
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier: pc+mlPPTkjXvhbIVUxwmuq0Ei2FYlJS0Bc7xUlFwiCQ=
Subject key identifier: E3:7E:45:F4:54:A7:B6:E0:05:DA:5B:36:70:C1:DD:A0:3C:03:A2:D2
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 0764
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number: 0738
Signing time: Thu 16 Apr 2026 21:46:54 +0000
Manifest this update: Thu 16 Apr 2026 21:46:54 +0000
Manifest next update: Thu 23 Apr 2026 21:46:54 +0000
Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: r1Eong/UHp0W6mW/AQLwk31Tr+zs8Unb3ik1QxdFTJ0=)
2: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: 9+koo+o8YSITLzDjLjlRedZWFobhlLEtIbZbiHuM8vw=)
3: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: hSZFrlrZ/Tvb28EVqAu95ygulwgb3Xyk1zuj+IQ/6mE=)
4: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: 9v7YhYmTKW+GfazyAtPlR755/aowhr5KrrwWREJkD1A=)
5: E99C5D78999011F09D326581C4F9AE02.roa (hash: 1cz0Gx6xNn3eft1Tu+kHnL/yvs5aiRq8FiVpKp392Ng=)
6: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: cOb4Hj5wDMMg0QT8c/7i7PT+f+u1UkrU+2xOyTjo/5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Apr 16 21:46:54 2026 GMT
Not After : Apr 23 21:46:54 2026 GMT
Subject: CN=69e158ce-1ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:79:ab:7b:a2:97:51:67:d0:6b:39:1a:28:
49:4c:7e:36:81:28:e0:58:73:c4:c3:58:6b:45:85:
fb:b4:b8:a5:b9:f9:dc:f5:66:53:fb:d5:b5:91:0d:
dc:75:49:ad:14:82:6f:ac:4c:1d:47:b1:1c:cb:c9:
9a:6d:a8:5e:0c:61:d9:92:11:49:02:34:a6:19:80:
28:6e:cc:dd:c7:bc:50:f9:51:0d:7a:8a:5b:f7:f0:
22:de:18:78:b0:7c:8a:b7:2d:6c:2a:9c:4b:e5:19:
71:10:bc:9d:04:fc:40:ff:7c:a3:df:84:e8:86:2f:
79:be:9c:34:4a:33:d3:ad:b8:68:ee:08:cb:41:83:
6b:20:0b:00:e2:a5:9a:8a:e1:25:0e:60:c9:84:c9:
cc:ef:e2:32:f9:98:70:a6:ba:c0:c7:3e:20:38:01:
20:11:be:93:71:b3:3b:d9:5f:ce:7c:50:03:8c:e3:
47:9c:2e:a3:5d:7c:2b:16:54:36:c0:a4:b4:e9:78:
39:c7:89:15:17:d7:f5:14:1e:bd:fc:83:86:b5:6b:
27:0f:43:90:fd:26:1d:d8:ac:11:9f:68:cd:ef:b9:
c2:bf:cd:aa:a9:77:a8:de:90:40:c7:9a:dc:ed:7d:
d6:a4:69:22:cd:ea:ee:e2:ba:28:b4:a4:c1:b4:9a:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7E:45:F4:54:A7:B6:E0:05:DA:5B:36:70:C1:DD:A0:3C:03:A2:D2
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:43:48:b8:ee:f0:d7:d4:d8:0e:54:b9:91:cf:3e:91:db:e9:
26:9f:16:2c:da:82:10:a3:42:72:2c:30:d7:9b:a9:07:c3:b8:
6a:bd:46:33:af:af:e0:c4:59:b3:5f:c2:41:56:eb:b2:33:fe:
d6:35:93:af:c4:ac:6f:18:b9:29:14:08:58:bf:4c:8b:a3:c6:
06:7a:47:d2:5a:ff:46:6c:f4:43:b8:57:0b:5f:7b:bb:75:0b:
15:69:92:b5:e0:b8:dd:45:a9:6d:44:8d:07:53:03:cc:e7:dd:
9b:2f:da:07:45:62:94:f8:b8:80:dd:e4:f9:ad:dd:e7:9d:af:
2f:a4:14:09:82:fb:b4:50:5f:e9:13:82:44:30:14:cb:c8:64:
3d:6d:8c:b9:d6:22:22:83:4b:8c:5d:88:f3:a7:ed:fc:cb:5c:
31:e1:4d:e3:f0:bf:65:a1:bd:14:20:7f:c5:6f:2a:3a:19:f5:
ac:51:3a:59:6c:1e:18:e1:68:a2:f8:1b:b4:32:56:2e:d4:2c:
7d:1a:9b:3d:d7:30:5d:61:f9:2f:95:2d:1e:8a:3c:40:7a:c0:
d1:ae:8e:5c:e3:68:93:99:f7:11:e2:af:81:27:77:f4:2e:4b:
a9:60:95:5f:4f:24:9c:f6:74:37:fe:c6:c0:95:79:97:19:99:
fb:2e:d2:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4
MzE0RThGQ0IwHhcNMjYwNDE2MjE0NjU0WhcNMjYwNDIzMjE0NjU0WjAYMRYwFAYD
VQQDEw02OWUxNThjZS0xY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqh5q3uil1Fn0Gs5GihJTH42gSjgWHPEw1hrRYX7tLilufnc9WZT+9W1kQ3c
dUmtFIJvrEwdR7Ecy8mabaheDGHZkhFJAjSmGYAobszdx7xQ+VENeopb9/Ai3hh4
sHyKty1sKpxL5RlxELydBPxA/3yj34Tohi95vpw0SjPTrbho7gjLQYNrIAsA4qWa
iuElDmDJhMnM7+Iy+ZhwprrAxz4gOAEgEb6TcbM72V/OfFADjONHnC6jXXwrFlQ2
wKS06Xg5x4kVF9f1FB69/IOGtWsnD0OQ/SYd2KwRn2jN77nCv82qqXeo3pBAx5rc
7X3WpGkizeru4rootKTBtJplqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFON+RfRU
p7bgBdpbNnDB3aA8A6LSMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC
RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT
aGRXOTVMQ3dNT09ERk9qOHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgUNIuO7w19TYDlS5kc8+kdvpJp8WLNqCEKNCciww15upB8O4ar1GM6+v4MRZ
s1/CQVbrsjP+1jWTr8Ssbxi5KRQIWL9Mi6PGBnpH0lr/Rmz0Q7hXC197u3ULFWmS
teC43UWpbUSNB1MDzOfdmy/aB0VilPi4gN3k+a3d552vL6QUCYL7tFBf6ROCRDAU
y8hkPW2MudYiIoNLjF2I86ft/MtcMeFN4/C/ZaG9FCB/xW8qOhn1rFE6WWweGOFo
ovgbtDJWLtQsfRqbPdcwXWH5L5UtHoo8QHrA0a6OXONok5n3EeKvgSd39C5LqWCV
X08knPZ0N/7GwJV5lxmZ+y7Sjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:47 2026 by rpki-client