
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json)
Hash identifier: eW1AmkMZ8UAr8i8DP/na5BwlhRPNlySQjqpFASreNiY=
Subject key identifier: 33:46:DC:AA:A8:C4:F2:77:83:8F:F1:43:CC:7B:C3:DC:F1:41:EB:22
Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Certificate serial: 11DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
Manifest number: 11D1
Signing time: Wed 18 Feb 2026 16:55:20 +0000
Manifest this update: Wed 18 Feb 2026 16:55:20 +0000
Manifest next update: Wed 25 Feb 2026 16:55:20 +0000
Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: Yl0dihGqVwVmQB0yAMGRctTEqxz5uUpc+WS1/oKTInI=)
2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 16:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4573 (0x11dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Validity
Not Before: Feb 18 16:55:20 2026 GMT
Not After : Feb 25 16:55:20 2026 GMT
Subject: CN=6995eef8-6a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:a2:61:08:30:7f:3c:03:5b:3a:19:61:e4:
00:27:a6:e9:ab:a6:88:a2:3c:7d:4a:d5:4f:11:68:
8b:4b:a2:61:11:2d:d1:b6:85:5b:c6:12:7a:d9:97:
95:5d:cf:7d:1f:44:af:7c:32:12:cb:df:a0:f2:66:
0a:47:4e:1d:eb:6e:ba:95:70:b3:fc:b7:07:bf:7e:
10:f6:29:23:4e:55:aa:3b:f7:fe:52:d0:4e:93:78:
00:6c:97:6e:eb:b2:8e:0c:c9:68:db:8c:4f:3d:00:
d4:08:06:4a:0a:35:4a:77:0f:67:83:47:be:19:f0:
4f:de:c0:93:e2:02:23:e9:a8:99:4d:76:fb:31:97:
fd:1b:57:98:f2:77:59:e3:72:60:c9:cc:76:60:81:
a6:f5:bb:43:7c:5b:a7:4d:d6:22:e6:50:b3:9e:cf:
d3:61:ff:91:01:45:da:dd:c5:ea:2e:23:74:66:dc:
9d:c6:30:2c:2c:18:59:61:62:3d:60:25:f6:3f:90:
67:63:89:24:5d:d7:7a:5f:86:96:75:5b:48:ac:ef:
a8:ad:8a:ef:31:b9:a4:cb:8d:75:15:4c:92:b3:70:
ac:94:54:11:d7:21:1a:89:e3:77:23:57:82:55:b5:
21:c8:d2:2a:ba:9a:c5:34:19:b8:eb:b2:31:e6:9c:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:DC:AA:A8:C4:F2:77:83:8F:F1:43:CC:7B:C3:DC:F1:41:EB:22
X509v3 Authority Key Identifier:
keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:5b:11:e0:a9:c5:a7:ec:03:0e:5b:e2:08:74:1e:fc:5f:0b:
4a:5a:7b:aa:11:44:20:57:84:fa:9f:29:4e:9f:75:8d:31:9f:
96:b4:c0:5e:a7:8d:71:34:35:76:a2:f8:69:f9:48:db:ca:2a:
97:f5:1e:30:44:8b:c2:78:63:a7:73:c6:85:93:0f:72:70:ba:
a3:be:86:9c:db:cf:3f:e0:7e:f6:54:15:16:d6:e1:ba:3f:d1:
81:ef:ed:e9:f4:99:2e:ff:9d:9b:b0:17:f3:bd:a1:2a:ad:0c:
e0:93:15:3a:91:4d:e5:d1:fc:fa:92:95:43:44:c4:10:33:69:
0e:c2:5c:9c:98:45:a7:c8:3c:41:c9:98:30:44:06:d1:f1:ed:
dd:e3:76:22:f4:2d:92:ce:78:0f:13:87:71:c9:dc:df:da:df:
a8:35:d3:46:1b:ba:a3:a7:53:91:d8:62:ab:c3:9a:24:93:ad:
98:c5:59:dd:57:58:f9:7d:9f:08:80:08:81:15:b5:49:83:69:
85:0b:62:54:b2:10:85:05:7f:21:42:00:2e:23:32:5c:9f:e3:
cd:64:64:a2:af:c8:50:ad:de:e4:7c:31:b7:ac:85:88:95:1b:
fc:8d:25:a4:26:88:aa:f0:f8:19:1a:a7:50:48:e9:86:45:28:
c5:a7:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:44 2026 by rpki-client