
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier: OUCiDPne+N9tPiS6JqJVruVEY8RYLpqvyEU5SgWeG+o=
Subject key identifier: A5:6F:12:A7:1D:EF:7E:51:98:81:3C:C8:AE:D9:D6:92:92:1C:86:85
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number: 0133
Signing time: Sun 05 Apr 2026 04:54:09 +0000
Manifest this update: Sun 05 Apr 2026 04:54:08 +0000
Manifest next update: Sun 12 Apr 2026 04:54:08 +0000
Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: bMFlt6RW7Ec/BCV/NHHfwddHrt8D6DncRqczsA0gUc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Validity
Not Before: Apr 5 04:54:08 2026 GMT
Not After : Apr 12 04:54:08 2026 GMT
Subject: CN=69d1eaf0-7b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:87:10:67:b2:e7:91:c7:a6:c7:90:22:a5:
d4:1b:27:2b:d4:ce:8d:01:ec:3c:8d:a0:94:d4:6d:
6a:f4:bb:15:c0:b8:e3:79:39:fb:ed:44:c6:3c:d3:
64:c3:78:96:41:0d:12:b6:3d:21:2d:9b:54:9c:ae:
28:b2:39:a8:8f:fa:06:cd:9b:9e:f9:70:e5:fb:fa:
cc:05:bd:c5:e4:e0:8e:4b:c7:f6:08:61:36:65:17:
0a:cc:3b:b5:fa:ff:ac:1f:e2:4e:a8:d2:57:59:cf:
04:38:3d:1c:8e:2e:b4:61:c5:58:12:0f:3b:31:1b:
f5:8c:fd:ad:b5:82:bc:ca:c8:d2:01:ad:a1:ea:da:
29:96:08:9b:ea:13:ec:d7:1f:74:02:80:b4:4e:3e:
60:cd:a5:eb:88:fc:50:a5:92:00:64:53:ee:ac:a7:
cc:ac:c5:8f:78:42:99:74:59:17:39:d9:0b:ae:d3:
67:b2:96:55:57:06:34:a6:7a:e3:7b:f5:55:37:ba:
7d:8c:47:bd:5a:8a:98:14:ca:b6:b5:85:bb:84:c3:
6c:da:58:bf:fe:7b:d1:40:59:89:75:67:8c:16:52:
17:88:02:5f:db:af:cb:36:87:e0:16:6c:e0:94:2e:
bc:8c:bd:df:58:f9:f0:3f:21:fa:73:49:d9:9f:ad:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:12:A7:1D:EF:7E:51:98:81:3C:C8:AE:D9:D6:92:92:1C:86:85
X509v3 Authority Key Identifier:
keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:75:78:25:c8:8f:63:a8:0e:05:46:45:b5:89:c5:c9:71:
bf:73:7f:c7:b8:e8:2d:9f:1b:a5:55:d4:9d:3a:61:2f:82:42:
f0:39:39:4f:6e:d2:9e:29:1f:43:77:82:ca:5f:ce:5f:00:32:
f8:ec:60:ea:42:f6:bf:c6:cb:54:a3:70:2d:31:b9:25:a8:f1:
64:fc:05:6a:dc:ad:42:a6:e8:69:e6:96:62:7f:6b:c3:fd:da:
47:30:2c:b7:86:a7:15:36:eb:f9:c4:a5:b7:99:07:61:9c:cd:
a0:a5:7d:81:97:91:ce:f0:35:13:8c:0c:7a:46:3f:46:37:76:
a4:18:47:90:81:e2:6c:24:aa:09:ed:e1:b3:bc:15:e2:fe:77:
b2:ac:73:85:7c:54:93:e1:e5:36:88:7a:f5:7f:a4:ba:32:d1:
45:7a:38:fd:90:d7:12:1d:06:fb:d4:d2:51:0b:b0:33:98:12:
4c:a5:06:09:4b:cd:46:b9:2c:c6:24:f5:09:17:da:a1:c2:fa:
9b:d5:2a:b6:00:a3:df:9b:63:4e:5c:33:3a:47:9d:84:fc:7e:
99:d1:1f:7e:c6:19:74:fa:30:f0:d8:f5:85:88:a7:b2:7f:26:
1c:a6:31:43:1b:5e:42:75:a0:1d:99:0c:6e:30:c7:4a:08:24:
a8:0b:7d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:23 2026 by rpki-client