
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json)
Hash identifier: NWcVTywUdt7p79Rfwq23AQ/rwjpmUhEVBYspJBxO8DE=
Subject key identifier: E2:74:E2:2A:8D:B5:2E:9D:CE:44:0A:66:3A:78:CD:44:67:67:D5:40
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial: 2436
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
Manifest number: 23EF
Signing time: Thu 16 Apr 2026 15:46:20 +0000
Manifest this update: Thu 16 Apr 2026 15:46:19 +0000
Manifest next update: Thu 23 Apr 2026 15:46:19 +0000
Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: zEbNSyepSqhhuRFrlX/nbI9VgIkFHBcrHAFEMKqrv/I=)
2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: JCPrD1uQLa6mO5UGYsREbdubhZ0qd7uDKpV9IJX0e5I=)
3: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=)
4: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: E8onjnN6iimBzZDHgmtWpBoYlonlzj7tjyMVxIXY934=)
5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: Vbmmu23AlBObytRTwt9j6G8iDN7Sx1IFw16gH03FE0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9270 (0x2436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Validity
Not Before: Apr 16 15:46:19 2026 GMT
Not After : Apr 23 15:46:19 2026 GMT
Subject: CN=69e1044b-9fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:d9:c2:56:f4:0b:1d:32:51:bf:29:2e:dd:
02:05:5d:87:60:54:56:38:b8:30:6d:4e:c6:83:98:
93:db:6f:6c:48:1e:f7:11:48:1b:b2:9b:c8:2f:00:
31:9c:70:08:e7:a2:7e:fe:32:47:0d:a5:d0:49:97:
6b:18:fa:1f:4b:ca:49:1e:fb:fd:e3:39:8d:22:46:
ed:7a:02:dd:ab:a7:b7:a4:12:d5:a9:2f:c8:d4:37:
8b:ae:67:8b:1c:ea:69:9f:c4:af:ab:84:c8:e1:fd:
a7:15:9d:f5:4c:39:cd:10:85:2e:ea:a3:a4:63:12:
7d:23:f0:7b:b9:0e:80:ae:09:c4:30:5a:7f:e1:e1:
15:6d:ae:e4:a7:7b:47:67:78:78:5a:2b:fb:30:d1:
9c:be:01:f9:91:2c:07:1a:9a:7b:17:9c:de:74:ec:
f2:9f:a4:52:d4:c1:63:f2:a5:11:d8:07:e9:07:36:
a0:46:77:31:e3:5f:e5:ec:b6:fb:8d:a1:dc:cc:02:
42:3e:6d:69:de:9c:8e:b1:03:b1:48:07:3e:07:38:
32:83:2c:80:06:e0:6e:7a:e8:82:92:37:24:7d:57:
6f:c9:b9:3f:26:2b:fe:31:d5:78:bf:42:d1:70:13:
3a:4c:0a:ae:ef:b7:5b:02:d1:c2:73:ab:09:1b:0b:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:74:E2:2A:8D:B5:2E:9D:CE:44:0A:66:3A:78:CD:44:67:67:D5:40
X509v3 Authority Key Identifier:
keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ee:4b:93:f6:c2:d7:1c:4e:84:69:26:59:e3:1c:d4:92:30:
2d:94:e8:02:91:22:a6:25:ac:68:75:98:3c:97:88:a2:0c:9c:
81:80:ac:84:52:e2:af:64:99:e3:80:73:b6:06:ee:fe:28:08:
7a:8d:99:86:be:58:a9:dc:94:7b:34:f9:a1:7d:ec:9b:f5:51:
f7:54:f9:55:78:0f:2e:36:db:e6:8b:8f:55:8d:57:83:1f:1e:
1d:a0:a6:f3:5e:df:47:e8:ee:a8:d7:aa:e3:fe:21:b6:2c:af:
6b:24:de:78:d8:38:b8:f4:67:e5:55:72:39:04:5d:51:ff:69:
a9:28:5e:27:7b:4b:66:2b:4f:1f:f9:67:ff:b9:8e:fd:45:e2:
69:f0:f2:ec:e6:03:e5:48:ff:8e:40:8f:fd:ee:b9:f1:2e:b4:
fe:d2:56:45:fc:65:72:67:5b:63:a7:8a:3f:e1:62:cc:a8:cb:
0d:1d:f9:f1:73:ae:12:5e:48:4d:78:95:e3:37:c5:e4:8a:24:
fc:29:d2:59:cc:19:5d:e1:47:14:f3:c2:83:40:89:b2:61:58:
d2:d8:5e:cc:8e:7b:df:84:16:28:03:45:3d:e3:aa:41:90:b3:
ac:e4:85:d7:b0:c6:f4:bb:52:29:ed:37:bb:8a:d6:33:5f:57:
41:d6:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:04:22 2026 by rpki-client