkWUm0eFWe9VMIX3zok3earWd
aBE2ZAXVPmd1cWyGblb7rW1aPy3lTFW5hefYiaTsJy00aEA6/abAuFP47yahjxoX
FceilVUthXRoQ2U8AdmssOQA/lFVp6/L4yTOS2zbjpYrKxIHcMzRSxGxlRny7VPO
WNsmBqkGMT/JusJYObE7cELrKN/QaAb34S0gw1VZQV5kI0xgPY+S332ar/2O8PkL
OuL8AXg59IHYx15HcVQ6KdZuZw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:52 2026 by rpki-client